Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS9009.roa
File:                     AS9009.roa (raw, json)
Hash identifier:          rlMQg5HY14ziWoibYz5hmwPv39PODaRWZkCXMt1OkkQ=
Subject key identifier:   78:34:CF:A0:01:30:B1:D2:41:C6:29:41:95:DA:CB:53:BC:82:E3:01
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       5D4EBA4FD8E04059DAC077EA63A01E154897F472
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS9009.roa
Signing time:             Thu 19 Oct 2023 13:07:55 +0000
ROA not before:           Thu 19 Oct 2023 13:02:55 +0000
ROA not after:            Thu 17 Oct 2024 13:07:55 +0000
asID:                     9009
IP address blocks:        66.225.209.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/ad9b3010-3116-464e-8c58-9586500f1701.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Apr 2024 09:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:4e:ba:4f:d8:e0:40:59:da:c0:77:ea:63:a0:1e:15:48:97:f4:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: Oct 19 13:02:55 2023 GMT
            Not After : Oct 17 13:07:55 2024 GMT
        Subject: CN=7834CFA00130B1D241C6294195DACB53BC82E301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:2d:4b:a9:01:fa:8b:fd:4e:1a:c4:db:d5:
                    68:53:97:65:ce:95:4e:72:bc:9d:7b:2f:15:40:00:
                    a7:b1:66:79:4d:18:e9:f1:c3:1c:92:86:c7:78:a2:
                    19:eb:56:73:0b:ff:5e:d8:a4:1f:64:f2:14:54:8c:
                    46:1a:3b:4c:4c:13:41:7d:45:36:1f:03:44:19:35:
                    d1:b7:36:a4:43:6b:8b:5d:d7:65:05:28:de:4a:5d:
                    e1:6d:d8:03:6e:f3:07:99:69:39:c1:94:1f:da:66:
                    6e:7c:2b:67:6b:92:4d:a3:8d:b8:cd:52:2d:0f:56:
                    47:f3:8e:a9:95:e6:8e:4b:04:bb:48:f8:a0:ce:3a:
                    42:74:94:23:41:9b:fb:d7:d5:6f:a5:91:84:dd:c9:
                    02:1c:87:c8:8a:d5:a6:f3:e8:06:82:30:5a:09:94:
                    24:2b:f4:7b:50:55:06:ca:30:dd:3d:3a:3c:bd:8d:
                    0a:8b:3e:e2:01:6f:8d:e4:1f:86:12:cb:d5:5b:15:
                    cc:ba:2e:d9:44:c2:55:d9:91:00:6a:b0:bf:cc:08:
                    c9:94:00:67:f1:2d:42:f1:e5:7c:b8:5c:19:38:b5:
                    fc:a0:28:df:28:3f:8a:1f:f4:6e:0d:e7:c7:95:ce:
                    50:9e:f5:b5:7e:3e:14:4e:be:82:1d:c5:74:35:a5:
                    d4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:34:CF:A0:01:30:B1:D2:41:C6:29:41:95:DA:CB:53:BC:82:E3:01
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS9009.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:87:45:8a:3a:1e:f0:eb:e1:d4:dc:bd:5b:c9:3a:2b:65:eb:
         d9:ad:67:bb:71:27:ef:bb:07:80:21:9f:9e:2d:aa:6a:82:90:
         cc:87:4d:46:b9:69:6f:2f:ff:40:c6:ac:00:9c:b9:23:cd:ff:
         e1:94:e4:75:f6:35:c1:dd:ef:eb:2f:d5:04:8c:b8:cf:09:75:
         17:d9:15:45:df:85:da:37:b4:46:b5:83:99:7f:e8:5f:61:3a:
         ca:89:bf:78:db:65:03:ed:2b:43:0f:56:61:76:f9:10:d2:f4:
         b9:57:bd:3d:27:c8:b2:4d:86:88:2c:ad:57:84:99:1f:ce:8c:
         e4:76:7e:63:b9:68:24:6a:8c:e3:0b:16:d5:b6:bb:24:56:0f:
         1e:21:ef:02:48:fe:e1:b7:f5:fc:93:ca:3c:09:91:70:a1:d8:
         66:ad:24:cb:69:32:22:37:72:28:7d:f7:ca:44:7a:4f:bf:79:
         3f:a2:79:7f:3c:b2:3c:ed:70:2b:5b:84:73:58:03:2f:c6:e1:
         66:42:6b:8a:0b:75:f0:ce:a6:84:8e:11:0f:e3:71:28:9a:73:
         77:58:33:3f:a0:02:dd:42:23:e4:3f:f1:fd:ec:cd:7e:51:99:
         75:e4:16:82:e0:2c:8b:61:04:c8:02:5a:b2:24:86:0f:e0:00:
         ab:a1:cb:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 08:10:32 2024 by rpki-client on console-ams.rpki-client.org