Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS60117.roa
File:                     AS60117.roa (raw, json)
Hash identifier:          BLqOyeWcAAIgucTpLzVb4gzIGwTMRtqm0gZ8eE/TEBA=
Subject key identifier:   13:52:95:DF:29:19:4D:E6:93:66:4B:0D:F2:DD:3A:54:55:D3:26:F5
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       1B0779B6D7AE7A30F973C0F2528207D1DFEAFF7C
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS60117.roa
Signing time:             Thu 08 Oct 2026 06:18:21 +0000
ROA not before:           Thu 08 Oct 2026 06:13:21 +0000
ROA not after:            Thu 07 Oct 2027 06:18:21 +0000
asID:                     60117
IP address blocks:        207.180.14.0/24 maxlen: 24
                          207.180.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 11:32:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:07:79:b6:d7:ae:7a:30:f9:73:c0:f2:52:82:07:d1:df:ea:ff:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: Oct  8 06:13:21 2026 GMT
            Not After : Oct  7 06:18:21 2027 GMT
        Subject: CN=135295DF29194DE693664B0DF2DD3A5455D326F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d3:87:8b:ca:0e:fe:64:76:6e:af:b5:4d:9a:
                    31:63:d6:ed:94:36:ae:73:89:0e:04:4e:51:ca:04:
                    ca:35:92:13:67:84:bb:77:53:61:ad:97:3e:d4:1a:
                    df:ec:cb:b3:d6:b0:bb:21:f6:0b:97:0d:ce:1b:bd:
                    ef:08:f4:80:90:87:a6:00:30:ca:fe:f8:2b:6d:3d:
                    6a:4a:1c:df:99:52:42:06:0a:67:cb:0b:73:07:3e:
                    ae:86:f9:79:2d:b9:7a:54:8a:1c:bb:68:ce:99:27:
                    79:99:04:47:55:5e:66:50:86:d1:63:76:16:0e:a0:
                    1b:f1:d0:c0:d6:01:0a:10:b6:aa:2d:53:fd:cf:c1:
                    54:a2:8c:6b:af:f6:47:1e:9e:26:5a:60:35:10:c5:
                    ce:50:98:55:ca:0d:b6:2b:bd:3b:ab:79:d7:9a:46:
                    e7:ef:8e:cc:fa:c6:55:1f:d2:3a:3e:34:c7:b0:f7:
                    16:e6:8d:5e:19:97:69:4f:fb:7b:dc:93:6e:d8:e9:
                    77:77:ce:36:f5:05:fc:b8:c8:82:6d:07:7f:df:26:
                    0b:42:3a:eb:57:bf:ce:e6:b7:ac:db:d1:57:b9:2a:
                    7f:6e:fb:c5:db:22:db:a2:87:13:e5:1f:08:75:07:
                    78:54:7b:1d:8e:ad:9e:d0:47:58:cb:12:17:e5:72:
                    46:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:52:95:DF:29:19:4D:E6:93:66:4B:0D:F2:DD:3A:54:55:D3:26:F5
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS60117.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.14.0/24
                  207.180.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:ed:cd:88:4c:44:e5:b6:02:c1:00:dd:8d:a5:13:35:f1:4e:
         54:4a:72:f2:58:81:c7:4e:5c:f5:11:8e:26:23:43:f9:21:31:
         ce:c8:b0:8f:e6:03:62:8a:54:b3:c3:f1:d2:a0:3e:87:49:d3:
         72:ea:c4:5c:5c:ec:7a:89:2b:f5:41:de:44:07:a6:b4:76:48:
         75:6b:20:3d:ec:ed:d6:f2:31:a4:b7:85:9f:37:a6:38:7f:b2:
         2b:3e:3a:c1:52:ae:f2:0a:12:54:e0:c5:0d:f9:96:71:53:da:
         0a:d6:78:8a:73:b3:fa:d7:35:cf:d7:07:9b:ca:18:b7:8b:60:
         e2:0a:de:a7:27:ca:e3:95:9a:2d:58:1d:97:48:0c:14:7b:06:
         d1:0a:5e:25:c1:9b:d1:ad:ac:db:d0:b6:67:5b:0e:97:e5:c6:
         54:37:8f:f1:5a:1b:b7:80:10:bd:b0:b5:da:e7:28:32:3b:36:
         e5:04:92:a1:6a:7b:3d:fd:20:7c:5b:0f:57:c8:b8:55:95:a6:
         26:61:99:b9:3f:e0:79:0a:26:09:ff:21:f0:43:e1:5c:c8:20:
         d6:16:a8:21:4f:8a:56:b5:a1:d2:29:c2:7a:94:17:fd:2b:53:
         5e:56:34:7d:67:a2:2b:f1:be:03:19:8b:c1:a5:46:29:36:b6:
         e8:66:0e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:14 2026 by rpki-client