Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          VHjBjxLINrdHprsYH/WwcAr0jxAvllXP56/37UCtLtg=
Subject key identifier:   F2:6D:4A:3A:A2:15:3A:EE:59:FA:A7:6C:40:B8:3D:4E:9A:11:00:DD
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       72137D2CA5CCB02B4F8B4F1FEA2A61CA876D9972
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
Signing time:             Fri 20 Jun 2025 09:35:11 +0000
ROA not before:           Fri 20 Jun 2025 09:30:11 +0000
ROA not after:            Fri 19 Jun 2026 09:35:11 +0000
asID:                     9304
IP address blocks:        104.234.104.0/24 maxlen: 24
                          104.234.184.0/24 maxlen: 24
                          104.234.211.0/24 maxlen: 24
                          206.53.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:13:7d:2c:a5:cc:b0:2b:4f:8b:4f:1f:ea:2a:61:ca:87:6d:99:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jun 20 09:30:11 2025 GMT
            Not After : Jun 19 09:35:11 2026 GMT
        Subject: CN=F26D4A3AA2153AEE59FAA76C40B83D4E9A1100DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:46:c7:8f:5e:b7:d7:e6:3b:e9:2c:3f:69:da:
                    38:6f:28:6a:a6:43:1e:7d:13:4b:e8:ed:e6:d9:48:
                    9a:52:c4:ae:52:30:b3:65:31:58:f9:d5:d7:cd:77:
                    3f:eb:65:9d:0c:73:5d:8d:fc:ac:b6:f4:41:4e:6f:
                    6d:2a:77:a3:cf:3e:67:ec:d4:2d:8f:26:6f:09:ff:
                    c2:b9:36:93:e4:93:b8:c0:09:a8:a7:1d:b1:db:6c:
                    4a:76:ae:60:19:1d:31:dd:9b:45:08:d3:92:2f:17:
                    41:94:4e:54:50:69:d3:b2:98:6b:87:9a:f8:b5:ac:
                    80:25:c7:97:ce:36:47:c2:a2:f8:2d:4b:f5:52:10:
                    0a:71:f1:d2:d2:eb:9a:da:01:eb:7c:e5:fd:4f:9f:
                    9e:9a:10:31:28:7c:3c:f0:b7:38:a9:0a:93:92:bf:
                    15:e9:e8:15:0a:54:55:d0:f6:04:9e:62:6e:49:7d:
                    91:38:b7:90:1f:c6:80:68:6c:14:67:d0:a5:91:78:
                    62:30:2d:be:6b:1e:f9:75:a7:52:2d:57:4a:de:05:
                    97:78:a7:b3:fc:12:84:8d:26:e7:35:4a:e5:1a:e4:
                    35:88:ea:2d:7d:d9:97:95:94:15:e3:cd:2e:48:ca:
                    36:79:7c:62:eb:43:e3:6b:2f:9c:31:8c:e1:c7:0b:
                    11:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6D:4A:3A:A2:15:3A:EE:59:FA:A7:6C:40:B8:3D:4E:9A:11:00:DD
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.104.0/24
                  104.234.184.0/24
                  104.234.211.0/24
                  206.53.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:7f:ff:ec:34:ec:09:f1:6f:fd:d0:52:60:00:b0:20:2d:2c:
         5b:ad:80:0e:fc:ba:d0:3f:55:91:c2:d1:20:ea:c7:c5:ab:f2:
         4c:c0:4d:f2:35:92:81:dd:32:c2:92:af:97:ff:3a:a1:4c:14:
         e5:33:1c:06:d5:92:95:c5:15:15:a7:ec:fa:cc:90:aa:31:4d:
         3a:60:af:06:3f:79:ab:e7:11:4c:97:38:23:65:d4:d2:d7:09:
         45:31:c9:c1:28:85:04:be:3e:ea:f7:30:dc:ee:e6:94:f4:7d:
         d7:0c:3c:df:8a:86:e1:a5:d6:14:ae:5b:b2:45:9b:c6:ac:ac:
         77:9b:96:43:f0:bb:05:1a:d1:e2:28:b0:86:66:72:cf:32:fc:
         cd:2c:dc:1d:de:20:52:f2:55:d7:bc:0a:ad:5e:d5:f4:6c:d3:
         2f:c5:a3:45:b6:3a:dc:d3:e2:37:b7:20:d8:89:16:b3:1b:f5:
         ff:90:53:4b:06:01:66:20:f2:b4:be:b0:88:75:53:45:47:7e:
         dd:b5:db:67:c7:c8:2b:b1:4e:4f:18:81:ce:cf:d9:3a:3f:42:
         4c:fb:ca:a8:46:59:fa:fe:07:1a:a0:0e:72:5e:85:19:5b:43:
         d2:d3:66:c0:78:f8:da:d2:64:7d:97:eb:c3:e7:4b:91:1a:02:
         72:07:ec:61
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIUchN9LKXMsCtPi08f6iphyodtmXIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNjIwMDkzMDExWhcNMjYwNjE5MDkzNTEx
WjAzMTEwLwYDVQQDEyhGMjZENEEzQUEyMTUzQUVFNTlGQUE3NkM0MEI4M0Q0RTlB
MTEwMEREMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0bHj1631+Y7
6Sw/ado4byhqpkMefRNL6O3m2UiaUsSuUjCzZTFY+dXXzXc/62WdDHNdjfystvRB
Tm9tKnejzz5n7NQtjyZvCf/CuTaT5JO4wAmopx2x22xKdq5gGR0x3ZtFCNOSLxdB
lE5UUGnTsphrh5r4tayAJceXzjZHwqL4LUv1UhAKcfHS0uua2gHrfOX9T5+emhAx
KHw88Lc4qQqTkr8V6egVClRV0PYEnmJuSX2ROLeQH8aAaGwUZ9ClkXhiMC2+ax75
dadSLVdK3gWXeKez/BKEjSbnNUrlGuQ1iOotfdmXlZQV480uSMo2eXxi60Pjay+c
MYzhxwsRBwIDAQABo4ICjzCCAoswHQYDVR0OBBYEFPJtSjqiFTruWfqnbEC4PU6a
EQDdMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwMQYI
KwYBBQUHAQcBAf8EIjAgMB4EAgABMBgDBABo6mgDBABo6rgDBABo6tMDBADONT4w
DQYJKoZIhvcNAQELBQADggEBAHZ//+w07Anxb/3QUmAAsCAtLFutgA78utA/VZHC
0SDqx8Wr8kzATfI1koHdMsKSr5f/OqFMFOUzHAbVkpXFFRWn7PrMkKoxTTpgrwY/
eavnEUyXOCNl1NLXCUUxycEohQS+Pur3MNzu5pT0fdcMPN+KhuGl1hSuW7JFm8as
rHeblkPwuwUa0eIosIZmcs8y/M0s3B3eIFLyVde8Cq1e1fRs0y/Fo0W2OtzT4je3
INiJFrMb9f+QU0sGAWYg8rS+sIh1U0VHft2122fHyCuxTk8Ygc7P2To/Qkz7yqhG
Wfr+BxqgDnJehRlbQ9LTZsB4+NrSZH2X68PnS5EaAnIH7GE=
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:22:54 2025 by rpki-client