Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS9009.roa
File:                     AS9009.roa (raw, json)
Hash identifier:          VfUec6X8EYsP4sEd/GfrdYBxU9qEA5xxryuWoYd/xts=
Subject key identifier:   6C:66:CD:41:B0:B2:D0:B0:11:23:46:C3:12:59:BC:55:5D:2E:6C:C8
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       10DD9EA00F52F2E05832432E52B94A5EE9A1940B
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS9009.roa
Signing time:             Fri 14 Feb 2025 07:47:06 +0000
ROA not before:           Fri 14 Feb 2025 07:42:06 +0000
ROA not after:            Fri 13 Feb 2026 07:47:06 +0000
asID:                     9009
IP address blocks:        66.225.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:dd:9e:a0:0f:52:f2:e0:58:32:43:2e:52:b9:4a:5e:e9:a1:94:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Feb 14 07:42:06 2025 GMT
            Not After : Feb 13 07:47:06 2026 GMT
        Subject: CN=6C66CD41B0B2D0B0112346C31259BC555D2E6CC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d8:e2:78:06:4c:17:c5:fb:8c:94:3a:e4:54:
                    10:eb:d8:47:0e:f6:fc:10:51:49:c0:9b:5b:8a:c6:
                    c6:90:6a:40:c2:ac:84:48:88:84:7a:6c:95:2e:66:
                    ed:ba:9a:d2:47:86:26:34:15:0f:93:36:95:43:36:
                    f0:eb:b3:bd:7f:d7:96:a9:2e:57:56:92:2f:1b:ae:
                    3b:de:03:09:43:0b:69:d8:16:47:a1:e3:1a:cb:a3:
                    5a:40:9b:51:51:df:8f:8e:e2:49:b3:da:ea:56:3b:
                    9a:19:7b:8c:51:5a:b7:98:13:80:86:83:2b:7e:8e:
                    89:b6:78:5a:1e:c1:29:1c:48:52:50:20:e0:78:c9:
                    0b:11:25:71:40:8d:1e:55:a6:e9:38:9b:7f:4a:62:
                    84:83:94:5c:3b:4b:5e:44:11:c7:90:d1:23:c1:2f:
                    f0:b8:d7:77:c5:7a:9e:e6:ae:44:58:00:82:4b:4a:
                    f6:56:6a:2a:f4:41:8b:7d:cc:01:2a:d8:99:af:46:
                    bb:13:be:49:61:a0:85:8c:70:05:bc:92:0c:96:42:
                    73:51:34:9c:fe:7c:d6:eb:e2:57:c3:f7:4a:7b:b6:
                    df:c1:92:37:b2:03:06:b9:fa:c1:f2:1b:d5:5c:fa:
                    98:89:21:37:3e:aa:3c:9e:85:e8:18:2a:54:72:3d:
                    98:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:66:CD:41:B0:B2:D0:B0:11:23:46:C3:12:59:BC:55:5D:2E:6C:C8
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS9009.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:94:6c:50:d6:c9:4f:05:62:9b:4c:37:d1:79:cd:fb:a6:dc:
         1b:57:83:0a:88:76:a3:3b:41:b1:58:03:7f:25:0f:94:d4:99:
         b0:c1:92:bb:ef:7d:47:34:02:2f:f5:33:14:94:eb:41:5a:2d:
         f4:79:e5:31:a3:b7:87:f2:c2:71:b5:67:62:cc:87:ba:94:c8:
         80:44:ad:b5:90:a7:30:46:3c:04:4b:ba:39:6b:c6:28:41:86:
         67:3e:25:a9:47:19:c2:d6:84:6e:88:9e:6a:d8:f3:25:c0:fb:
         03:2f:05:ae:40:16:8a:be:ad:4d:26:bd:fb:39:c4:09:e7:4b:
         f9:ec:6d:0d:1b:2a:ad:87:48:fd:cc:43:f8:10:10:9e:d9:65:
         45:d2:4a:f9:3e:ef:c0:6c:30:ee:fa:e5:42:f5:bb:ab:52:1b:
         20:13:01:7d:67:cd:21:2e:2c:c0:44:e9:2a:9c:78:2b:a7:cb:
         a0:fc:26:7f:e5:7b:28:5e:31:62:c4:65:d4:fc:78:5c:a3:2f:
         dd:46:0b:f8:bf:87:08:9f:b2:fc:28:ac:a8:a4:f8:85:ad:72:
         42:74:ac:92:34:01:6d:f6:97:06:c8:e3:aa:d7:99:ac:9f:ed:
         c2:0d:75:c1:82:ca:83:e2:2c:02:0d:34:c1:43:13:6f:be:4c:
         41:ab:0c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:32:15 2025 by rpki-client