Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS9009.roa
File:                     AS9009.roa (raw, json)
Hash identifier:          ZXNeBNOPNCb+ere/v/SincMgWJl7boYSbyG7CL7Vsd4=
Subject key identifier:   DA:4C:11:87:DB:73:25:7E:B3:08:81:FB:92:53:2E:8A:A6:10:E8:F5
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       0503D263F3C438A166C5E68029F94EA97589FD1E
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS9009.roa
Signing time:             Tue 02 Sep 2025 08:51:20 +0000
ROA not before:           Tue 02 Sep 2025 08:46:20 +0000
ROA not after:            Tue 01 Sep 2026 08:51:20 +0000
asID:                     9009
IP address blocks:        66.225.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 06:44:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:03:d2:63:f3:c4:38:a1:66:c5:e6:80:29:f9:4e:a9:75:89:fd:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Sep  2 08:46:20 2025 GMT
            Not After : Sep  1 08:51:20 2026 GMT
        Subject: CN=DA4C1187DB73257EB30881FB92532E8AA610E8F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a6:12:af:78:fc:d6:a0:e2:13:3f:63:9c:bb:
                    ff:2d:a5:d2:5a:ac:b9:56:03:d8:8e:eb:43:0e:91:
                    bc:1b:8b:d0:97:3f:6c:86:a1:86:73:33:97:07:54:
                    cb:29:72:0f:03:da:cb:25:ad:66:4d:15:3a:e9:14:
                    28:24:d4:1b:ed:48:b9:ff:e2:b0:87:5a:55:d0:ae:
                    a6:8f:b6:e3:f2:fd:51:5b:de:4c:64:f0:58:8a:89:
                    39:b8:54:e5:04:f1:00:5f:5f:55:b6:f7:4a:7f:5e:
                    f8:a3:90:0d:ab:2d:11:43:2b:87:c2:20:d0:52:13:
                    33:39:04:f9:86:ad:bf:cc:dc:5a:0a:9e:52:ab:31:
                    ce:b6:15:65:2d:5d:3e:f7:b0:a1:ea:83:fa:10:1d:
                    2a:0f:e9:f7:b9:58:92:c5:0c:d7:bf:7d:a9:f9:ee:
                    51:37:65:22:4e:ac:b6:bc:8a:c7:20:45:b4:b6:ff:
                    cc:5e:27:51:a7:bf:b5:11:3f:82:38:d1:78:9e:0c:
                    3f:8e:b4:0d:ff:0c:79:fb:7d:f5:a9:f5:84:80:21:
                    c7:67:4a:64:70:17:bc:04:b2:48:6e:b9:ad:b1:1e:
                    1f:e0:e9:e2:fd:16:86:d8:80:e1:18:a6:f6:b7:19:
                    8c:9c:70:36:fe:8b:d2:bf:9f:33:eb:3a:82:63:b0:
                    2d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4C:11:87:DB:73:25:7E:B3:08:81:FB:92:53:2E:8A:A6:10:E8:F5
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS9009.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:e7:c2:7d:76:69:f3:e7:05:81:b6:9c:31:5a:b7:18:ec:fb:
         5f:30:18:67:54:15:ab:fd:1a:4a:1d:b7:48:2f:cf:f4:32:de:
         95:72:84:91:8e:6b:07:18:a0:61:89:35:1a:e1:54:16:11:26:
         2e:8a:80:2c:cf:80:25:c3:6d:31:54:23:02:63:68:1e:46:70:
         f5:25:af:ef:5c:7c:78:ed:8b:6e:eb:79:4f:31:79:04:a2:50:
         4a:8b:40:e2:c5:39:1c:b8:30:f5:6d:50:e2:5a:b2:ec:84:6f:
         15:ac:94:05:45:11:b1:87:55:37:be:6e:9e:5b:6e:44:39:48:
         50:02:d7:f4:71:11:ce:3f:4c:a2:b2:a8:38:7d:83:4f:b3:19:
         d3:ce:26:bf:8b:ec:3e:1b:0e:54:d3:b6:cd:23:07:9c:98:05:
         37:f6:22:81:23:c7:da:f8:7f:c2:85:5d:97:d1:3c:53:1c:3e:
         27:44:4b:38:30:be:11:68:f7:8a:f1:ce:1c:bb:ac:ff:88:b5:
         9a:70:5b:37:b7:aa:9d:7c:13:e4:10:88:8b:a7:42:78:6b:cd:
         91:d0:b5:13:03:1f:b6:b0:bc:da:81:1c:ed:42:58:14:f9:1a:
         79:1f:17:c1:1e:ed:70:c1:57:b2:c5:14:78:d7:1d:9e:31:89:
         8c:e4:24:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:36:20 2025 by rpki-client