Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          dZBe6X2GW3DwQuhbvQkNsQipjZn3QU4WDADbHMAEZh8=
Subject key identifier:   9F:2A:4E:AA:84:09:C3:01:2D:C4:A3:D1:8E:1D:EB:22:1B:97:97:C8
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3A1EF09CD0440465162B2A80FCE44FC76C6AC9DB
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa
Signing time:             Mon 18 Aug 2025 16:06:33 +0000
ROA not before:           Mon 18 Aug 2025 16:01:33 +0000
ROA not after:            Mon 17 Aug 2026 16:06:33 +0000
asID:                     9304
IP address blocks:        157.254.9.0/24 maxlen: 24
                          157.254.25.0/24 maxlen: 24
                          157.254.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 09:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:1e:f0:9c:d0:44:04:65:16:2b:2a:80:fc:e4:4f:c7:6c:6a:c9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 18 16:01:33 2025 GMT
            Not After : Aug 17 16:06:33 2026 GMT
        Subject: CN=9F2A4EAA8409C3012DC4A3D18E1DEB221B9797C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b7:93:74:2b:8d:36:a9:5d:3b:f1:db:a8:0a:
                    4b:9c:7c:5e:d4:3f:d9:90:b1:4e:18:c3:7e:92:be:
                    d0:aa:89:76:c4:77:94:be:87:54:00:93:b7:b9:d5:
                    bd:85:1f:f9:2c:64:4d:76:2e:f5:a4:48:a8:a4:64:
                    c6:2f:fd:58:58:c0:c7:f7:de:2c:2c:46:50:2b:fa:
                    e1:4a:e8:15:48:7d:64:bd:ff:bd:03:4b:d2:e7:ec:
                    0e:e2:a8:bf:54:15:7e:81:24:5f:08:49:29:b9:17:
                    16:d2:9f:43:5d:f9:c1:65:79:ef:a8:80:7e:20:99:
                    cf:cf:c4:91:7e:d5:71:78:d0:2b:1a:d8:f4:2e:98:
                    8a:95:ea:b7:c4:c4:fa:ba:35:7b:47:19:b6:cd:99:
                    46:85:d4:cc:89:6c:39:30:57:51:4a:b5:63:36:0d:
                    76:4e:ea:4e:3d:3d:fe:13:96:76:5e:62:3d:4e:71:
                    96:ec:22:b1:c5:d4:49:76:1e:be:eb:a7:b2:b0:f5:
                    b7:73:1c:02:fc:53:23:85:64:e7:79:1d:0f:2e:68:
                    cf:7d:28:6d:95:87:f6:aa:d5:21:c3:03:4b:d2:6b:
                    68:d7:9c:63:d0:f6:88:21:e5:be:3d:77:f6:9e:e3:
                    4a:74:11:25:30:53:89:1e:d3:ab:de:51:9c:b4:fd:
                    5c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:2A:4E:AA:84:09:C3:01:2D:C4:A3:D1:8E:1D:EB:22:1B:97:97:C8
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.9.0/24
                  157.254.25.0/24
                  157.254.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:44:12:67:3b:bc:76:f2:19:61:54:d3:6a:74:0e:e4:b1:fc:
         b0:c7:b4:c1:37:1f:f1:49:50:23:de:c8:62:c3:d7:aa:b2:82:
         ba:f4:d2:0d:3b:50:aa:71:1e:1d:45:5b:b2:c8:86:58:3e:cc:
         f7:19:36:73:a9:58:6a:4d:dd:6c:c2:5d:2e:c5:8b:b4:fd:eb:
         c7:bf:19:44:57:26:25:ec:dd:fc:97:55:37:02:d2:14:7a:a7:
         7f:a8:d1:6a:aa:f9:0d:6b:f4:b5:a3:6e:e3:21:8a:31:8e:06:
         4f:2f:8e:97:04:9f:df:47:6b:42:7c:88:64:af:15:6f:b7:ae:
         f9:9d:1a:95:a9:95:6f:12:f2:07:70:57:56:ef:47:34:8e:66:
         4c:22:36:05:7b:e4:a0:e8:af:1e:1e:71:1e:80:f0:de:7b:d1:
         d5:1b:2f:fe:65:a5:bb:67:e9:77:94:56:ac:86:04:ca:c1:11:
         6b:ab:56:28:1f:f0:67:0f:0b:8b:cc:5a:99:5e:22:08:5d:30:
         16:dc:0e:64:84:21:c9:96:56:5e:17:6d:a1:18:16:05:60:7b:
         97:27:05:7d:c0:26:0a:8a:87:85:7b:e0:84:b8:25:16:83:90:
         3e:1d:1c:89:24:38:9e:d9:9a:19:4d:78:5b:16:4f:fe:05:d4:
         d9:45:7d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:47 2025 by rpki-client