Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9009.roa
File:                     AS9009.roa (raw, json)
Hash identifier:          Itt9fAROL+XfoGrmij9OViFE8b8EP9gSASL0jRfoBdU=
Subject key identifier:   4D:00:BE:2F:51:6F:8E:EC:11:67:07:F3:B1:AC:43:57:FF:4E:81:08
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       770BC2CCB3D650FAC2D3E84C5063B32894575D94
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9009.roa
Signing time:             Wed 13 Mar 2024 00:02:04 +0000
ROA not before:           Tue 12 Mar 2024 23:57:04 +0000
ROA not after:            Wed 12 Mar 2025 00:02:04 +0000
asID:                     9009
IP address blocks:        206.53.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 13:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:0b:c2:cc:b3:d6:50:fa:c2:d3:e8:4c:50:63:b3:28:94:57:5d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Mar 12 23:57:04 2024 GMT
            Not After : Mar 12 00:02:04 2025 GMT
        Subject: CN=4D00BE2F516F8EEC116707F3B1AC4357FF4E8108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:f6:26:ed:84:1f:44:2f:6f:eb:5a:00:5c:
                    94:c2:e8:5f:96:64:30:5b:06:0a:a9:c2:b4:b8:cf:
                    bb:d2:e9:88:3f:0b:21:db:61:bf:1a:22:29:ed:6c:
                    55:51:a9:78:5d:e1:f4:94:29:87:87:39:37:03:43:
                    3b:fd:e6:d5:0d:3b:c2:94:23:ab:99:6d:4d:a0:33:
                    81:73:e9:8e:85:84:fa:3e:a3:ee:07:b7:44:36:94:
                    a7:37:cf:c8:d9:e9:5a:75:73:2e:63:97:9c:9b:18:
                    66:17:68:1c:cd:da:7b:ea:3a:a9:fd:a8:9b:f6:e7:
                    94:4c:71:ba:9d:53:62:9a:f3:22:c7:b4:96:ca:e5:
                    c0:08:38:7c:6a:a8:a9:7a:c3:d6:76:cf:91:8b:33:
                    d2:5f:5e:e0:aa:d3:b5:d3:1e:a2:c5:e4:ce:de:d5:
                    be:40:03:65:72:f8:bf:d8:1e:2a:f8:83:5d:59:00:
                    73:5c:47:ed:28:6d:41:33:8c:18:4d:a5:62:09:95:
                    75:46:c0:cf:90:ae:b1:0d:0f:a9:1b:04:15:25:36:
                    a3:bd:4d:2f:8e:cc:52:24:f4:11:70:f2:da:bd:5f:
                    68:be:f7:34:a0:7e:c1:ac:cb:03:be:68:4b:8b:a6:
                    82:d3:ac:b1:cc:7c:89:f3:7f:b2:7a:16:bf:70:a1:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:00:BE:2F:51:6F:8E:EC:11:67:07:F3:B1:AC:43:57:FF:4E:81:08
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9009.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:ae:99:0d:ae:bf:44:ea:e6:71:40:e5:c0:2a:1d:e1:ad:de:
         d6:b8:2b:fa:9d:2d:be:f0:0a:b6:e8:83:55:a7:7d:31:ae:83:
         12:c1:8e:21:4c:b0:92:74:90:69:1a:e3:4c:86:61:52:95:df:
         dd:2a:a3:82:6c:44:53:21:6f:7d:aa:47:7f:1d:10:5a:e2:c0:
         00:0d:59:01:e3:df:cd:82:6a:76:bd:38:03:f4:82:5a:b2:c4:
         4b:67:0c:48:e2:87:74:10:1c:5a:cb:2c:4f:08:d0:d1:18:6d:
         d1:0e:79:4a:96:3f:7a:a0:88:42:6b:94:9c:1f:16:b4:10:ad:
         cb:a7:d4:76:b9:e2:da:95:50:18:88:7e:f2:05:1d:a3:17:c7:
         fd:36:49:36:7d:ca:75:80:fa:97:10:2f:92:85:e1:8f:d2:95:
         18:d6:eb:f6:60:fc:61:d4:27:15:2d:fb:01:ca:8d:50:9a:90:
         32:57:6b:d5:e3:2a:d4:a6:9f:11:02:6b:74:c2:56:51:56:5a:
         ab:e1:2c:09:1b:e3:c8:8b:ae:06:fa:e1:28:1c:50:9f:eb:c4:
         cf:3a:cf:e9:5a:9d:fb:1f:d2:59:6f:ca:8c:a7:e2:0e:18:2b:
         2c:5f:17:41:67:02:ad:bf:8d:f4:84:bb:a8:6c:aa:7d:32:69:
         9b:a2:cf:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:47:28 2024 by rpki-client on console-fra.rpki-client.org