Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60379.roa
File:                     AS60379.roa (raw, json)
Hash identifier:          7rCjRgwQhHnysev9m3g5NKhdIvv+6XIwSXsnsVUC+Og=
Subject key identifier:   71:E7:88:83:86:BF:26:29:F1:34:10:1F:5D:BF:2E:60:35:CB:75:F2
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       0A365EC8F7565622F07BFA21ED8B1C775C94BC8A
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60379.roa
Signing time:             Thu 03 Jul 2025 15:51:20 +0000
ROA not before:           Thu 03 Jul 2025 15:46:20 +0000
ROA not after:            Thu 02 Jul 2026 15:51:20 +0000
asID:                     60379
IP address blocks:        2a06:a005:127b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:36:5e:c8:f7:56:56:22:f0:7b:fa:21:ed:8b:1c:77:5c:94:bc:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul  3 15:46:20 2025 GMT
            Not After : Jul  2 15:51:20 2026 GMT
        Subject: CN=71E7888386BF2629F134101F5DBF2E6035CB75F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1a:85:35:e9:4d:e7:df:24:f5:e8:ed:34:41:
                    ce:09:14:07:c4:d2:0b:bf:50:e9:6d:33:1a:e5:b4:
                    0a:e9:ab:1b:a3:24:ac:6d:63:37:a3:40:37:c1:88:
                    e2:48:03:64:c9:ca:72:1c:0a:d8:53:48:9f:37:ad:
                    1e:a9:d9:b1:b0:3a:76:ba:1c:ec:cb:8d:09:00:87:
                    4a:1b:d7:9f:25:82:6c:70:d2:fd:0a:8b:31:83:de:
                    f0:ff:72:b2:1f:36:02:02:b6:43:9b:9e:a1:4d:1b:
                    71:11:4e:88:14:c7:61:23:01:d7:c1:24:c8:88:31:
                    bc:2a:3d:72:3e:a7:a0:11:d3:d6:f7:a9:a4:de:46:
                    f5:c3:ba:c3:e8:ec:d0:e3:1f:a6:c2:9d:ee:e0:7d:
                    97:cc:9d:6a:12:c6:c1:fe:53:34:76:54:9e:df:69:
                    60:b5:f1:2a:e5:bf:bb:92:63:64:25:47:ff:78:ee:
                    30:c9:1e:de:2d:3d:22:f2:57:67:e5:8a:51:f9:bc:
                    50:16:2a:7c:c9:71:aa:e1:be:dd:2c:c9:af:6f:42:
                    35:53:69:12:54:d5:a8:6c:bb:a3:60:b1:e9:d0:7e:
                    d4:4a:d6:80:65:bf:ec:da:08:18:27:ce:27:65:c6:
                    8d:c1:45:aa:9d:d7:03:64:4f:f2:e7:4e:92:a0:4f:
                    d1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E7:88:83:86:BF:26:29:F1:34:10:1F:5D:BF:2E:60:35:CB:75:F2
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60379.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:127b::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:5b:81:69:d3:14:ee:4c:16:b6:3d:75:ec:1d:7c:03:d0:33:
         03:4b:58:58:1c:7f:f6:54:38:0c:e2:b5:2d:fe:82:9d:74:63:
         82:40:4a:0a:99:0f:2a:bf:b1:d2:18:44:4e:ca:f9:f3:a7:28:
         cb:fb:c2:92:25:16:c1:48:d7:ff:50:be:3e:fd:77:f6:76:f3:
         92:95:40:54:bf:73:20:6a:70:67:42:e9:f6:80:9d:ee:c5:d7:
         a3:fb:38:46:a8:3f:70:41:96:4d:53:8a:82:1d:30:c5:62:d3:
         06:a0:45:a9:17:7e:27:09:ee:dc:ba:0e:3c:f8:6d:44:ba:95:
         e8:a9:b0:27:99:a9:d0:fd:8a:0f:78:a9:50:d0:95:fd:a9:32:
         37:9a:66:5a:c0:9a:8e:c9:67:ce:75:84:b7:4b:dc:9d:e1:19:
         13:dd:bb:1c:57:0d:0d:71:20:83:be:63:a2:ec:1e:20:87:f8:
         77:c2:fb:5d:fb:42:fc:05:af:77:1b:9d:84:6d:29:c3:9a:72:
         7d:f2:6b:a7:fb:b9:47:93:89:7c:48:ee:68:8f:97:ba:1b:6c:
         fb:2f:7b:19:6c:34:27:7a:14:ca:9f:dd:b7:99:04:05:a4:0a:
         5b:2c:79:4a:90:13:7c:93:c8:52:8e:7f:75:65:4b:3b:fb:e1:
         d9:3b:db:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 22:09:59 2025 by rpki-client