Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS6079.roa
File:                     AS6079.roa (raw, json)
Hash identifier:          UpIQ0Ov2skNc95QjmwwqhnvWOx2CbjXgqodd9bExGxI=
Subject key identifier:   ED:35:97:64:8A:5A:68:A3:E4:12:AE:64:FB:03:C2:FA:F0:C6:8E:7F
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       6F6988A6DDF3898ECC8E18756F626DD017ED2E23
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS6079.roa
Signing time:             Sun 13 Apr 2025 21:59:36 +0000
ROA not before:           Sun 13 Apr 2025 21:54:36 +0000
ROA not after:            Sun 12 Apr 2026 21:59:36 +0000
asID:                     6079
IP address blocks:        2a06:9f42::/32 maxlen: 48
                          2a09:54c4::/32 maxlen: 48
                          2a0a:6046::/32 maxlen: 48
                          2a0d:d904::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 07:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:69:88:a6:dd:f3:89:8e:cc:8e:18:75:6f:62:6d:d0:17:ed:2e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Apr 13 21:54:36 2025 GMT
            Not After : Apr 12 21:59:36 2026 GMT
        Subject: CN=ED3597648A5A68A3E412AE64FB03C2FAF0C68E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:57:fd:5e:a1:a4:c2:fe:eb:ce:b8:5d:13:6c:
                    36:b3:c5:ec:4d:7b:01:98:f0:a2:38:1a:8e:5c:99:
                    bf:b9:de:63:e4:48:df:b5:2d:07:94:35:2f:2f:1b:
                    3a:02:b1:c9:15:3e:55:ca:39:77:97:89:91:e8:14:
                    9f:7b:b6:0e:7e:0e:b9:39:46:a4:e9:e4:34:76:07:
                    38:f0:40:92:4e:83:95:73:84:a8:c7:89:2a:71:d4:
                    c7:6c:b3:55:7e:97:d1:c7:7e:8f:27:9b:b2:2b:3f:
                    c3:51:ce:57:0d:da:c0:70:ea:ee:ee:d2:4a:5d:52:
                    5c:08:b3:de:a1:cf:5b:33:e9:c6:91:84:f9:43:6c:
                    73:9a:19:1a:4f:51:5f:47:c8:63:e7:73:c3:5f:a4:
                    bb:d0:58:bd:e6:39:fb:55:28:9f:ec:80:8d:69:94:
                    22:61:0e:81:04:5e:a5:fb:7a:93:d1:0f:b8:38:f0:
                    c0:62:ab:d3:c3:6c:d3:0c:eb:79:ac:f1:cd:3a:b6:
                    62:7d:fc:69:f7:57:ec:19:d6:69:24:d7:f0:d3:8e:
                    f1:30:82:be:82:39:b8:13:99:8c:23:9a:60:9c:15:
                    a5:b6:23:15:71:9c:5a:38:d0:65:ce:45:3d:17:a6:
                    11:69:11:67:ab:04:ce:e0:2f:7e:ac:47:97:68:99:
                    e9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:35:97:64:8A:5A:68:A3:E4:12:AE:64:FB:03:C2:FA:F0:C6:8E:7F
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS6079.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:9f42::/32
                  2a09:54c4::/32
                  2a0a:6046::/32
                  2a0d:d904::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:16:8b:aa:55:50:10:6f:20:d4:85:0d:06:63:aa:cc:87:c8:
         d0:36:0d:b8:cc:d3:59:3a:5c:28:35:ba:ca:3a:af:4e:2c:49:
         37:f8:7a:a0:f8:50:3d:36:57:89:dc:b9:18:7f:92:9e:ab:27:
         b8:9c:16:cf:fa:ed:58:0a:34:91:20:3a:d8:e2:d3:7f:e4:a6:
         3b:f8:5a:6b:89:86:ef:08:43:7b:da:38:a1:19:9b:21:33:95:
         57:5f:47:bc:40:8a:20:fd:33:22:7d:67:e6:29:cf:1e:28:d8:
         ae:01:f2:d2:81:da:cb:3c:2d:ed:ed:bf:e7:5a:94:0e:c5:7c:
         df:1f:89:75:5f:5c:41:ce:cf:f0:23:f9:4e:6e:a8:0f:24:74:
         e7:a8:ba:6c:dd:2d:a4:21:5f:fa:cf:ca:df:56:f6:05:e7:4f:
         02:7e:d5:e2:aa:9b:ee:31:28:7d:b9:f7:1c:0f:fc:2f:d3:fa:
         54:24:95:4b:b3:73:a9:5b:e8:94:68:13:80:ff:e8:1c:c9:9a:
         6a:ad:7e:1e:7e:ea:63:4e:5f:83:19:93:75:db:db:76:2f:44:
         bc:c3:42:78:7b:22:bd:3f:3a:e6:da:c4:55:99:e2:d1:6a:91:
         d0:fa:84:a9:fd:91:00:de:53:a9:bd:48:fa:a0:26:d8:5f:70:
         8f:53:6a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:48:55 2025 by rpki-client