Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9009.roa
File:                     AS9009.roa (raw, json)
Hash identifier:          Gm1sDWvJCgAiK4DiQlS74Lf3wb5TeSvVb9eaU95IIs4=
Subject key identifier:   50:3E:9B:CA:6D:14:0C:C2:DB:76:9D:B3:AF:15:71:86:21:78:D7:57
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       0EA135F81DC4784F2C2F51AE74CF349EAC391E90
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9009.roa
Signing time:             Mon 06 Apr 2026 13:35:09 +0000
ROA not before:           Mon 06 Apr 2026 13:30:09 +0000
ROA not after:            Mon 05 Apr 2027 13:35:09 +0000
asID:                     9009
IP address blocks:        40.27.108.0/22 maxlen: 24
                          40.27.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:a1:35:f8:1d:c4:78:4f:2c:2f:51:ae:74:cf:34:9e:ac:39:1e:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr  6 13:30:09 2026 GMT
            Not After : Apr  5 13:35:09 2027 GMT
        Subject: CN=503E9BCA6D140CC2DB769DB3AF1571862178D757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7e:b5:58:32:c1:73:33:02:31:e0:13:06:16:
                    75:db:eb:35:6a:04:a7:c7:85:f1:6b:3b:de:a0:a6:
                    a0:a7:94:38:ba:90:1b:02:90:b3:de:60:25:ef:73:
                    97:5e:bc:26:2e:b6:52:ba:ff:3a:98:20:10:f8:bb:
                    3c:2a:a9:3a:a2:40:c7:e4:88:b1:66:7f:be:1d:5a:
                    be:91:fe:75:71:71:a3:b6:e7:0f:47:bb:d3:cb:86:
                    9f:92:ee:e3:a5:25:6d:06:53:2b:82:ac:09:e5:33:
                    63:13:cf:f7:22:21:b2:62:b2:ad:af:43:58:98:81:
                    55:75:de:30:35:af:61:3d:89:58:95:3a:c1:20:8e:
                    32:f6:b7:b2:6d:a2:dc:ab:f8:3f:c6:3b:43:d2:cf:
                    32:24:99:ce:90:a9:0e:2d:a2:96:a9:91:b5:60:70:
                    e3:88:63:fd:c3:87:fb:e6:ed:cd:ca:88:04:25:e2:
                    c0:aa:9f:a7:bc:a0:a8:80:8d:31:72:3b:52:82:04:
                    53:46:a6:fd:d1:f2:2d:76:86:71:a0:2e:d7:4a:54:
                    54:4b:3b:91:41:7a:c2:a3:4f:9c:56:53:4c:cf:56:
                    d9:9b:0f:4c:54:18:0b:17:38:0f:d9:66:71:50:46:
                    99:57:ce:f3:4d:76:69:bd:41:d6:3e:25:af:ee:17:
                    72:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3E:9B:CA:6D:14:0C:C2:DB:76:9D:B3:AF:15:71:86:21:78:D7:57
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9009.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.27.108.0/22
                  40.27.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:44:56:3e:32:12:f9:97:54:b0:18:4d:48:b2:ed:76:f1:d3:
         77:45:be:b1:83:db:85:7c:8d:a6:0f:2c:8f:42:25:7e:7c:41:
         9b:9f:98:1f:43:6f:37:c7:0b:2b:fc:b3:57:93:a2:6f:67:03:
         f3:46:bb:87:9c:0f:23:fc:5e:54:3b:75:be:16:6f:15:ec:2d:
         7e:62:b2:2a:6f:3a:1b:ad:8c:8e:ce:0d:8d:cb:c6:1c:c1:e6:
         12:24:5c:33:6d:7d:c9:8f:54:a7:8f:ad:11:40:43:b6:96:0e:
         3e:e2:c7:7a:12:1b:85:96:57:ab:e9:99:e1:0b:4a:3b:d9:4e:
         f2:0f:5b:71:fc:23:f5:43:7f:b3:6f:a6:f9:35:15:63:68:22:
         9e:28:b8:2c:42:66:62:3a:d8:9d:34:7a:7b:45:af:64:ed:9d:
         d3:de:8c:d9:70:87:c6:db:3c:58:18:7d:c0:7b:ad:c4:e7:d4:
         b2:5c:69:b2:40:a7:7e:43:c4:be:6e:0c:77:44:bd:ae:69:6c:
         89:ff:43:09:67:28:8f:fb:68:06:93:76:23:18:68:58:b0:b3:
         70:75:73:29:5b:e8:a6:36:bb:29:4b:5b:a9:f4:67:51:10:be:
         b6:bd:2e:56:f7:97:ca:90:65:53:93:ef:f0:d5:87:35:03:87:
         e4:16:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:43:44 2026 by rpki-client