Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          EDDQQua3uV3fIHtR+nnTdtDif3xSyIC4WNHS2PK4RL8=
Subject key identifier:   66:43:7D:34:D3:39:34:A8:54:BE:A1:F9:BA:2E:EF:33:51:12:EE:3A
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       02B4B75DEFC3BA20EEEB7C525D3ED5CC42D6634B
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa
Signing time:             Tue 04 Nov 2025 00:08:29 +0000
ROA not before:           Tue 04 Nov 2025 00:03:29 +0000
ROA not after:            Tue 03 Nov 2026 00:08:29 +0000
asID:                     9304
IP address blocks:        40.27.12.0/24 maxlen: 24
                          40.27.16.0/24 maxlen: 24
                          40.27.76.0/22 maxlen: 24
                          40.27.93.0/24 maxlen: 24
                          40.27.231.0/24 maxlen: 24
                          40.27.240.0/24 maxlen: 24
                          40.27.241.0/24 maxlen: 24
                          40.27.242.0/24 maxlen: 24
                          40.27.248.0/24 maxlen: 24
                          40.27.249.0/24 maxlen: 24
                          40.27.250.0/24 maxlen: 24
                          40.27.251.0/24 maxlen: 24
                          40.27.252.0/24 maxlen: 24
                          40.27.253.0/24 maxlen: 24
                          40.27.254.0/24 maxlen: 24
                          40.27.255.0/24 maxlen: 24
                          40.183.88.0/22 maxlen: 24
                          40.183.150.0/24 maxlen: 24
                          40.183.153.0/24 maxlen: 24
                          40.183.192.0/24 maxlen: 24
                          40.183.224.0/24 maxlen: 24
                          40.183.225.0/24 maxlen: 24
                          40.183.230.0/24 maxlen: 24
                          40.183.231.0/24 maxlen: 24
                          40.183.237.0/24 maxlen: 24
                          40.183.241.0/24 maxlen: 24
                          40.183.242.0/24 maxlen: 24
                          40.183.243.0/24 maxlen: 24
                          40.183.244.0/24 maxlen: 24
                          40.223.16.0/24 maxlen: 24
                          40.223.17.0/24 maxlen: 24
                          40.223.183.0/24 maxlen: 24
                          40.223.189.0/24 maxlen: 24
                          40.223.190.0/24 maxlen: 24
                          40.223.191.0/24 maxlen: 24
                          40.223.192.0/24 maxlen: 24
                          40.223.193.0/24 maxlen: 24
                          40.223.194.0/24 maxlen: 24
                          40.223.240.0/24 maxlen: 24
                          40.223.241.0/24 maxlen: 24
                          40.223.244.0/24 maxlen: 24
                          40.223.245.0/24 maxlen: 24
                          40.223.246.0/24 maxlen: 24
                          40.223.247.0/24 maxlen: 24
                          40.223.248.0/24 maxlen: 24
                          40.223.249.0/24 maxlen: 24
                          40.223.250.0/24 maxlen: 24
                          40.223.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:55:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b4:b7:5d:ef:c3:ba:20:ee:eb:7c:52:5d:3e:d5:cc:42:d6:63:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Nov  4 00:03:29 2025 GMT
            Not After : Nov  3 00:08:29 2026 GMT
        Subject: CN=66437D34D33934A854BEA1F9BA2EEF335112EE3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4c:45:64:6f:8b:f3:73:a6:d2:55:fd:f1:f1:
                    06:d0:30:b8:1c:ba:4d:5d:f9:b2:ba:d3:cc:d6:a5:
                    d5:0b:b4:4f:2d:12:f2:c5:7f:b9:e3:b9:d8:67:a0:
                    3c:85:bb:0d:bc:6d:a2:5c:b8:97:83:0d:3d:32:44:
                    8c:bb:e5:ea:94:03:19:55:57:d5:43:4f:69:7f:ab:
                    5e:bf:6b:c3:84:ba:47:4e:42:97:cf:69:fe:ed:17:
                    88:d5:89:57:e4:00:84:f4:b0:e3:f6:8d:aa:8a:c4:
                    38:17:bf:da:9d:60:45:df:6d:c5:cc:6f:65:db:d6:
                    a2:b7:2d:9a:c5:72:b4:1a:7c:d1:ad:4d:34:e6:f1:
                    f2:b3:ce:4c:87:38:14:70:70:10:98:ad:3c:2e:b0:
                    2c:ce:f5:bf:74:d6:2f:f9:f6:ee:a4:97:49:88:38:
                    b6:43:ac:e4:69:8b:66:86:55:14:6f:89:95:5b:16:
                    62:42:f7:5a:f9:7a:29:bf:06:bc:4f:28:e3:5d:ca:
                    1f:d8:7a:62:18:bd:46:12:ea:5e:07:d2:4d:2e:fb:
                    78:96:d4:be:0b:b8:a1:48:dc:1e:b6:fe:54:66:84:
                    f6:5a:d3:75:cc:d5:a5:02:17:80:e1:03:c1:d6:fc:
                    ed:59:53:4d:09:b7:64:66:fe:00:e9:03:55:ac:a7:
                    99:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:43:7D:34:D3:39:34:A8:54:BE:A1:F9:BA:2E:EF:33:51:12:EE:3A
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.12.0/24
                  40.27.16.0/24
                  40.27.76.0/22
                  40.27.93.0/24
                  40.27.231.0/24
                  40.27.240.0-40.27.242.255
                  40.27.248.0/21
                  40.183.88.0/22
                  40.183.150.0/24
                  40.183.153.0/24
                  40.183.192.0/24
                  40.183.224.0/23
                  40.183.230.0/23
                  40.183.237.0/24
                  40.183.241.0-40.183.244.255
                  40.223.16.0/23
                  40.223.183.0/24
                  40.223.189.0-40.223.194.255
                  40.223.240.0/23
                  40.223.244.0-40.223.250.255
                  40.223.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:7e:5d:89:bf:36:92:31:d6:9d:c2:19:a0:5e:c3:5a:a5:20:
         38:71:99:4c:8d:9b:52:1a:77:35:d8:3b:98:f6:f2:1c:2c:57:
         58:05:f6:1e:42:7d:ff:e6:97:49:ab:a0:76:ba:18:44:b5:20:
         33:02:63:93:14:31:87:2d:a6:74:fb:de:c2:f2:9f:4c:95:76:
         fe:6c:a7:c6:4c:00:4a:cf:76:31:ea:56:c8:57:74:53:5a:06:
         be:9c:52:1a:db:57:37:68:e5:10:c6:d5:bb:da:1d:77:e5:d0:
         27:e9:e3:b8:ab:83:b8:65:7b:c4:02:77:fa:8b:c2:bf:9b:ca:
         36:2f:3c:d1:a8:0d:14:89:93:92:63:f5:7c:f5:2f:fa:bf:ee:
         52:b3:64:93:df:ae:8b:ce:21:06:42:d8:d5:85:78:9d:bf:f5:
         66:03:3f:e8:e6:f8:56:46:b5:ba:ec:9d:88:15:36:e2:73:24:
         71:a9:82:a5:6f:d5:a9:96:0a:93:0f:94:bc:d1:ad:db:05:52:
         f1:82:43:a0:3f:e8:c6:84:27:44:d0:e6:23:9f:ba:5c:03:6f:
         45:fb:f5:87:69:f0:3d:15:1d:e9:6a:58:1a:aa:06:aa:fe:48:
         c9:95:02:33:b9:f2:a5:49:91:62:0d:95:b5:e6:68:5b:f7:60:
         be:78:8e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:07:38 2025 by rpki-client