Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          QaNmxGP4Z1EP43050peOAgDX5cKrAx2Bfqk3oKusWdE=
Subject key identifier:   B4:64:DF:E8:CF:3C:D8:B0:54:AD:85:5E:26:C6:EF:D8:A4:F8:06:EE
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       58FA4C037C7DF1878893A60CF337B618E23E9F7C
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
Signing time:             Thu 10 Jul 2025 05:20:46 +0000
ROA not before:           Thu 10 Jul 2025 05:15:46 +0000
ROA not after:            Thu 09 Jul 2026 05:20:46 +0000
asID:                     9304
IP address blocks:        104.234.104.0/24 maxlen: 24
                          104.234.112.0/24 maxlen: 24
                          104.234.135.0/24 maxlen: 24
                          104.234.184.0/24 maxlen: 24
                          104.234.211.0/24 maxlen: 24
                          206.53.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 07:41:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fa:4c:03:7c:7d:f1:87:88:93:a6:0c:f3:37:b6:18:e2:3e:9f:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Jul 10 05:15:46 2025 GMT
            Not After : Jul  9 05:20:46 2026 GMT
        Subject: CN=B464DFE8CF3CD8B054AD855E26C6EFD8A4F806EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:7a:7c:8a:42:28:ce:65:ff:9c:18:91:9c:
                    06:b8:db:1e:7e:9d:96:8f:cf:b1:76:61:9d:73:da:
                    6b:61:21:bd:7e:4f:a6:48:f1:89:50:c3:b6:46:ac:
                    22:e6:a9:dc:82:a7:a5:c6:f6:c6:46:53:d4:2a:5f:
                    41:46:fc:2f:31:7f:78:59:89:22:ca:32:be:fb:87:
                    f8:3b:5e:31:ef:7f:16:78:37:16:1b:ff:87:6e:65:
                    f3:74:6d:e1:93:26:88:2a:9b:71:93:20:14:0e:28:
                    12:47:23:5d:a0:88:a2:06:dd:6e:bc:f4:82:67:ec:
                    3c:3a:70:ef:71:60:c5:a2:c9:ae:53:a3:05:68:76:
                    ee:bb:4c:68:87:ef:80:af:22:16:9d:9e:7c:46:03:
                    c1:80:f4:9b:5f:55:9a:4e:0e:c7:f4:98:02:5d:e4:
                    0d:88:8f:0b:f0:58:7d:d4:2b:78:5c:30:9f:98:b2:
                    58:e0:32:12:b4:3b:d4:1a:7b:dc:bf:2f:08:24:07:
                    c7:8e:39:4b:ce:24:1f:8b:6b:a2:55:f2:58:14:fc:
                    69:2b:fa:7c:a2:b9:85:ba:bb:b7:50:58:72:46:1d:
                    b1:13:85:18:48:1f:29:d3:9d:44:07:a7:32:68:31:
                    c7:7a:a5:a4:2b:d2:e5:b4:7d:e3:fc:11:83:87:82:
                    c3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:64:DF:E8:CF:3C:D8:B0:54:AD:85:5E:26:C6:EF:D8:A4:F8:06:EE
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.104.0/24
                  104.234.112.0/24
                  104.234.135.0/24
                  104.234.184.0/24
                  104.234.211.0/24
                  206.53.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:71:bb:40:b3:a9:e4:76:9e:e6:42:cf:3e:32:75:62:14:fa:
         62:e4:75:0b:a9:b7:08:ea:9b:b4:c1:ec:71:79:30:b5:84:72:
         5c:a3:cd:cb:48:39:f8:0f:a8:ee:b4:88:72:09:5a:33:d4:4a:
         cd:95:75:8e:08:65:49:17:db:da:28:00:49:39:0e:f3:93:74:
         58:c4:80:45:c3:ec:23:73:93:6e:c7:a1:21:6b:ed:47:cb:13:
         ac:03:27:8c:09:99:7a:15:a5:64:c4:f7:65:83:46:23:24:fa:
         58:f4:84:77:84:4c:21:34:f7:a6:7d:92:d7:a1:ad:8d:60:d9:
         24:8a:11:8d:97:f1:31:25:52:60:66:02:21:0d:59:a6:9a:22:
         4f:3a:cd:e3:28:c5:51:a3:bd:69:80:87:fa:df:0f:69:df:f1:
         f3:2b:b1:30:b2:37:8b:c8:ee:13:58:f1:f1:97:2e:c3:73:ca:
         8f:70:67:9f:f8:09:47:b7:6b:c1:20:c5:d5:36:70:54:9c:c1:
         22:30:40:85:3c:3b:0a:ad:d3:06:60:a8:09:3d:2a:1b:c8:26:
         3b:f7:03:8d:f5:be:09:08:50:8f:86:c3:02:ed:cf:f8:ba:1a:
         f1:b3:36:ae:01:d8:a0:4b:2f:42:33:f8:d0:9f:08:59:d0:08:
         a4:44:1f:3c
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgIUWPpMA3x98YeIk6YM8ze2GOI+n3wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjUwNzEwMDUxNTQ2WhcNMjYwNzA5MDUyMDQ2
WjAzMTEwLwYDVQQDEyhCNDY0REZFOENGM0NEOEIwNTRBRDg1NUUyNkM2RUZEOEE0
RjgwNkVFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyR6fIpCKM5l
/5wYkZwGuNsefp2Wj8+xdmGdc9prYSG9fk+mSPGJUMO2Rqwi5qncgqelxvbGRlPU
Kl9BRvwvMX94WYkiyjK++4f4O14x738WeDcWG/+HbmXzdG3hkyaIKptxkyAUDigS
RyNdoIiiBt1uvPSCZ+w8OnDvcWDFosmuU6MFaHbuu0xoh++AryIWnZ58RgPBgPSb
X1WaTg7H9JgCXeQNiI8L8Fh91Ct4XDCfmLJY4DIStDvUGnvcvy8IJAfHjjlLziQf
i2uiVfJYFPxpK/p8ormFuru3UFhyRh2xE4UYSB8p051EB6cyaDHHeqWkK9LltH3j
/BGDh4LDXwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLRk3+jPPNiwVK2FXibG79ik
+AbuMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwPQYI
KwYBBQUHAQcBAf8ELjAsMCoEAgABMCQDBABo6mgDBABo6nADBABo6ocDBABo6rgD
BABo6tMDBADONT4wDQYJKoZIhvcNAQELBQADggEBAHBxu0CzqeR2nuZCzz4ydWIU
+mLkdQuptwjqm7TB7HF5MLWEclyjzctIOfgPqO60iHIJWjPUSs2VdY4IZUkX29oo
AEk5DvOTdFjEgEXD7CNzk27HoSFr7UfLE6wDJ4wJmXoVpWTE92WDRiMk+lj0hHeE
TCE096Z9ktehrY1g2SSKEY2X8TElUmBmAiENWaaaIk86zeMoxVGjvWmAh/rfD2nf
8fMrsTCyN4vI7hNY8fGXLsNzyo9wZ5/4CUe3a8EgxdU2cFScwSIwQIU8Owqt0wZg
qAk9KhvIJjv3A431vgkIUI+GwwLtz/i6GvGzNq4B2KBLL0Iz+NCfCFnQCKREHzw=
-----END CERTIFICATE-----
Generated at Mon Aug 4 07:40:57 2025 by rpki-client