Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS60117.roa
File:                     AS60117.roa (raw, json)
Hash identifier:          O3CMRXUQ8Bol4EIv3W8Wa7imlJrFX/Than8q5g81YwM=
Subject key identifier:   79:39:60:DF:9C:33:FE:09:CE:47:01:CB:47:B7:AF:5E:08:E1:DD:B1
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       799A65FC6E387C1C56E5610A0C27C8A02CA6D062
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS60117.roa
Signing time:             Wed 09 Sep 2026 13:46:16 +0000
ROA not before:           Wed 09 Sep 2026 13:41:16 +0000
ROA not after:            Wed 08 Sep 2027 13:46:16 +0000
asID:                     60117
IP address blocks:        157.254.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 12:46:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9a:65:fc:6e:38:7c:1c:56:e5:61:0a:0c:27:c8:a0:2c:a6:d0:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep  9 13:41:16 2026 GMT
            Not After : Sep  8 13:46:16 2027 GMT
        Subject: CN=793960DF9C33FE09CE4701CB47B7AF5E08E1DDB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:97:65:8f:c5:d6:aa:61:1f:58:8d:dc:bf:
                    0b:30:5c:09:d1:be:57:bb:e3:f0:2f:3b:98:8b:b1:
                    12:cf:a1:30:59:0b:8c:d8:94:bf:2f:ed:b3:c0:de:
                    19:4b:05:17:c3:eb:f4:fa:39:3f:a0:da:59:d4:be:
                    73:4f:4e:a5:c7:87:cc:58:57:a3:fb:35:f1:54:32:
                    f3:f9:ef:c8:70:5e:cf:6c:bd:72:58:d3:20:bc:6d:
                    80:8c:20:fe:db:00:ea:8e:4c:ed:59:15:ce:80:3d:
                    80:03:7d:ba:8d:b4:17:5c:7c:68:db:99:ce:6c:71:
                    d7:17:f3:f9:2f:60:c1:b1:d3:bf:15:00:e9:bf:b3:
                    88:2b:d7:77:17:94:ec:30:ff:df:be:21:2b:32:91:
                    22:cb:75:0f:10:52:a9:78:91:e7:d3:49:c1:43:42:
                    17:ee:7b:81:a6:14:52:30:dc:6c:4c:9e:60:22:3d:
                    58:6f:0a:d7:41:24:58:dc:08:e4:8e:31:77:a9:15:
                    a5:0f:04:a9:76:8a:d6:4e:d5:a8:c6:c5:d7:cb:f6:
                    9c:5e:88:cb:a8:37:bf:4c:46:32:0e:d4:74:77:5e:
                    63:ec:e1:f3:21:a4:e6:86:cc:d3:49:5a:3f:92:43:
                    c1:78:32:7d:a1:8a:be:87:77:ce:a1:0d:74:46:9e:
                    a8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:39:60:DF:9C:33:FE:09:CE:47:01:CB:47:B7:AF:5E:08:E1:DD:B1
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS60117.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:89:b3:96:71:f6:72:f2:37:91:e9:14:e7:36:fe:69:35:f0:
         82:0c:9e:1c:d8:57:e3:29:b5:a9:b9:b2:08:0a:91:0d:bd:e4:
         e8:09:06:e6:e8:10:3f:21:da:ad:09:0b:21:e2:9e:fd:2c:93:
         61:f9:8f:ed:9f:0e:50:97:a3:85:01:4d:de:89:6e:a4:3a:93:
         b2:d3:2f:8c:a5:95:19:51:79:e4:dd:2e:61:a8:ae:51:fb:8f:
         d7:03:85:d6:c6:ec:bc:ae:8e:b9:08:9b:19:bf:0d:6f:c6:9f:
         7e:d3:28:49:17:a1:22:b4:33:52:cb:fb:8a:14:1b:eb:f7:f9:
         62:e1:8a:15:80:34:b2:34:b4:5a:95:05:d5:5a:33:87:c4:20:
         21:bd:2c:b7:5d:2c:26:8d:aa:1b:09:e1:e2:8e:e4:f5:25:a0:
         a8:7f:17:83:7c:64:ee:cb:ff:e7:c5:59:06:12:c3:27:cc:1e:
         9f:5f:c3:5f:56:ca:81:3f:0d:4b:94:de:5f:53:62:15:fb:c6:
         ab:94:ef:2f:cd:9f:e6:57:1d:f6:d5:8c:86:a4:5d:9d:d9:f1:
         71:d8:c1:ae:15:6f:ea:08:b1:85:ca:ff:b9:a0:f9:89:93:9c:
         01:d9:7f:4a:14:88:31:3a:8f:aa:bf:2f:dd:e9:80:5f:fb:4b:
         49:5f:c2:a7
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUeZpl/G44fBxW5WEKDCfIoCym0GIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwOTA5MTM0MTE2WhcNMjcwOTA4MTM0NjE2
WjAzMTEwLwYDVQQDEyg3OTM5NjBERjlDMzNGRTA5Q0U0NzAxQ0I0N0I3QUY1RTA4
RTFEREIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGaXZY/F1qph
H1iN3L8LMFwJ0b5Xu+PwLzuYi7ESz6EwWQuM2JS/L+2zwN4ZSwUXw+v0+jk/oNpZ
1L5zT06lx4fMWFej+zXxVDLz+e/IcF7PbL1yWNMgvG2AjCD+2wDqjkztWRXOgD2A
A326jbQXXHxo25nObHHXF/P5L2DBsdO/FQDpv7OIK9d3F5TsMP/fviErMpEiy3UP
EFKpeJHn00nBQ0IX7nuBphRSMNxsTJ5gIj1YbwrXQSRY3AjkjjF3qRWlDwSpdorW
TtWoxsXXy/acXojLqDe/TEYyDtR0d15j7OHzIaTmhszTSVo/kkPBeDJ9oYq+h3fO
oQ10Rp6oCQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFHk5YN+cM/4JzkcBy0e3r14I
4d2xMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzYwMTE3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf7OMA0GCSqGSIb3DQEBCwUAA4IB
AQAIibOWcfZy8jeR6RTnNv5pNfCCDJ4c2FfjKbWpubIICpENveToCQbm6BA/Idqt
CQsh4p79LJNh+Y/tnw5Ql6OFAU3eiW6kOpOy0y+MpZUZUXnk3S5hqK5R+4/XA4XW
xuy8ro65CJsZvw1vxp9+0yhJF6EitDNSy/uKFBvr9/li4YoVgDSyNLRalQXVWjOH
xCAhvSy3XSwmjaobCeHijuT1JaCofxeDfGTuy//nxVkGEsMnzB6fX8NfVsqBPw1L
lN5fU2IV+8arlO8vzZ/mVx321YyGpF2d2fFx2MGuFW/qCLGFyv+5oPmJk5wB2X9K
FIgxOo+qvy/d6YBf+0tJX8Kn
-----END CERTIFICATE-----
Generated at Fri Sep 11 17:08:22 2026 by rpki-client