Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS6939.roa
File:                     AS6939.roa (raw, json)
Hash identifier:          PHIzYNJvuI46Vxoh/woNOUxu84FLtOemhiatP5O5JM8=
Subject key identifier:   75:59:D4:BC:2D:5F:32:0A:AE:60:3C:3C:E0:19:47:76:CA:50:11:0C
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       5F64833301A836C3157698A6B32CE22327057F69
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS6939.roa
Signing time:             Tue 01 Apr 2025 01:58:01 +0000
ROA not before:           Tue 01 Apr 2025 01:53:01 +0000
ROA not after:            Tue 31 Mar 2026 01:58:01 +0000
asID:                     6939
IP address blocks:        66.225.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 22:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:64:83:33:01:a8:36:c3:15:76:98:a6:b3:2c:e2:23:27:05:7f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Apr  1 01:53:01 2025 GMT
            Not After : Mar 31 01:58:01 2026 GMT
        Subject: CN=7559D4BC2D5F320AAE603C3CE0194776CA50110C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:e6:50:3c:f0:6d:41:bd:b6:f6:55:e9:9f:
                    56:4b:db:37:de:5c:96:92:76:0c:8b:a1:9d:c9:73:
                    92:03:36:f9:fe:fc:07:72:d7:63:a3:3f:9f:cf:e1:
                    24:a2:ae:87:22:fc:36:ab:7c:0e:3d:34:0a:65:a2:
                    37:aa:c5:3b:44:87:f4:3f:28:ff:3f:a5:d6:33:9e:
                    1b:33:d6:e9:6a:43:4f:75:9f:b8:3f:1c:42:d6:d3:
                    c3:30:83:b6:ab:a4:14:cb:61:dc:0b:de:60:e2:5d:
                    5f:11:3e:43:58:91:b7:e7:8f:35:df:72:a8:33:31:
                    69:f7:cd:b9:50:fe:c3:b2:07:40:0a:0e:6e:07:70:
                    5d:dc:5f:53:92:8c:69:eb:cb:48:10:c1:a6:b3:36:
                    99:67:9e:36:83:f8:9e:23:e0:7d:ec:7e:1b:b5:65:
                    bc:88:eb:11:e1:1f:b4:e2:5b:39:66:51:8e:49:0f:
                    d3:7b:29:6d:29:d2:7e:e5:39:a6:26:72:96:ea:36:
                    80:76:3c:aa:47:3e:17:86:0f:96:b9:4e:3e:d6:a2:
                    f6:8b:de:1b:87:ae:08:70:7f:1b:96:08:54:f9:55:
                    2f:ae:d7:63:af:b8:98:26:be:7e:ed:04:60:e2:38:
                    e4:5b:6a:02:35:dd:2d:56:28:71:f2:2d:a7:bb:b5:
                    9e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:59:D4:BC:2D:5F:32:0A:AE:60:3C:3C:E0:19:47:76:CA:50:11:0C
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS6939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:66:e0:96:56:fe:a6:a9:40:b0:09:eb:d9:ed:0d:5e:2f:e0:
         a2:25:83:e5:76:83:6b:5d:b9:76:be:f0:06:f3:62:c6:a6:25:
         ad:5e:db:89:fb:4e:c1:d5:02:32:e2:20:a8:7c:e7:f0:54:22:
         03:7f:69:0f:b4:d2:e8:38:85:e8:af:22:72:f1:0b:34:e5:4a:
         81:69:4f:7b:2a:e4:5e:ad:fd:d8:a5:a9:c8:51:ee:fe:fc:ae:
         cc:13:7d:64:43:f9:05:db:e3:4b:0e:a5:19:1c:5b:9e:45:8a:
         c7:23:75:7b:51:d8:4d:dc:62:94:7f:19:72:df:30:37:83:31:
         51:c9:86:f6:06:fd:72:a6:53:b7:7e:c3:3f:46:7b:2e:85:c3:
         7e:99:42:16:80:36:3c:3e:83:00:3b:e1:14:cc:b4:93:2a:04:
         e5:3e:9c:ac:6c:2e:05:1f:94:b8:85:89:69:ef:f7:56:7a:12:
         87:2f:49:58:1e:05:9b:f7:a6:54:6b:4b:0f:4d:3d:6c:ae:56:
         6e:74:25:ec:e5:3c:4c:f0:1d:37:a7:77:44:e2:a4:8a:0a:b0:
         b1:b5:b3:ce:5b:18:d5:a5:51:5b:5f:a0:38:a5:f5:ff:31:05:
         82:30:a6:e1:95:d1:ca:f8:31:cc:6d:20:de:89:80:d9:5a:17:
         c3:03:7c:fe
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUX2SDMwGoNsMVdpimsyziIycFf2kwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYjEwM2MzODI2ZTAwMDQ4NWRlNmI5NTg2NWRjMGIxMTlk
YTMzNTA4ZDdhOWY0YmY5ZTQwHhcNMjUwNDAxMDE1MzAxWhcNMjYwMzMxMDE1ODAx
WjAzMTEwLwYDVQQDEyg3NTU5RDRCQzJENUYzMjBBQUU2MDNDM0NFMDE5NDc3NkNB
NTAxMTBDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKvmUDzwbUG9
tvZV6Z9WS9s33lyWknYMi6GdyXOSAzb5/vwHctdjoz+fz+Ekoq6HIvw2q3wOPTQK
ZaI3qsU7RIf0Pyj/P6XWM54bM9bpakNPdZ+4PxxC1tPDMIO2q6QUy2HcC95g4l1f
ET5DWJG3548133KoMzFp9825UP7DsgdACg5uB3Bd3F9Tkoxp68tIEMGmszaZZ542
g/ieI+B97H4btWW8iOsR4R+04ls5ZlGOSQ/TeyltKdJ+5TmmJnKW6jaAdjyqRz4X
hg+WuU4+1qL2i94bh64IcH8blghU+VUvrtdjr7iYJr5+7QRg4jjkW2oCNd0tVihx
8i2nu7WeGwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFHVZ1LwtXzIKrmA8POAZR3bK
UBEMMB8GA1UdIwQYMBaAFKd0ggs/4rc5WW9Ka/Mfv9JuI/K8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzMzExY2E4YjM0NjJhLzAv
QTc3NDgyMEIzRkUyQjczOTU5NkY0QTZCRjMxRkJGRDI2RTIzRjJCQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzI2YTVlMDhiLWE4ZWQtNGJhYi04YTMyLTUyNjAxY2E5M2VjYS9iMTAz
YzM4MjZlMDAwNDg1ZGU2Yjk1ODY1ZGMwYjExOWRhMzM1MDhkN2E5ZjRiZjllNC5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTMzMTFjYThi
MzQ2MmEvMC9BUzY5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABC4eowDQYJKoZIhvcNAQELBQADggEB
AJ9m4JZW/qapQLAJ69ntDV4v4KIlg+V2g2tduXa+8AbzYsamJa1e24n7TsHVAjLi
IKh85/BUIgN/aQ+00ug4heivInLxCzTlSoFpT3sq5F6t/dilqchR7v78rswTfWRD
+QXb40sOpRkcW55FiscjdXtR2E3cYpR/GXLfMDeDMVHJhvYG/XKmU7d+wz9Gey6F
w36ZQhaANjw+gwA74RTMtJMqBOU+nKxsLgUflLiFiWnv91Z6EocvSVgeBZv3plRr
Sw9NPWyuVm50JezlPEzwHTend0TipIoKsLG1s85bGNWlUVtfoDil9f8xBYIwpuGV
0cr4McxtIN6JgNlaF8MDfP4=
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:34:44 2025 by rpki-client