Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/AS9009.roa
File:                     AS9009.roa (raw, json)
Hash identifier:          iI+gkTe4CxFLpBoTIB4pxTQSA1is9bDBzvEGA9LPwaU=
Subject key identifier:   2B:62:2B:9F:52:3B:71:92:DB:D0:FF:F3:1E:F5:32:A0:CC:CE:78:E5
Certificate issuer:       /CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
Certificate serial:       22AAF0AD0F58A023B6CF3F4E24A58CFFB6118A69
Authority key identifier: A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/AS9009.roa
Signing time:             Wed 15 Jul 2026 13:58:31 +0000
ROA not before:           Wed 15 Jul 2026 13:53:31 +0000
ROA not after:            Wed 14 Jul 2027 13:58:31 +0000
asID:                     9009
IP address blocks:        2602:ff62::/48 maxlen: 48
                          2602:ff62:1::/48 maxlen: 48
                          2602:ff62:2::/48 maxlen: 48
                          2602:ff62:3::/48 maxlen: 48
                          2602:ff62:4::/48 maxlen: 48
                          2602:ff62:5::/48 maxlen: 48
                          2602:ff62:6::/48 maxlen: 48
                          2602:ff62:7::/48 maxlen: 48
                          2602:ff62:8::/48 maxlen: 48
                          2602:ff62:d::/48 maxlen: 48
                          2602:ff62:111::/48 maxlen: 48
                          2602:ff62:112::/48 maxlen: 48
                          2602:ff62:113::/48 maxlen: 48
                          2602:ff62:114::/48 maxlen: 48
                          2602:ff62:115::/48 maxlen: 48
                          2602:ff62:116::/48 maxlen: 48
                          2602:ff62:124::/48 maxlen: 48
                          2602:ff62:125::/48 maxlen: 48
                          2602:ff62:126::/48 maxlen: 48
                          2602:ff62:127::/48 maxlen: 48
                          2602:ff62:128::/48 maxlen: 48
                          2602:ff62:129::/48 maxlen: 48
                          2602:ff62:12a::/48 maxlen: 48
                          2602:ff62:12b::/48 maxlen: 48
                          2602:ff62:12c::/48 maxlen: 48
                          2602:ff62:12d::/48 maxlen: 48
                          2602:ff62:12e::/48 maxlen: 48
                          2602:ff62:12f::/48 maxlen: 48
                          2602:ff62:184::/48 maxlen: 48
                          2602:ff62:185::/48 maxlen: 48
                          2602:ff62:210::/48 maxlen: 48
                          2602:ff62:213::/48 maxlen: 48
                          2602:ff62:214::/48 maxlen: 48
                          2602:ff62:215::/48 maxlen: 48
                          2602:ff62:216::/48 maxlen: 48
                          2602:ff62:217::/48 maxlen: 48
                          2602:ff62:218::/48 maxlen: 48
                          2602:ff62:219::/48 maxlen: 48
                          2602:ff62:21a::/48 maxlen: 48
                          2602:ff62:21b::/48 maxlen: 48
                          2602:ff62:21c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/6e579f5b-ec76-457b-99d5-466c7e4fefcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 00:41:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:aa:f0:ad:0f:58:a0:23:b6:cf:3f:4e:24:a5:8c:ff:b6:11:8a:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc
        Validity
            Not Before: Jul 15 13:53:31 2026 GMT
            Not After : Jul 14 13:58:31 2027 GMT
        Subject: CN=2B622B9F523B7192DBD0FFF31EF532A0CCCE78E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c0:d1:7f:78:4f:be:8d:2e:94:16:d5:00:32:
                    26:95:d6:62:56:67:04:8e:c4:0e:db:81:8e:ef:64:
                    18:49:ac:9e:b7:cb:f4:0f:71:6b:b1:5f:03:e4:ab:
                    b4:37:3c:26:fc:9e:82:80:e1:aa:aa:90:23:06:4c:
                    bd:43:00:8f:c3:62:07:86:ff:9d:99:c8:01:85:8a:
                    5d:ea:4d:a5:b1:ab:a0:15:ff:bd:d2:d1:ef:48:63:
                    6e:da:3e:14:77:6f:28:54:41:83:0a:47:87:8c:ca:
                    89:0e:d4:a6:c0:b6:25:e3:4e:6b:24:94:b0:5a:52:
                    3b:0e:f4:42:3b:40:ac:01:1c:ed:3e:7b:4b:b2:c4:
                    ec:5d:60:a2:59:6e:95:08:d8:da:83:a1:ef:aa:f3:
                    45:35:5f:d6:e6:d1:22:42:99:32:5b:1e:97:9f:4b:
                    57:32:e9:66:4a:2f:31:a2:9d:0f:49:3c:c3:57:1e:
                    3f:aa:6f:15:5c:db:da:89:b3:d9:b3:79:0a:64:8c:
                    69:4e:8d:e8:82:5d:a3:66:7a:ac:03:2a:f6:8e:78:
                    6b:07:68:f3:8f:d7:7e:d8:23:e0:ec:78:b0:db:bc:
                    bd:b5:07:96:2c:c6:86:6b:10:2f:ed:ef:66:d5:0d:
                    b7:9c:ef:ec:46:05:ad:52:47:05:c9:e6:11:17:db:
                    b2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:62:2B:9F:52:3B:71:92:DB:D0:FF:F3:1E:F5:32:A0:CC:CE:78:E5
            X509v3 Authority Key Identifier:
                keyid:A5:96:7F:B4:C1:70:87:1A:3C:A4:44:9E:B9:9F:2E:E3:EB:7A:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/A5967FB4C170871A3CA4449EB99F2EE3EB7AFA97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6e579f5b-ec76-457b-99d5-466c7e4fefcc/7fd6a57f46c857208c55fbf170b368a340eed1b069b1e3c1cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180dbd430c822fa/3/AS9009.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:ff62::-2602:ff62:8:ffff:ffff:ffff:ffff:ffff
                  2602:ff62:d::/48
                  2602:ff62:111::-2602:ff62:116:ffff:ffff:ffff:ffff:ffff
                  2602:ff62:124::-2602:ff62:12f:ffff:ffff:ffff:ffff:ffff
                  2602:ff62:184::/47
                  2602:ff62:210::/48
                  2602:ff62:213::-2602:ff62:21c:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5c:8c:7b:36:2f:f0:93:0d:f7:b7:09:83:00:21:34:18:8a:53:
         e1:fc:6e:00:b9:d6:22:b8:42:89:d9:46:8c:3d:02:e8:0f:44:
         b4:87:74:7a:13:97:a1:c3:5b:e6:13:9e:04:d4:ce:1e:b6:62:
         ea:8e:cb:53:77:c3:47:e1:16:c8:97:23:d7:9b:f2:a6:9d:3b:
         a1:68:08:25:70:9f:80:35:68:05:d1:7e:05:9d:90:f0:76:d1:
         c3:fc:31:d8:f1:b3:0b:b9:f2:3a:9e:7f:ab:19:37:3b:54:0e:
         b1:53:26:01:d4:8b:28:f3:b3:9b:53:d0:92:41:5f:95:80:36:
         e5:4d:32:27:52:13:a8:de:2c:68:69:bc:59:31:7d:47:4f:be:
         f9:15:e0:ff:18:50:64:2e:f8:b2:cc:ce:98:08:2c:71:ae:76:
         3d:c9:6a:8a:97:93:57:26:34:09:44:df:72:37:a5:ce:e1:ed:
         ec:ee:ce:39:5e:d3:3e:ca:f6:30:6d:36:d8:6e:3d:7a:36:45:
         88:84:fd:85:27:20:f4:3f:88:73:ce:9e:50:c0:9a:9f:9b:f8:
         57:2a:2c:6f:00:f9:fb:61:12:2d:32:3c:15:37:01:3f:25:9e:
         9c:2b:cb:cb:de:68:32:2f:3f:d4:c8:7b:f2:b3:d1:56:48:2e:
         20:5e:dc:07
-----BEGIN CERTIFICATE-----
MIIF4TCCBMmgAwIBAgIUIqrwrQ9YoCO2zz9OJKWM/7YRimkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2ZkNmE1N2Y0NmM4NTcyMDhjNTVmYmYxNzBiMzY4YTM0
MGVlZDFiMDY5YjFlM2MxY2MwHhcNMjYwNzE1MTM1MzMxWhcNMjcwNzE0MTM1ODMx
WjAzMTEwLwYDVQQDEygyQjYyMkI5RjUyM0I3MTkyREJEMEZGRjMxRUY1MzJBMEND
Q0U3OEU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMDRf3hPvo0u
lBbVADImldZiVmcEjsQO24GO72QYSayet8v0D3FrsV8D5Ku0Nzwm/J6CgOGqqpAj
Bky9QwCPw2IHhv+dmcgBhYpd6k2lsaugFf+90tHvSGNu2j4Ud28oVEGDCkeHjMqJ
DtSmwLYl405rJJSwWlI7DvRCO0CsARztPntLssTsXWCiWW6VCNjag6HvqvNFNV/W
5tEiQpkyWx6Xn0tXMulmSi8xop0PSTzDVx4/qm8VXNvaibPZs3kKZIxpTo3ogl2j
ZnqsAyr2jnhrB2jzj9d+2CPg7Hiw27y9tQeWLMaGaxAv7e9m1Q23nO/sRgWtUkcF
yeYRF9uycwIDAQABo4IC4TCCAt0wHQYDVR0OBBYEFCtiK59SO3GS29D/8x71MqDM
znjlMB8GA1UdIwQYMBaAFKWWf7TBcIcaPKREnrmfLuPrevqXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBhZTkxZGYwMTgwZGJkNDMwYzgyMmZhLzMv
QTU5NjdGQjRDMTcwODcxQTNDQTQ0NDlFQjk5RjJFRTNFQjdBRkE5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzQ2ZTAxMTEtZmFmYi00MzBmLWI3NzgtZDIwNGNm
Y2Q5OWE4LzZlNTc5ZjViLWVjNzYtNDU3Yi05OWQ1LTQ2NmM3ZTRmZWZjYy83ZmQ2
YTU3ZjQ2Yzg1NzIwOGM1NWZiZjE3MGIzNjhhMzQwZWVkMWIwNjliMWUzYzFjYy5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGFlOTFkZjAxODBkYmQ0MzBj
ODIyZmEvMy9BUzkwMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwgYIG
CCsGAQUFBwEHAQH/BHMwcTBvBAIAAjBpMBADBQEmAv9iAwcAJgL/YgAIAwcAJgL/
YgANMBIDBwAmAv9iAREDBwAmAv9iARYwEgMHAiYC/2IBJAMHBCYC/2IBIAMHASYC
/2IBhAMHACYC/2ICEDASAwcAJgL/YgITAwcAJgL/YgIcMA0GCSqGSIb3DQEBCwUA
A4IBAQBcjHs2L/CTDfe3CYMAITQYilPh/G4AudYiuEKJ2UaMPQLoD0S0h3R6E5eh
w1vmE54E1M4etmLqjstTd8NH4RbIlyPXm/KmnTuhaAglcJ+ANWgF0X4FnZDwdtHD
/DHY8bMLufI6nn+rGTc7VA6xUyYB1Iso87ObU9CSQV+VgDblTTInUhOo3ixoabxZ
MX1HT775FeD/GFBkLviyzM6YCCxxrnY9yWqKl5NXJjQJRN9yN6XO4e3s7s45XtM+
yvYwbTbYbj16NkWIhP2FJyD0P4hzzp5QwJqfm/hXKixvAPn7YRItMjwVNwE/JZ6c
K8vL3mgyLz/UyHvys9FWSC4gXtwH
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:17 2026 by rpki-client