Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS60602.roa
File:                     AS60602.roa (raw, json)
Hash identifier:          OQ0Ltd7naneomAmWU2sW4OxRTZZWU0NIBXyEQK8ZPHE=
Subject key identifier:   05:A4:29:46:3A:BF:7F:FA:ED:ED:4E:D6:DD:EF:F3:08:91:65:D2:C3
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       0C894EED3CA531FAA4E7B98B6B9BECC1C31292DC
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS60602.roa
Signing time:             Thu 03 Jul 2025 17:29:44 +0000
ROA not before:           Thu 03 Jul 2025 17:24:44 +0000
ROA not after:            Thu 02 Jul 2026 17:29:44 +0000
asID:                     60602
IP address blocks:        140.99.24.0/23 maxlen: 24
                          140.99.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 10:25:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:89:4e:ed:3c:a5:31:fa:a4:e7:b9:8b:6b:9b:ec:c1:c3:12:92:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Jul  3 17:24:44 2025 GMT
            Not After : Jul  2 17:29:44 2026 GMT
        Subject: CN=05A429463ABF7FFAEDED4ED6DDEFF3089165D2C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f7:23:00:b4:5b:5a:c3:df:85:fb:4d:38:7f:
                    db:f4:1d:eb:e9:ee:6c:ce:33:3b:60:7c:f3:db:65:
                    d8:64:85:3e:72:96:66:43:e8:56:cc:3b:ee:10:44:
                    c3:18:b8:5c:0e:ad:f2:0b:d7:38:7e:a0:43:a7:fc:
                    14:ee:12:a8:df:12:fc:e2:78:b1:d5:b0:de:e3:ba:
                    1a:4c:bb:f3:97:4c:5a:90:4d:e0:34:be:84:c5:69:
                    99:0a:59:3b:7e:c6:45:d3:b9:94:50:11:d1:8b:4d:
                    25:4e:e2:6b:ee:90:1c:04:d8:5d:ad:c5:dd:18:10:
                    d7:47:71:c4:14:6c:66:44:a5:1b:63:7a:fd:82:1e:
                    34:87:cb:97:ee:1f:70:00:91:83:2a:1e:79:14:2d:
                    dd:75:27:89:75:7f:c0:ac:c5:e8:53:e8:42:f1:e5:
                    a4:da:e8:4b:71:6b:6e:5e:05:4b:2f:ab:87:9a:a5:
                    ad:5a:3c:df:ba:9a:5a:bc:b6:f0:dc:ee:dd:6d:f9:
                    28:87:91:b8:7d:36:8d:67:57:ed:df:07:79:2b:14:
                    a9:48:00:02:29:5d:0c:77:20:3f:40:46:dc:f2:6a:
                    31:a5:48:a1:bc:50:96:27:3b:22:dd:f7:79:76:f7:
                    8c:ca:f3:18:c8:6b:30:16:c1:48:f2:0f:83:1a:6c:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A4:29:46:3A:BF:7F:FA:ED:ED:4E:D6:DD:EF:F3:08:91:65:D2:C3
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS60602.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.24.0/23
                  140.99.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:ed:eb:d8:88:e3:b1:28:50:47:4a:02:5e:2a:8f:09:5d:01:
         c3:17:72:44:87:d9:c7:b1:49:ca:10:9e:36:10:bf:a9:5e:64:
         92:2c:6f:d0:48:16:f4:30:6b:54:e0:ac:25:52:67:8c:78:74:
         0b:fc:51:94:ea:5c:f3:27:ef:7d:20:af:90:84:00:e7:4d:63:
         0d:76:5c:55:a0:3f:71:4d:57:5a:c8:b0:17:61:69:bc:8b:cb:
         12:82:be:50:13:26:1e:5d:9d:c8:37:c7:43:32:aa:e5:7d:8c:
         02:50:10:a5:dc:06:e1:43:95:4e:9a:83:c3:10:4a:84:2e:61:
         22:b3:f9:92:11:6b:67:90:ff:bc:c8:19:72:30:87:08:74:6b:
         08:ae:3c:c2:4d:bb:70:6d:8d:5a:28:30:a3:63:a1:72:1a:62:
         c1:7b:4a:c3:12:d5:49:af:b0:2f:ce:62:bd:8c:b1:f1:92:e6:
         13:27:08:a0:47:76:78:95:09:23:3b:38:6b:ed:8a:cf:b5:ed:
         e8:aa:14:ce:ad:c3:98:5a:be:39:47:b1:fd:15:29:03:bc:e4:
         c6:c1:19:9c:0d:f9:18:0c:c7:62:d5:4a:64:39:9f:91:60:21:
         ee:03:9f:d0:ac:fe:92:7a:bc:9c:67:70:da:a7:73:d8:95:23:
         ee:85:e6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:28:03 2025 by rpki-client