Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          qkA0e3YKaMaERMan+9gd024LcxBiA4rV/rY0gGCkOAQ=
Subject key identifier:   3B:0C:13:E9:7E:5D:15:2C:B8:FD:7B:1A:49:70:10:DB:99:99:37:3D
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       13A0AD6C8C9233A9C0455F11530B450812EB5802
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa
Signing time:             Mon 16 Feb 2026 00:00:12 +0000
ROA not before:           Sun 15 Feb 2026 23:55:12 +0000
ROA not after:            Mon 15 Feb 2027 00:00:12 +0000
asID:                     9304
IP address blocks:        23.94.89.0/24 maxlen: 24
                          23.226.128.0/24 maxlen: 24
                          64.50.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 23:16:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:a0:ad:6c:8c:92:33:a9:c0:45:5f:11:53:0b:45:08:12:eb:58:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Feb 15 23:55:12 2026 GMT
            Not After : Feb 15 00:00:12 2027 GMT
        Subject: CN=3B0C13E97E5D152CB8FD7B1A497010DB9999373D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:82:4a:f2:da:36:eb:9d:b9:ab:27:12:a9:ed:
                    da:75:d4:cd:60:48:71:e9:90:b3:d9:1a:07:88:11:
                    4b:0b:c1:5f:6a:28:8c:d8:ab:12:83:38:e4:6f:fb:
                    d6:fe:22:ea:68:fc:ec:33:4a:d0:6b:1b:85:c4:4e:
                    8a:9f:a7:d4:bc:52:12:54:94:7e:c5:74:b1:01:b9:
                    93:bb:64:7c:b9:82:c4:30:cd:cb:46:e0:13:08:e7:
                    f7:a5:46:c5:12:14:59:28:d2:64:26:6c:31:26:b9:
                    be:69:91:b7:ef:22:36:20:9f:d2:7c:7f:83:b7:e5:
                    41:28:b2:3e:f8:72:47:96:02:c6:30:13:e8:e1:19:
                    06:b7:cd:b3:8e:be:55:72:be:d2:31:7d:9d:e1:f8:
                    c3:88:ea:7c:c8:3c:b6:26:fb:0f:00:0f:3f:b1:80:
                    0a:b6:d9:48:c3:87:0a:40:69:d3:d1:ca:10:43:e5:
                    8e:57:1a:0f:53:7b:60:fb:4b:29:f5:8e:bb:b8:5a:
                    a1:28:94:a7:fc:6e:b4:41:19:1f:b6:6b:c1:a2:5e:
                    bb:8b:a4:dd:49:bb:cc:dd:2d:f7:db:07:d2:ce:a9:
                    74:33:98:e8:bc:2b:76:00:c6:5a:98:0e:3c:bf:57:
                    23:ac:f0:56:34:9e:e7:19:a8:a2:be:6e:59:6f:6a:
                    0f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0C:13:E9:7E:5D:15:2C:B8:FD:7B:1A:49:70:10:DB:99:99:37:3D
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.89.0/24
                  23.226.128.0/24
                  64.50.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:4b:d2:99:ec:65:d7:49:c2:eb:87:d0:33:e1:f7:08:92:c2:
         52:d9:c2:62:0d:a7:14:97:5b:07:62:2e:b5:c4:ba:cc:1a:88:
         78:78:0c:a2:a2:8c:ca:78:f0:5b:f5:0a:9b:b6:f7:f9:7f:65:
         9c:00:14:bf:ee:b7:c1:fa:98:ac:3d:ff:53:f1:0b:66:c6:28:
         bd:c1:14:15:1f:a7:49:bb:13:67:f5:7c:50:a3:56:db:01:6c:
         a8:2e:0b:f4:4c:34:44:3b:f1:99:9d:42:1b:9a:ef:cf:04:0b:
         05:b0:de:84:b8:6d:50:93:9d:28:b9:a7:ad:30:7c:c5:1c:e4:
         03:08:68:b7:5d:b2:9d:c8:8b:6f:06:b8:13:ec:88:82:b0:03:
         0f:98:22:60:00:ec:af:a4:af:7d:32:62:38:92:82:25:4f:b8:
         57:13:9d:a3:45:dd:36:0c:b0:05:9a:a4:6e:cf:e8:c0:f8:66:
         a3:d4:85:5c:46:ee:cf:e7:eb:e3:4d:e4:19:f8:ca:94:20:b3:
         ff:dd:18:15:fe:51:08:53:cb:4d:82:46:4a:d9:df:32:59:e7:
         a7:b1:29:b9:23:c3:45:3c:20:22:fd:cc:89:82:5a:9c:10:9b:
         15:b1:80:34:42:2a:d9:e5:e4:9b:9c:c1:98:e0:ff:73:5d:86:
         27:15:32:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:10:26 2026 by rpki-client