Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          c1GtWaZf0IF0DD6bupFB7sbO3HFJLiBxluLQileejX4=
Subject key identifier:   58:BF:E4:D0:63:D5:E0:16:F4:D0:C3:B7:01:C0:4A:A0:09:7C:8A:1B
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       77554EDF6FB039E49F0446519170A6D7DE7C45ED
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa
Signing time:             Wed 01 Apr 2026 10:03:10 +0000
ROA not before:           Wed 01 Apr 2026 09:58:10 +0000
ROA not after:            Wed 31 Mar 2027 10:03:10 +0000
asID:                     9304
IP address blocks:        104.234.104.0/24 maxlen: 24
                          104.234.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:21:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:55:4e:df:6f:b0:39:e4:9f:04:46:51:91:70:a6:d7:de:7c:45:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr  1 09:58:10 2026 GMT
            Not After : Mar 31 10:03:10 2027 GMT
        Subject: CN=58BFE4D063D5E016F4D0C3B701C04AA0097C8A1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:63:db:e7:68:37:27:79:d2:14:33:3f:b6:
                    c0:16:cb:51:f1:5e:84:ee:1d:3e:24:29:44:b0:85:
                    57:28:6c:8b:50:15:cb:25:80:86:f1:9c:73:61:e3:
                    84:a1:ff:ae:da:78:83:75:2d:ff:98:4c:5a:64:f9:
                    b3:84:82:6c:6d:de:81:90:f3:1f:71:73:66:4d:91:
                    55:c5:bb:a4:44:a0:21:a2:b1:d1:ab:bc:ed:06:02:
                    b3:96:c7:ec:b1:95:0b:e6:b6:24:67:c5:75:35:05:
                    3d:52:10:7b:37:37:68:ac:dc:c1:86:d0:23:32:3c:
                    5b:17:62:01:17:61:57:85:a3:37:9a:85:b4:7e:99:
                    a3:92:d7:77:cf:ff:6f:af:da:37:8e:31:69:35:45:
                    01:43:c9:1d:e8:f9:6b:57:ea:b8:8a:8d:1c:db:65:
                    46:81:c6:8a:02:98:d5:bc:2c:20:dd:bc:37:e2:e6:
                    30:df:18:e5:2c:40:db:dc:85:73:84:08:27:f5:14:
                    89:42:00:a5:d0:8d:2a:c7:7b:f0:74:cd:29:81:bf:
                    24:36:c6:66:59:d9:ce:ec:13:ef:b7:77:d5:a9:ee:
                    05:ec:1d:84:ca:21:6d:c0:74:4d:20:bb:9c:53:58:
                    0d:c0:23:a1:72:90:c9:ae:40:6c:2f:3e:ed:f3:fe:
                    b0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BF:E4:D0:63:D5:E0:16:F4:D0:C3:B7:01:C0:4A:A0:09:7C:8A:1B
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.104.0/24
                  104.234.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:bd:a6:de:f5:2d:1f:9b:b1:6a:c2:2d:ec:d3:c5:c9:de:c9:
         9e:01:c5:9d:1d:70:0c:ee:f5:2b:53:7b:1a:3f:dd:83:be:dd:
         0e:74:12:6e:66:58:66:b8:9f:2c:83:47:46:8f:96:d7:16:05:
         81:9a:3f:10:2c:38:e9:fe:63:e1:2a:2a:60:22:90:93:3d:3e:
         73:8f:c0:fd:ab:cb:cd:2d:eb:18:87:f4:c9:7b:71:c0:2c:a6:
         d2:35:0f:a3:57:53:c3:51:17:ff:3f:25:1a:e4:56:81:f0:37:
         6b:5f:c3:32:a8:1d:37:21:4e:35:1e:ce:cc:f8:bc:b6:16:99:
         4c:62:f1:cb:c4:21:ab:1f:5c:d2:7f:1e:2f:4b:dd:b5:14:5e:
         75:2b:4a:70:2b:27:3a:6c:3b:ad:2d:1b:d5:91:69:86:79:64:
         d1:2e:e5:ed:18:62:cb:ea:cd:04:f7:72:10:52:79:c0:e5:47:
         91:84:26:87:6b:4a:d6:13:d4:d6:9f:8b:68:62:18:fa:88:d4:
         61:63:2e:6c:06:43:89:e0:d9:64:5e:63:47:2d:22:2a:67:af:
         d8:02:df:23:f9:38:56:f7:d6:12:97:d0:99:55:4f:89:f9:bd:
         05:d0:d0:eb:84:9e:e6:f8:f6:a0:42:32:6e:ef:e4:14:53:2a:
         e9:3b:69:cf
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIUd1VO32+wOeSfBEZRkXCm1958Re0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzJjYzFmZDI4ZDRhMDRjODQ3M2MzYWMwYjE5OTQwMjcw
Y2JiZjEyM2YzYzBiMWY3ZjkwHhcNMjYwNDAxMDk1ODEwWhcNMjcwMzMxMTAwMzEw
WjAzMTEwLwYDVQQDEyg1OEJGRTREMDYzRDVFMDE2RjREMEMzQjcwMUMwNEFBMDA5
N0M4QTFCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtddj2+doNyd5
0hQzP7bAFstR8V6E7h0+JClEsIVXKGyLUBXLJYCG8ZxzYeOEof+u2niDdS3/mExa
ZPmzhIJsbd6BkPMfcXNmTZFVxbukRKAhorHRq7ztBgKzlsfssZUL5rYkZ8V1NQU9
UhB7NzdorNzBhtAjMjxbF2IBF2FXhaM3moW0fpmjktd3z/9vr9o3jjFpNUUBQ8kd
6PlrV+q4io0c22VGgcaKApjVvCwg3bw34uYw3xjlLEDb3IVzhAgn9RSJQgCl0I0q
x3vwdM0pgb8kNsZmWdnO7BPvt3fVqe4F7B2EyiFtwHRNILucU1gNwCOhcpDJrkBs
Lz7t8/6wsQIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFFi/5NBj1eAW9NDDtwHASqAJ
fIobMB8GA1UdIwQYMBaAFKtcr6lXBjNzOJPZHuSwWh8OzNBrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1YzVjYjliY2IyYmFjLzAv
QUI1Q0FGQTk1NzA2MzM3MzM4OTNEOTFFRTRCMDVBMUYwRUNDRDA2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzNmNWUyZTViLWM3MzEtNGRiOC05Yjg3LWFmOWY4ZTU4YTFjNi83MmNj
MWZkMjhkNGEwNGM4NDczYzNhYzBiMTk5NDAyNzBjYmJmMTIzZjNjMGIxZjdmOS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NTg3ZmEyMDAxODVjNWNiOWJj
YjJiYWMvMC9BUzkzMDQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwJQYI
KwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBABo6mgDBABo6rgwDQYJKoZIhvcNAQEL
BQADggEBAAq9pt71LR+bsWrCLezTxcneyZ4BxZ0dcAzu9StTexo/3YO+3Q50Em5m
WGa4nyyDR0aPltcWBYGaPxAsOOn+Y+EqKmAikJM9PnOPwP2ry80t6xiH9Ml7ccAs
ptI1D6NXU8NRF/8/JRrkVoHwN2tfwzKoHTchTjUezsz4vLYWmUxi8cvEIasfXNJ/
Hi9L3bUUXnUrSnArJzpsO60tG9WRaYZ5ZNEu5e0YYsvqzQT3chBSecDlR5GEJodr
StYT1Nafi2hiGPqI1GFjLmwGQ4ng2WReY0ctIipnr9gC3yP5OFb31hKX0JlVT4n5
vQXQ0OuEnub49qBCMm7v5BRTKuk7ac8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:28:49 2026 by rpki-client