Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9009.roa
File:                     AS9009.roa (raw, json)
Hash identifier:          QK0QA9u/4s+0yvamSZ2whYQR04BgU3kC3LrEiakfLxw=
Subject key identifier:   B6:FC:85:32:96:EF:E4:60:C0:FC:4D:46:7F:2A:91:55:0A:3E:D9:A6
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1DAD61CCA1FE52FD45615F319184E1E312861CA3
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9009.roa
Signing time:             Tue 08 Sep 2026 08:50:48 +0000
ROA not before:           Tue 08 Sep 2026 08:45:48 +0000
ROA not after:            Tue 07 Sep 2027 08:50:48 +0000
asID:                     9009
IP address blocks:        206.53.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:46:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ad:61:cc:a1:fe:52:fd:45:61:5f:31:91:84:e1:e3:12:86:1c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Sep  8 08:45:48 2026 GMT
            Not After : Sep  7 08:50:48 2027 GMT
        Subject: CN=B6FC853296EFE460C0FC4D467F2A91550A3ED9A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5d:8c:a8:05:e7:ff:64:da:90:38:2f:02:42:
                    2b:99:42:90:1e:f1:39:23:f6:f8:1f:84:cc:a0:e3:
                    60:eb:e1:6e:92:71:e3:14:de:1e:0a:59:49:b6:c6:
                    c3:a7:42:c1:22:4e:47:3d:db:b1:50:32:67:32:73:
                    a3:e0:c3:f1:51:f2:46:a7:fc:ab:fe:de:79:fb:29:
                    18:4f:88:a9:d3:6a:fe:72:ac:3c:b7:7d:75:25:b3:
                    b6:bc:4f:81:df:34:c1:61:5d:4e:22:b3:17:48:83:
                    e9:92:22:9e:c3:08:15:1c:90:26:ca:b7:5e:a0:42:
                    9b:62:6f:7b:b2:08:0a:87:bd:c2:bd:5e:e6:2a:12:
                    a4:69:48:91:a2:33:ed:ad:ff:74:d9:40:b6:05:a3:
                    3b:e0:20:8e:c9:08:b9:da:5c:89:07:04:79:1e:fb:
                    22:6b:ee:10:3f:d6:32:63:09:11:8a:d0:91:32:a1:
                    54:a6:20:1e:d1:df:5f:3c:d7:1c:eb:5f:c9:9a:01:
                    cb:d2:87:f9:d6:d7:9f:bc:68:bd:0f:87:53:4c:fe:
                    2b:64:d1:9d:63:3f:7a:5c:f2:41:f6:53:96:e9:ea:
                    57:b2:f5:23:01:9e:cc:ee:ee:d6:6e:9e:cd:a6:4c:
                    14:39:cd:4e:cc:56:df:4b:6b:27:43:dd:49:4c:fd:
                    c2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FC:85:32:96:EF:E4:60:C0:FC:4D:46:7F:2A:91:55:0A:3E:D9:A6
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS9009.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:30:7d:60:16:03:c0:28:51:bc:29:ea:ab:43:2e:bd:87:41:
         50:81:b1:2e:23:6f:08:e7:c9:82:e2:08:f2:8b:8d:3d:47:3c:
         e8:c2:bb:4d:1a:ae:d4:7d:6b:c5:ed:08:18:1e:bd:30:60:19:
         34:9f:94:90:38:ea:e0:23:d7:a5:4e:5e:d2:6f:1b:0a:c3:64:
         a1:2a:1b:18:23:7a:d7:2b:02:38:70:ee:3c:f8:64:70:80:91:
         a0:ad:b4:b0:d2:58:50:e3:55:f0:69:a0:9b:39:94:7d:9c:20:
         b2:6f:e3:3d:a1:d9:f5:4d:7f:2c:2a:08:61:d0:c9:12:09:47:
         85:59:a1:8a:f8:48:ef:ff:5e:d7:52:fb:64:20:de:4d:fb:60:
         04:c0:45:ef:69:96:0a:7c:da:98:1e:37:2a:22:d0:62:e8:bf:
         ee:38:28:78:fe:b2:0a:67:fa:32:22:db:21:9a:af:1b:34:19:
         24:ce:b4:07:44:2c:25:d7:8b:22:1b:de:90:2c:f4:ee:4a:3d:
         16:e7:6b:d0:7a:c9:2b:1e:9f:4f:b7:d2:78:5b:ef:c1:6b:0a:
         a8:91:c0:9f:5d:cb:69:c6:03:37:da:64:f1:37:1c:34:55:84:
         5c:9d:c0:8d:a3:8e:a1:3c:82:10:44:bb:0a:0b:b3:de:76:40:
         d8:33:90:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:11:42 2026 by rpki-client