Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS6939.roa
File:                     AS6939.roa (raw, json)
Hash identifier:          JplIa2yfTwfCWQpW6shynWjAvVWqJ6QTU/piHpM/ZjU=
Subject key identifier:   0A:50:FE:04:F7:F2:13:30:73:89:A8:12:E7:9F:9C:85:98:24:A4:E9
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       2A719FE0939C84D509A36E6BC7228211BA5F2599
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS6939.roa
Signing time:             Wed 02 Sep 2026 08:53:10 +0000
ROA not before:           Wed 02 Sep 2026 08:48:10 +0000
ROA not after:            Wed 01 Sep 2027 08:53:10 +0000
asID:                     6939
IP address blocks:        153.76.119.0/24 maxlen: 24
                          153.76.120.0/24 maxlen: 24
                          153.76.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:71:9f:e0:93:9c:84:d5:09:a3:6e:6b:c7:22:82:11:ba:5f:25:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Sep  2 08:48:10 2026 GMT
            Not After : Sep  1 08:53:10 2027 GMT
        Subject: CN=0A50FE04F7F213307389A812E79F9C859824A4E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:af:6c:6d:c0:9f:92:9d:bb:6c:3e:9c:7d:c8:
                    4a:d9:e9:ae:96:5f:5c:96:ab:fc:b1:75:6d:b0:72:
                    9d:8f:7a:ad:32:27:5d:09:88:0f:6e:c6:1c:56:9b:
                    50:a9:c7:87:23:fd:cf:df:ca:5e:3c:80:de:a6:1f:
                    cd:f5:e5:00:ec:38:09:4a:d3:c9:b4:30:4e:e4:b1:
                    f1:b2:58:be:1c:4b:0c:ba:a5:9d:99:52:e3:9f:c8:
                    e1:84:54:aa:1e:00:38:95:08:da:71:8c:18:46:1a:
                    5e:79:94:ac:da:4c:57:fb:36:cd:79:0f:6c:1b:1a:
                    82:ef:0b:de:5b:70:2c:00:38:24:95:e1:a9:34:00:
                    ae:8c:b9:02:ab:a1:a5:62:94:ee:93:e6:9e:02:9f:
                    35:80:83:92:49:2a:bb:b8:52:71:c5:72:b8:cc:27:
                    90:88:a7:a3:fa:f2:71:5f:08:f6:fc:a0:57:b5:c6:
                    8f:b0:98:ef:4e:83:ec:e2:97:5b:1a:68:73:35:59:
                    96:19:fa:14:40:48:e6:2b:54:f2:3e:6b:c6:18:3a:
                    1e:18:e1:d0:8e:77:29:c1:e7:4f:94:c0:e7:0b:a7:
                    19:1f:45:27:f0:cd:14:9b:17:9c:cb:54:23:e6:fb:
                    42:bc:41:7f:a3:2d:13:c6:77:d9:1b:b7:b5:a0:3d:
                    9e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:50:FE:04:F7:F2:13:30:73:89:A8:12:E7:9F:9C:85:98:24:A4:E9
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS6939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.76.119.0-153.76.121.255

    Signature Algorithm: sha256WithRSAEncryption
         6a:30:24:8d:3f:e7:36:e1:9a:2e:0e:72:9d:65:fe:0f:3b:07:
         f3:98:c4:bf:26:d8:66:c6:be:55:97:dd:bb:2c:83:0c:28:ca:
         e9:84:9f:3c:80:7d:36:e9:32:48:b1:35:b3:1b:b0:2a:01:3c:
         07:7f:e3:98:de:30:59:cb:19:d4:67:84:24:d5:20:fb:7b:7e:
         f2:f1:56:b0:53:48:5a:c7:64:54:06:ff:76:42:26:b9:3f:cc:
         03:ce:52:dd:d0:70:48:8a:f8:63:6d:84:2b:be:46:77:f1:f9:
         d0:79:29:42:1d:fa:00:eb:d4:a2:d2:4f:f3:d4:66:6d:10:82:
         27:62:e9:95:4c:f6:2b:d5:cf:3a:fc:3f:21:11:35:96:b9:71:
         fc:c3:3a:dc:5d:e9:93:8b:5e:c8:2f:27:2a:3e:9b:2c:57:cc:
         10:e4:e2:34:f5:26:bf:16:d5:a8:e6:83:d8:34:dd:6b:74:02:
         8d:bb:72:f2:da:8e:c0:6b:e6:85:10:15:86:db:02:54:08:1c:
         09:cd:f1:f7:f5:a6:41:27:78:19:04:17:20:64:2a:2f:4a:f3:
         f6:1a:e0:10:65:e6:dd:69:86:a5:1e:3d:af:95:3e:e3:bf:5e:
         a9:00:17:7c:09:07:57:4d:68:06:ae:26:c0:2b:65:38:4b:b6:
         af:a4:e1:a5
-----BEGIN CERTIFICATE-----
MIIE6zCCA9OgAwIBAgIUKnGf4JOchNUJo25rxyKCEbpfJZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNjA5MDIwODQ4MTBaFw0yNzA5MDEwODUzMTBaMDMxMTAvBgNV
BAMTKDBBNTBGRTA0RjdGMjEzMzA3Mzg5QTgxMkU3OUY5Qzg1OTgyNEE0RTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYr2xtwJ+SnbtsPpx9yErZ6a6W
X1yWq/yxdW2wcp2Peq0yJ10JiA9uxhxWm1Cpx4cj/c/fyl48gN6mH8315QDsOAlK
08m0ME7ksfGyWL4cSwy6pZ2ZUuOfyOGEVKoeADiVCNpxjBhGGl55lKzaTFf7Ns15
D2wbGoLvC95bcCwAOCSV4ak0AK6MuQKroaVilO6T5p4CnzWAg5JJKru4UnHFcrjM
J5CIp6P68nFfCPb8oFe1xo+wmO9Og+zil1saaHM1WZYZ+hRASOYrVPI+a8YYOh4Y
4dCOdynB50+UwOcLpxkfRSfwzRSbF5zLVCPm+0K8QX+jLRPGd9kbt7WgPZ77AgMB
AAGjggH1MIIB8TAdBgNVHQ4EFgQUClD+BPfyEzBziagS55+chZgkpOkwHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBuBggrBgEF
BQcBCwRiMGAwXgYIKwYBBQUHMAuGUnJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
NjkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB
/wQYMBYwFAQCAAEwDjAMAwQAmUx3AwQBmUx4MA0GCSqGSIb3DQEBCwUAA4IBAQBq
MCSNP+c24ZouDnKdZf4POwfzmMS/Jthmxr5Vl927LIMMKMrphJ88gH026TJIsTWz
G7AqATwHf+OY3jBZyxnUZ4Qk1SD7e37y8VawU0hax2RUBv92Qia5P8wDzlLd0HBI
ivhjbYQrvkZ38fnQeSlCHfoA69Si0k/z1GZtEIInYumVTPYr1c86/D8hETWWuXH8
wzrcXemTi17ILycqPpssV8wQ5OI09Sa/FtWo5oPYNN1rdAKNu3Ly2o7Aa+aFEBWG
2wJUCBwJzfH39aZBJ3gZBBcgZCovSvP2GuAQZebdaYalHj2vlT7jv16pABd8CQdX
TWgGribAK2U4S7avpOGl
-----END CERTIFICATE-----
Generated at Mon Sep 21 03:44:30 2026 by rpki-client