Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS6079.roa
File:                     AS6079.roa (raw, json)
Hash identifier:          BSgA+/Wu7aBvxKOjQYzV0XMsFoTfQpo3674/yr46ulE=
Subject key identifier:   BE:9F:3D:86:01:13:F5:58:B3:B0:83:B5:67:05:2D:58:7E:44:B0:D6
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       51D4A62400C4FDFB153F1D89360BC6DC041CE624
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS6079.roa
Signing time:             Thu 03 Jul 2025 15:51:40 +0000
ROA not before:           Thu 03 Jul 2025 15:46:40 +0000
ROA not after:            Thu 02 Jul 2026 15:51:40 +0000
asID:                     6079
IP address blocks:        2a06:9f42::/32 maxlen: 48
                          2a09:54c4::/32 maxlen: 48
                          2a0a:6046::/32 maxlen: 48
                          2a0d:d904::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d4:a6:24:00:c4:fd:fb:15:3f:1d:89:36:0b:c6:dc:04:1c:e6:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul  3 15:46:40 2025 GMT
            Not After : Jul  2 15:51:40 2026 GMT
        Subject: CN=BE9F3D860113F558B3B083B567052D587E44B0D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:03:a4:58:20:0b:b3:c5:75:ea:1d:aa:17:a2:
                    12:ee:d8:c5:11:3c:a6:b1:a3:3b:ce:eb:04:2d:db:
                    2a:f1:e6:f6:20:bb:c7:85:18:4a:ad:79:92:26:13:
                    ea:ba:0b:e2:8a:1c:4b:94:75:a4:a3:5d:5f:9d:83:
                    39:da:73:85:3a:30:8c:85:ff:67:7d:4a:89:fb:a8:
                    81:c3:a1:27:48:3e:da:61:cb:84:ad:20:20:f4:1e:
                    fb:c0:36:d4:e7:6f:0d:b8:55:d2:63:7e:25:df:bb:
                    cd:f6:9f:15:ca:a2:90:63:bf:eb:d1:9c:8b:b9:4b:
                    4e:99:ff:90:fc:c5:af:2b:04:ba:bb:be:d4:38:f9:
                    d1:3a:6a:eb:99:97:44:e4:80:55:06:4d:d5:bc:10:
                    ef:f9:58:b7:ca:48:21:1b:81:30:8a:c0:b8:11:17:
                    8c:bd:81:2f:fa:9d:bb:39:55:32:9c:b5:a8:4b:a8:
                    84:bf:7d:bd:7f:8a:1c:83:13:53:d5:95:bc:00:ca:
                    9c:42:92:b6:0c:ec:80:b3:f6:f2:08:25:a5:5e:f5:
                    00:00:af:11:fb:e7:e0:5b:44:63:e4:33:a7:db:91:
                    83:33:d8:36:65:34:dc:63:5a:58:97:94:55:a4:84:
                    fa:d8:2b:bd:53:99:fa:8e:47:f5:cd:0b:97:00:27:
                    ad:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9F:3D:86:01:13:F5:58:B3:B0:83:B5:67:05:2D:58:7E:44:B0:D6
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS6079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f42::/32
                  2a09:54c4::/32
                  2a0a:6046::/32
                  2a0d:d904::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:f4:58:15:0a:8c:60:84:db:63:4b:f5:f4:f5:d9:c8:52:d1:
         92:80:aa:cc:93:07:5b:33:ab:a6:88:d0:2e:54:b5:4e:b7:3e:
         e8:ee:4c:0f:e6:c7:f7:64:88:77:b5:b7:78:10:19:1e:02:e8:
         f9:fa:2a:46:52:1e:90:df:19:38:7c:48:d1:c9:36:c4:68:f9:
         ba:8f:be:38:3f:65:47:6a:36:4a:6d:c9:af:bd:bf:ca:64:62:
         17:30:e4:72:b1:6d:a3:cd:3d:6d:13:b3:52:79:ee:0e:30:1c:
         fc:92:fe:c3:c1:73:c6:a1:44:35:9f:f2:45:40:3a:9b:af:6d:
         6b:92:1b:fe:98:8e:aa:cf:f6:f5:e1:a5:fa:e3:ca:a5:dc:79:
         c3:e0:ea:06:3e:24:60:76:18:4d:b3:9a:2b:ac:84:d5:44:bc:
         fc:30:82:69:da:ba:74:32:f5:05:92:b0:31:e8:6f:d2:00:eb:
         22:20:b3:90:ba:fa:67:b5:eb:d7:60:87:f0:4c:1f:ec:84:ed:
         04:b8:a8:70:a1:6c:3b:f8:98:52:ec:c0:84:b0:d4:06:68:33:
         9c:10:d7:fe:ee:6b:a8:01:52:f0:99:69:e4:0d:b9:f4:09:61:
         07:4c:11:79:d7:cb:a8:21:bc:d2:a0:11:09:6d:83:00:c0:08:
         c4:1e:f5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:04:19 2025 by rpki-client