Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          xNEnkPugyQvHENAaE4EN9QZJzaGX36j0eGzRwm0QsjQ=
Subject key identifier:   70:42:E0:10:A7:CA:1F:49:A6:7F:A2:93:2A:60:17:55:89:D9:43:40
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       5B7A898025779B07FE3548B6F4A2F6E61774847C
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa
Signing time:             Fri 27 Jun 2025 17:43:05 +0000
ROA not before:           Fri 27 Jun 2025 17:38:05 +0000
ROA not after:            Fri 26 Jun 2026 17:43:05 +0000
asID:                     9304
IP address blocks:        40.27.76.0/22 maxlen: 24
                          40.27.168.0/24 maxlen: 24
                          40.27.192.0/22 maxlen: 24
                          40.183.88.0/22 maxlen: 24
                          40.183.150.0/24 maxlen: 24
                          40.183.153.0/24 maxlen: 24
                          40.183.226.0/23 maxlen: 23
                          40.223.122.0/24 maxlen: 24
                          40.223.245.0/24 maxlen: 24
                          40.223.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 12:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7a:89:80:25:77:9b:07:fe:35:48:b6:f4:a2:f6:e6:17:74:84:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 27 17:38:05 2025 GMT
            Not After : Jun 26 17:43:05 2026 GMT
        Subject: CN=7042E010A7CA1F49A67FA2932A60175589D94340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:bb:1b:a8:91:66:01:de:bb:38:ba:b6:d9:92:
                    66:d9:d2:eb:2e:39:00:e8:c6:a8:42:92:f1:1d:f0:
                    18:37:72:a3:1d:a4:62:94:b4:92:ac:1c:70:c7:11:
                    fa:76:c9:34:f7:c4:a0:e3:97:80:6c:7c:14:1d:3e:
                    bc:25:d6:a4:5d:2c:d6:f1:01:28:38:06:dc:fc:a5:
                    e0:24:bc:3b:5d:2b:0d:b2:9b:be:48:8c:df:95:62:
                    15:e1:51:05:a2:22:6e:80:5f:bf:61:36:1d:a6:d1:
                    cc:b1:1d:a8:7e:7d:17:c3:56:13:d6:02:ec:02:02:
                    ef:b0:50:30:23:9f:ca:36:f5:98:ab:bd:e4:6c:34:
                    33:1a:88:ba:e5:cd:19:3a:5b:0b:27:4e:8c:3d:fa:
                    06:ae:85:fb:f3:91:e0:d7:04:b3:3e:1d:70:ca:7b:
                    de:a9:aa:08:59:02:1e:c6:87:a9:fa:1d:19:fe:4f:
                    96:86:ab:e2:2e:bb:f8:0e:6c:07:6e:7a:c4:ab:52:
                    21:e3:c6:5f:6e:1e:b7:02:ad:83:ca:a8:df:3e:b2:
                    c6:15:ef:45:e8:94:9e:e9:46:80:cc:54:1c:fd:cd:
                    7e:5c:9e:5c:a4:55:36:93:b1:87:02:32:03:20:5b:
                    6a:f2:f2:be:43:75:fb:e5:12:a6:27:82:be:20:d5:
                    2b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:42:E0:10:A7:CA:1F:49:A6:7F:A2:93:2A:60:17:55:89:D9:43:40
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.76.0/22
                  40.27.168.0/24
                  40.27.192.0/22
                  40.183.88.0/22
                  40.183.150.0/24
                  40.183.153.0/24
                  40.183.226.0/23
                  40.223.122.0/24
                  40.223.245.0/24
                  40.223.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:57:6f:10:9b:3d:83:de:db:91:9e:49:58:d7:14:f4:de:99:
         eb:b1:df:94:e1:53:8d:83:be:9f:88:73:23:8c:a4:34:28:5f:
         0c:5a:17:d2:1f:fb:da:d9:15:a9:fa:01:a8:49:44:a3:e5:0d:
         df:83:87:7b:8b:93:3d:e0:cc:65:bd:ea:6a:08:35:4f:04:7c:
         46:eb:6d:b4:08:d8:ea:8f:8a:93:c9:86:e5:27:f5:3e:3c:b5:
         e7:3f:6c:40:1c:3e:62:c4:4c:84:3a:d3:bb:0e:3a:94:1a:a5:
         55:6a:13:00:86:c0:12:b3:5b:8d:0f:41:ba:df:38:06:b5:60:
         3e:06:7a:97:30:37:09:e8:34:76:0e:dd:b9:76:16:42:ff:0e:
         60:8c:99:3d:d8:b9:30:6a:dd:c1:3d:f7:0a:58:bc:20:05:46:
         de:d8:dc:5c:42:68:cf:49:c8:c8:d0:7b:48:ef:27:ca:82:f8:
         be:39:4d:11:f4:b7:ba:cf:f0:c9:22:f8:57:f7:b8:3a:13:af:
         7f:32:e4:e8:12:c2:5f:5b:e6:f3:73:3f:d9:3e:28:ef:41:8c:
         dc:5f:e2:9f:b3:27:79:d2:6c:01:ab:32:e4:05:99:e4:91:c4:
         27:cb:47:13:a0:24:83:ad:ac:24:6c:b8:29:04:af:93:c3:0f:
         cf:fa:3f:85
-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIUW3qJgCV3mwf+NUi29KL25hd0hHwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyODk4MTIwNGI5MzQxMzU0MGY3ZDViODZmMGY5ZTc0ZjFk
YWFkZTMxZGYwZGIwZjM4OGUwHhcNMjUwNjI3MTczODA1WhcNMjYwNjI2MTc0MzA1
WjAzMTEwLwYDVQQDEyg3MDQyRTAxMEE3Q0ExRjQ5QTY3RkEyOTMyQTYwMTc1NTg5
RDk0MzQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbsbqJFmAd67
OLq22ZJm2dLrLjkA6MaoQpLxHfAYN3KjHaRilLSSrBxwxxH6dsk098Sg45eAbHwU
HT68JdakXSzW8QEoOAbc/KXgJLw7XSsNspu+SIzflWIV4VEFoiJugF+/YTYdptHM
sR2ofn0Xw1YT1gLsAgLvsFAwI5/KNvWYq73kbDQzGoi65c0ZOlsLJ06MPfoGroX7
85Hg1wSzPh1wynveqaoIWQIexoep+h0Z/k+WhqviLrv4DmwHbnrEq1Ih48Zfbh63
Aq2DyqjfPrLGFe9F6JSe6UaAzFQc/c1+XJ5cpFU2k7GHAjIDIFtq8vK+Q3X75RKm
J4K+INUr2wIDAQABo4ICszCCAq8wHQYDVR0OBBYEFHBC4BCnyh9Jpn+ikypgF1WJ
2UNAMB8GA1UdIwQYMBaAFCeK6Mq422vdgtde3W2FDRkgDR+TMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0Zjc1M2RjNjQxMTlkLzUv
Mjc4QUU4Q0FCOERCNkJERDgyRDc1RURENkQ4NTBEMTkyMDBEMUY5My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzJhMTM1NGM3LWFiY2EtNDFiNi04YjIxLTRlMzVhOGQ5YzJiNC84OTgx
MjA0YjkzNDEzNTQwZjdkNWI4NmYwZjllNzRmMWRhYWRlMzFkZjBkYjBmMzg4ZS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODRmNzUzZGM2
NDExOWQvNS9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwVQYI
KwYBBQUHAQcBAf8ERjBEMEIEAgABMDwDBAIoG0wDBAAoG6gDBAIoG8ADBAIot1gD
BAAot5YDBAAot5kDBAEot+IDBAAo33oDBAAo3/UDBAIo3/wwDQYJKoZIhvcNAQEL
BQADggEBABxXbxCbPYPe25GeSVjXFPTemeux35ThU42Dvp+IcyOMpDQoXwxaF9If
+9rZFan6AahJRKPlDd+Dh3uLkz3gzGW96moINU8EfEbrbbQI2OqPipPJhuUn9T48
tec/bEAcPmLETIQ607sOOpQapVVqEwCGwBKzW40PQbrfOAa1YD4GepcwNwnoNHYO
3bl2FkL/DmCMmT3YuTBq3cE99wpYvCAFRt7Y3FxCaM9JyMjQe0jvJ8qC+L45TRH0
t7rP8Mki+Ff3uDoTr38y5OgSwl9b5vNzP9k+KO9BjNxf4p+zJ3nSbAGrMuQFmeSR
xCfLRxOgJIOtrCRsuCkEr5PDD8/6P4U=
-----END CERTIFICATE-----
Generated at Sun Jun 29 03:37:57 2025 by rpki-client