Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS6939.roa
File:                     AS6939.roa (raw, json)
Hash identifier:          /ZewRHAo6X4cpnELY9jBOFVr7zoNg4yDgKNKCtVvPrI=
Subject key identifier:   3D:E6:E0:6D:AB:1A:5A:CE:8B:0C:2A:E5:A1:46:34:09:42:F0:2B:1F
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       37E1F08DF4F02DADD77D8DADD570F5681F8C10DA
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS6939.roa
Signing time:             Wed 02 Sep 2026 10:57:17 +0000
ROA not before:           Wed 02 Sep 2026 10:52:17 +0000
ROA not after:            Wed 01 Sep 2027 10:57:17 +0000
asID:                     6939
IP address blocks:        207.180.30.0/24 maxlen: 24
                          207.180.56.0/24 maxlen: 24
                          207.180.59.0/24 maxlen: 24
                          207.180.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:09:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:e1:f0:8d:f4:f0:2d:ad:d7:7d:8d:ad:d5:70:f5:68:1f:8c:10:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Sep  2 10:52:17 2026 GMT
            Not After : Sep  1 10:57:17 2027 GMT
        Subject: CN=3DE6E06DAB1A5ACE8B0C2AE5A146340942F02B1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:17:5c:43:e3:c8:e4:75:de:1c:8c:53:46:c9:
                    8e:93:eb:a1:80:27:dd:61:59:f6:02:eb:21:0a:0f:
                    15:8f:9c:46:92:96:1c:09:31:10:9f:4e:80:8d:39:
                    10:68:07:51:66:08:f3:ff:d5:b7:15:e1:85:28:ca:
                    b9:c7:aa:94:15:04:99:61:3e:ea:05:17:81:02:8d:
                    b5:c7:76:0a:8b:00:21:cb:41:23:d3:10:60:ce:66:
                    66:42:1f:87:b4:d0:86:07:6f:58:47:a4:2d:86:47:
                    bd:ed:7b:83:03:07:81:db:e0:df:1b:b0:0a:5e:67:
                    f6:35:75:2f:a2:ab:5e:52:30:f8:41:b8:05:f2:8b:
                    09:1f:66:ff:18:7a:39:b4:f1:25:d1:c3:54:17:a0:
                    e3:b0:af:36:3e:dc:30:ae:0b:52:27:72:89:bd:ad:
                    38:2f:c1:3e:4f:65:56:e8:a8:3f:f0:27:62:ad:2b:
                    25:ad:26:9f:18:3c:1d:d5:30:b6:dd:a9:52:43:5b:
                    9c:fe:bd:35:73:f5:88:ec:c8:2e:b8:54:c2:60:46:
                    35:93:61:b4:63:a5:53:66:e2:d2:ff:5e:0d:8e:71:
                    47:2c:36:69:35:87:17:7b:4b:ad:1e:95:52:20:78:
                    a7:58:18:63:26:2f:2b:24:d2:77:1d:db:2a:77:1b:
                    d0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E6:E0:6D:AB:1A:5A:CE:8B:0C:2A:E5:A1:46:34:09:42:F0:2B:1F
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS6939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.30.0/24
                  207.180.56.0/24
                  207.180.59.0/24
                  207.180.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:9a:a7:0c:aa:c1:cc:fb:78:16:e2:3a:6b:71:5c:18:1f:d3:
         14:a3:ce:da:d7:c8:e5:b1:8f:4d:51:88:92:90:23:9b:8c:2b:
         a7:79:8b:2a:77:21:77:27:17:a1:b0:05:ce:11:6b:76:f3:b4:
         7a:29:92:a0:e6:c1:27:6d:ec:09:98:dd:f0:36:e0:0a:57:90:
         e8:67:3c:35:00:2d:b1:d7:84:d8:32:ce:f3:d2:47:47:aa:13:
         98:32:d0:7a:ef:ed:59:a9:f0:9f:3b:98:f0:7c:dd:84:64:a8:
         43:5b:c2:64:ce:d3:ad:3f:29:f8:29:dc:a3:98:7a:9e:15:0f:
         0a:14:88:e3:b3:d9:6b:70:10:6d:39:76:cb:d7:e7:c9:96:7a:
         cf:b8:cf:52:57:2d:78:b2:fd:d7:9e:73:77:8b:22:f2:fd:20:
         4f:b6:a9:41:6a:f5:27:be:71:e3:14:18:13:4d:61:10:3c:d5:
         57:89:09:f0:71:d7:c9:84:64:ec:18:31:44:d9:4e:ed:57:df:
         0b:be:96:42:3b:13:6f:ce:ee:4f:8f:b3:c9:20:d9:81:75:a7:
         8f:6e:43:05:a9:6e:3d:2e:98:c9:09:06:69:ec:ac:69:74:c3:
         26:51:79:f6:eb:58:53:28:42:db:99:a4:57:c7:2e:a1:2c:ca:
         1f:a8:cc:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:21:45 2026 by rpki-client