Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS60602.roa
File:                     AS60602.roa (raw, json)
Hash identifier:          4idXELoR9kSqomBvZFoe1300vJ/xKk1ug81Ewkj2FTE=
Subject key identifier:   B5:D2:E1:28:C1:53:D5:42:BC:28:32:03:D1:13:C0:61:78:4D:E5:00
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1A1EBC4D908B4C8D4C21C2D132B64D3FB5E0BD33
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS60602.roa
Signing time:             Tue 26 May 2026 13:25:50 +0000
ROA not before:           Tue 26 May 2026 13:20:50 +0000
ROA not after:            Tue 25 May 2027 13:25:50 +0000
asID:                     60602
IP address blocks:        157.254.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 29 May 2026 16:58:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1e:bc:4d:90:8b:4c:8d:4c:21:c2:d1:32:b6:4d:3f:b5:e0:bd:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 26 13:20:50 2026 GMT
            Not After : May 25 13:25:50 2027 GMT
        Subject: CN=B5D2E128C153D542BC283203D113C061784DE500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d0:83:2c:e0:44:20:ab:58:79:50:39:4f:cc:
                    2e:b3:59:97:4b:ad:e4:66:e5:c5:54:9d:e7:3d:d7:
                    78:8c:ff:52:8d:f6:66:ab:71:45:fd:8d:1b:1c:df:
                    92:3a:78:be:23:cd:8f:40:02:41:b2:a8:48:42:6c:
                    e2:55:07:1a:76:1f:68:d7:fc:7b:20:32:ed:6f:bd:
                    ce:fa:e1:12:18:6f:13:6e:6a:5f:ed:39:f1:29:0a:
                    cb:ce:03:04:d2:cc:4f:0f:98:4c:ab:a6:ad:7d:b2:
                    8d:38:57:fd:ce:a7:08:01:84:d5:3e:dd:aa:a0:c9:
                    37:6c:fc:cb:d0:54:31:b5:0b:1e:1f:65:48:16:98:
                    18:22:61:ae:d5:27:f6:bb:f4:11:8c:9d:cc:a0:9b:
                    f5:e8:a0:d7:70:18:fc:76:f4:0c:e4:72:21:ae:58:
                    9e:2e:54:9c:b3:25:b5:bb:0d:04:54:42:c7:88:b8:
                    21:64:41:98:ad:35:0e:1a:b5:21:fc:f4:6f:ea:50:
                    a4:88:96:fa:59:9b:85:4d:95:77:6e:2c:6b:21:41:
                    8c:01:3e:b9:f6:3a:57:9a:3c:eb:81:40:04:bd:7e:
                    76:50:64:ca:92:05:35:07:95:84:79:4b:a4:33:92:
                    fb:86:b6:8b:02:07:23:82:da:15:a4:56:4b:41:19:
                    91:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D2:E1:28:C1:53:D5:42:BC:28:32:03:D1:13:C0:61:78:4D:E5:00
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS60602.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:f9:88:ec:f0:93:3c:21:63:ab:19:59:aa:66:4d:d5:65:83:
         a5:b5:00:bb:33:2a:00:d0:a3:e7:d8:eb:70:3a:ce:af:71:03:
         0b:3d:b1:f4:ab:16:46:51:79:67:92:2b:39:bf:66:18:d5:94:
         d9:eb:6d:99:66:3f:73:b0:9f:84:48:e7:e1:04:a6:71:42:e4:
         5b:eb:32:22:d6:97:b0:e1:52:d8:b0:03:d7:41:ad:8a:94:3c:
         13:db:e3:09:60:d9:d3:20:23:7c:be:85:35:77:8c:3d:40:85:
         ab:a5:d4:35:e7:c5:dd:2d:ca:9e:33:1c:53:44:7b:df:2c:b7:
         e8:ad:05:31:5a:16:f0:81:db:a4:ee:73:df:54:0f:07:ea:76:
         87:79:7d:b1:7c:32:3b:b8:fb:2f:44:b2:95:ff:ee:50:66:3b:
         4c:19:2c:08:e3:b3:9b:a3:2d:00:6d:d1:f5:63:35:a8:4f:fe:
         88:92:c2:4a:13:08:9c:28:89:25:e9:5e:87:75:a8:5d:80:05:
         87:bb:f2:98:f6:81:05:47:5e:c2:53:b6:7b:ee:39:29:c7:fe:
         16:5d:e1:47:91:a4:2a:47:5d:d2:65:0c:69:1b:67:d1:2c:dd:
         46:63:0d:a9:83:f8:8a:86:94:2a:5f:b0:7d:8c:9f:d7:df:26:
         55:88:b4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 19:40:01 2026 by rpki-client