Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS6939.roa
File:                     AS6939.roa (raw, json)
Hash identifier:          GE6wTPd1qgvxR4Mg3vMDm+aMBW1ox34adCWPcSos9BA=
Subject key identifier:   BE:BB:70:03:54:55:0A:55:53:EE:FF:6B:FA:8A:61:C7:1D:24:9C:C4
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6BC7ABFC43424608556D4E53765082E2771CAE18
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS6939.roa
Signing time:             Tue 03 Mar 2026 02:35:53 +0000
ROA not before:           Tue 03 Mar 2026 02:30:53 +0000
ROA not after:            Tue 02 Mar 2027 02:35:53 +0000
asID:                     6939
IP address blocks:        23.95.45.0/24 maxlen: 24
                          23.95.159.0/24 maxlen: 24
                          198.12.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 17:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c7:ab:fc:43:42:46:08:55:6d:4e:53:76:50:82:e2:77:1c:ae:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar  3 02:30:53 2026 GMT
            Not After : Mar  2 02:35:53 2027 GMT
        Subject: CN=BEBB700354550A5553EEFF6BFA8A61C71D249CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2e:b8:81:07:4e:c1:ac:cf:28:7f:45:f1:db:
                    cf:14:8b:9f:cc:d0:0e:96:21:64:53:74:f9:19:b9:
                    19:19:ee:b1:bd:38:2f:85:7a:d3:7f:05:66:c2:61:
                    bd:a8:99:1c:2c:bc:5d:80:a2:7d:f0:a9:fd:b8:24:
                    99:5e:d3:38:eb:4c:e0:78:37:8b:2d:6d:09:d2:a6:
                    a6:a3:65:81:4c:23:7e:6b:01:df:1f:67:7e:02:dc:
                    0d:aa:8c:8b:22:39:7c:c7:a7:2c:1d:3e:09:7e:15:
                    5c:2a:f5:3d:a7:1c:67:0f:a3:84:70:e2:9f:d4:5c:
                    87:9c:bf:57:eb:c3:5e:5a:06:40:b4:46:7f:e4:98:
                    f3:4e:a3:70:e2:21:91:78:99:da:cd:7c:45:f5:19:
                    38:a9:56:99:7f:b4:16:b8:47:f1:ec:41:9e:30:d5:
                    b8:67:95:df:e0:d9:7f:e4:c3:9b:91:bb:c9:8c:01:
                    36:bb:76:3c:39:48:c0:96:58:53:12:68:f9:f9:2e:
                    8e:72:db:a5:fa:ba:ed:7f:ff:de:07:91:c9:5b:fe:
                    c1:f3:45:36:c5:92:6f:04:e5:29:f3:98:53:6c:05:
                    4a:4c:27:86:88:8d:f9:74:4e:66:c4:13:92:1a:13:
                    2f:a9:af:98:4e:90:88:3b:60:6f:77:93:23:a9:9e:
                    88:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:BB:70:03:54:55:0A:55:53:EE:FF:6B:FA:8A:61:C7:1D:24:9C:C4
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS6939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.45.0/24
                  23.95.159.0/24
                  198.12.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:05:1c:a9:9c:ea:89:48:b2:37:7c:b9:0f:cf:cf:30:57:2b:
         45:35:a0:78:ae:3e:f2:de:1d:20:99:96:c7:5f:89:c5:d5:19:
         d7:87:fb:77:f1:3c:9f:b5:37:28:46:64:18:2c:73:a7:eb:bd:
         ce:41:c7:59:f2:3f:b1:33:5b:ac:90:99:68:8c:d3:4e:18:e0:
         ad:e2:cd:ac:04:b1:46:4b:98:ed:66:be:b0:ab:14:e9:d1:51:
         e4:6a:a5:3c:9e:d0:4b:41:51:47:b3:10:1b:e0:de:d6:79:e6:
         4d:f5:4c:ba:cd:37:91:e9:0b:18:b6:1b:2c:92:c2:7f:fd:d1:
         0f:36:3a:2e:d4:17:e0:96:38:04:dd:1a:e3:67:fb:89:2a:24:
         b0:82:50:db:4f:74:53:71:31:34:e2:f3:51:00:1c:61:d3:81:
         e7:00:cb:3c:c3:8d:35:f9:b5:5f:54:70:05:d1:76:4e:0e:c9:
         ae:38:3a:fd:b3:85:1a:57:72:1b:e6:37:88:c2:4e:51:35:00:
         21:cc:65:cb:dc:05:c5:5f:ab:8b:df:10:a1:f5:8a:69:1d:7c:
         1b:74:5f:fb:4e:33:7f:90:28:9c:27:42:45:37:12:7f:59:08:
         5b:52:b9:9d:5e:b9:bb:6c:d0:4b:5a:17:8d:2c:ec:23:4a:e1:
         7b:28:dd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 02:16:58 2026 by rpki-client