Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9009.roa
File:                     AS9009.roa (raw, json)
Hash identifier:          fhjMTGxR2ES8Vx8mn1XtJd2ZW/yHzNfNJP7fiR9wGKc=
Subject key identifier:   A7:11:49:FE:9E:07:CD:62:05:EA:19:4B:77:28:58:D0:0B:58:43:46
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       79A2E2D6A9B14D7232BC51545F6A0FFA69F48C01
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9009.roa
Signing time:             Thu 19 Jun 2025 09:39:36 +0000
ROA not before:           Thu 19 Jun 2025 09:34:36 +0000
ROA not after:            Thu 18 Jun 2026 09:39:36 +0000
asID:                     9009
IP address blocks:        40.183.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 12:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:a2:e2:d6:a9:b1:4d:72:32:bc:51:54:5f:6a:0f:fa:69:f4:8c:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Jun 19 09:34:36 2025 GMT
            Not After : Jun 18 09:39:36 2026 GMT
        Subject: CN=A71149FE9E07CD6205EA194B772858D00B584346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:29:56:e3:39:27:10:59:83:0c:87:e0:60:ef:
                    b3:6a:42:63:4e:61:e6:fc:b7:2d:0d:29:68:eb:ce:
                    c9:92:c6:18:71:e3:38:9a:e3:f3:cf:74:ef:9e:fe:
                    ed:bb:49:0e:44:f2:4c:fe:88:35:0d:54:4e:8b:ac:
                    d3:f3:dd:9b:b6:d3:9b:36:fd:19:d6:b3:8e:9c:db:
                    32:06:fe:d1:8e:e4:d3:62:2b:43:25:03:e5:b5:93:
                    6b:d3:97:a5:ea:18:fc:b0:2b:ba:22:ec:6d:03:3e:
                    ef:7b:b6:48:d8:5e:1d:ac:ad:74:f9:ce:3d:c4:ae:
                    aa:e7:06:b9:c8:b5:d0:ea:20:9c:09:0e:32:b2:bd:
                    3c:9f:6d:f1:b8:27:79:82:23:cc:8b:27:5a:f5:e0:
                    b2:f3:08:d1:fb:a4:78:d6:6e:66:30:99:60:9c:90:
                    b5:3a:2a:42:76:f7:36:72:06:a8:bb:b9:ee:12:d6:
                    60:21:a1:9d:26:da:26:ec:2e:63:73:0b:42:0d:6d:
                    c1:83:b8:67:d0:9b:a5:7a:50:29:9c:9c:08:e3:b3:
                    3d:af:72:a6:40:1a:cd:5f:46:69:03:95:a1:25:ea:
                    23:4d:37:ea:00:0b:cb:a2:59:36:47:e6:53:85:09:
                    b0:82:93:e8:ae:a2:ce:52:07:54:58:86:9f:c7:9f:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:11:49:FE:9E:07:CD:62:05:EA:19:4B:77:28:58:D0:0B:58:43:46
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/AS9009.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4d:68:c7:2a:39:24:20:93:ba:0b:d6:33:b7:aa:ed:27:9e:dd:
         c1:3b:05:2d:c8:48:c1:df:43:23:a9:79:e8:d6:38:ad:c8:82:
         fd:71:da:50:44:fd:b4:e1:26:81:e9:32:19:17:38:84:3b:cc:
         d1:d3:f7:c9:de:18:2e:53:e7:79:00:d8:de:14:f8:1d:30:04:
         5e:da:ce:34:aa:22:4f:e3:eb:c1:54:8f:be:f1:99:bd:c5:10:
         41:eb:65:8d:ac:66:fa:e2:7b:3e:0e:26:07:bc:19:e0:c7:72:
         13:8c:49:4e:02:a8:1e:90:3b:64:e0:2c:3d:18:e6:2a:cb:9f:
         a8:a6:41:2d:0d:d2:3e:fd:8b:6c:b9:e6:a1:57:c0:88:bd:31:
         58:c6:ff:2f:74:73:e0:50:c0:05:06:95:9e:60:0f:0f:57:10:
         44:e7:55:0a:88:6e:d1:37:53:b0:42:22:8b:81:70:5a:73:8b:
         47:5c:5b:3a:eb:0a:e7:31:52:9f:f3:4c:d8:0b:b5:a1:f1:87:
         51:cd:9d:97:d1:2d:53:c7:a7:c0:51:e8:c0:27:47:27:8d:12:
         22:d3:2d:0a:92:e4:75:01:7a:cd:8e:da:0c:48:fa:6d:49:40:
         4c:b2:84:ad:bf:b8:f4:11:de:18:b9:b2:9e:42:d6:07:2e:f3:
         2d:68:f7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:06 2025 by rpki-client