Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS6079.roa
File:                     AS6079.roa (raw, json)
Hash identifier:          BMaaCUntvZx0uANMcjeGOIbBWpZTGYp1hgnmhXXX6ps=
Subject key identifier:   97:52:AE:13:8C:0F:75:95:08:38:FF:5E:A9:68:B2:3D:D0:99:35:1F
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2007C36BA313EC3A7C22A1F15776979D15FBB86B
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS6079.roa
Signing time:             Fri 05 Jun 2026 03:15:26 +0000
ROA not before:           Fri 05 Jun 2026 03:10:26 +0000
ROA not after:            Fri 04 Jun 2027 03:15:26 +0000
asID:                     6079
IP address blocks:        67.210.108.0/24 maxlen: 24
                          67.210.109.0/24 maxlen: 24
                          74.50.13.0/24 maxlen: 24
                          89.35.93.0/24 maxlen: 24
                          89.35.94.0/24 maxlen: 24
                          89.35.95.0/24 maxlen: 24
                          96.44.150.0/24 maxlen: 24
                          162.213.3.0/24 maxlen: 24
                          192.228.116.0/24 maxlen: 24
                          192.228.117.0/24 maxlen: 24
                          192.228.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:07:c3:6b:a3:13:ec:3a:7c:22:a1:f1:57:76:97:9d:15:fb:b8:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun  5 03:10:26 2026 GMT
            Not After : Jun  4 03:15:26 2027 GMT
        Subject: CN=9752AE138C0F75950838FF5EA968B23DD099351F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:ee:98:c0:50:a8:4e:c6:ff:07:32:50:c4:
                    f5:d1:e0:2d:77:cf:a8:69:12:4a:bb:31:07:07:7f:
                    c8:94:9a:59:87:4b:c5:5a:15:b2:46:ac:1d:a1:fd:
                    ff:81:1f:97:0c:32:18:8b:ac:1a:21:7c:25:69:d8:
                    dd:41:85:48:5c:b9:6c:06:a2:bf:6c:2c:5d:8e:34:
                    a6:86:5b:83:6f:f2:d9:ac:48:92:59:af:79:b3:14:
                    0d:91:f6:51:22:40:e3:dd:67:55:e3:8e:2a:1e:42:
                    41:3e:a8:cf:4c:f9:12:10:1c:9a:47:55:3f:e3:15:
                    a1:09:4d:c2:02:54:f0:03:e5:c1:45:a3:40:4c:1c:
                    11:49:20:77:ba:2c:67:b9:5f:e6:17:0b:5e:a4:48:
                    c9:37:52:18:ee:33:8e:34:2a:1b:b0:51:3c:cf:83:
                    d1:7c:c1:2b:a4:33:32:55:f2:c6:bd:d5:b9:88:a1:
                    ea:9c:49:b9:fc:05:e8:3d:34:e6:6c:c4:ec:52:43:
                    cf:5a:62:52:90:11:de:3a:a9:43:26:2a:6a:4a:6a:
                    14:c2:dc:d8:84:f6:2f:8d:04:d4:fa:cf:62:b1:64:
                    89:59:df:9f:14:2e:23:85:84:6c:97:4b:91:92:70:
                    5a:97:45:22:7e:e1:2e:e3:c2:55:ff:d4:95:e7:6b:
                    3d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:52:AE:13:8C:0F:75:95:08:38:FF:5E:A9:68:B2:3D:D0:99:35:1F
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS6079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.108.0/23
                  74.50.13.0/24
                  89.35.93.0-89.35.95.255
                  96.44.150.0/24
                  162.213.3.0/24
                  192.228.116.0/23
                  192.228.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:7f:9f:73:07:77:10:d9:7d:7b:f7:9b:06:7f:9f:c4:79:5a:
         b8:b2:6a:75:28:d3:f1:47:90:da:77:3d:c8:ae:36:f3:9f:17:
         90:da:6c:50:3a:89:fe:af:9c:d1:bb:0d:b6:e4:9d:7c:9a:b6:
         b2:b6:f4:f8:9d:5c:cd:0f:c1:64:a0:65:cd:52:38:4a:f9:05:
         32:af:0d:f3:82:95:c9:bd:5d:92:af:15:9f:b8:31:79:f9:cb:
         7b:b2:44:f2:31:1b:ab:1c:4f:38:8b:fe:d0:21:9f:5a:25:c6:
         19:2c:9f:f3:59:01:76:7a:11:1b:c1:dd:e1:a0:ec:78:38:3b:
         c5:10:f4:4c:89:0e:95:9c:d9:e2:da:03:a4:01:b0:dc:3a:d8:
         c4:bc:04:ed:68:7a:db:1b:ff:ba:09:6d:b5:9d:97:88:0c:91:
         67:7b:49:70:45:c5:84:dc:cd:d9:0a:8d:73:5f:c6:18:a5:1a:
         64:a9:4c:d4:8d:21:33:bc:13:03:5b:11:68:47:d0:79:fb:08:
         c1:e0:0a:55:fe:e7:b9:27:5f:7b:e2:5b:de:7b:81:7b:e0:46:
         58:0a:e0:4b:37:5d:4e:9f:2f:84:d5:f1:a2:1d:1c:f8:9b:d6:
         9b:5f:f0:5c:31:7d:2d:8d:47:35:85:45:38:a5:9b:12:f4:9f:
         36:eb:a3:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:42:33 2026 by rpki-client