Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60781.roa
File:                     AS60781.roa (raw, json)
Hash identifier:          HLh7oMHH91zl98b565tFjQxEbBxyErfqLWp83MvqWb4=
Subject key identifier:   D4:79:55:FF:17:32:E9:91:C1:81:8D:14:4E:8B:69:19:84:B7:30:7B
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       2C3ACB8E66F2AFBCE9A584AD316E3711667BBBA5
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60781.roa
Signing time:             Mon 20 Jul 2026 09:16:54 +0000
ROA not before:           Mon 20 Jul 2026 09:11:54 +0000
ROA not after:            Mon 19 Jul 2027 09:16:54 +0000
asID:                     60781
IP address blocks:        94.26.24.0/24 maxlen: 24
                          160.202.133.0/24 maxlen: 24
                          185.99.135.0/24 maxlen: 24
                          199.47.241.0/24 maxlen: 24
                          199.47.242.0/24 maxlen: 24
                          2a0d:d907::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 18:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:3a:cb:8e:66:f2:af:bc:e9:a5:84:ad:31:6e:37:11:66:7b:bb:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul 20 09:11:54 2026 GMT
            Not After : Jul 19 09:16:54 2027 GMT
        Subject: CN=D47955FF1732E991C1818D144E8B691984B7307B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8a:6e:8b:84:d9:5d:35:40:b4:47:63:11:75:
                    cc:07:97:ec:02:1d:3d:6a:0a:de:03:89:e0:09:ce:
                    cd:56:6e:d8:6f:ac:9c:0a:bc:a0:3a:ae:96:68:63:
                    1f:d8:f4:14:68:2c:fe:c6:ba:62:f1:f7:61:2f:a6:
                    ca:ec:c8:49:db:cc:3d:b8:8f:db:75:d1:0b:df:c3:
                    f1:af:34:67:56:b7:3f:89:a9:3a:50:5e:44:6e:29:
                    cd:4f:e4:4e:7e:ae:59:db:76:7a:88:87:bd:9b:26:
                    e1:9d:96:88:83:46:04:81:56:cc:2f:2d:9c:93:65:
                    f7:73:01:c4:1d:95:55:b0:43:dd:3c:63:23:c6:ad:
                    57:e2:f7:3e:d2:52:d3:3d:98:a2:fa:c5:4b:67:99:
                    47:6f:4c:91:97:2d:8e:28:12:8c:7f:c6:e8:52:65:
                    78:ea:b3:ce:5c:4f:de:36:ef:f2:43:2a:8d:96:37:
                    53:da:04:a5:47:1b:e1:81:84:20:da:7c:a7:ce:c8:
                    a7:82:1b:5b:3d:f1:66:e4:ee:85:78:8a:e8:83:34:
                    f5:33:19:1e:f6:d3:4b:39:7a:9d:78:7c:62:05:3d:
                    52:bf:f1:36:8d:3b:52:03:77:22:79:b3:ef:83:60:
                    9d:2f:06:6f:5b:10:4d:e7:74:ee:5f:5b:e1:80:ea:
                    82:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:79:55:FF:17:32:E9:91:C1:81:8D:14:4E:8B:69:19:84:B7:30:7B
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60781.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.26.24.0/24
                  160.202.133.0/24
                  185.99.135.0/24
                  199.47.241.0-199.47.242.255
                IPv6:
                  2a0d:d907::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:76:4a:2a:47:da:35:c9:a9:56:7c:33:d5:29:10:17:58:bc:
         8a:39:7c:f2:83:8e:ff:46:68:32:b8:3a:a5:1b:df:01:cc:f1:
         ed:28:d1:75:bc:5a:a1:f0:38:e8:e9:55:46:62:e3:c4:a4:a3:
         21:d1:d7:34:60:78:68:89:e6:00:cb:8c:11:79:4a:d7:01:4d:
         81:1c:e9:81:fe:31:28:9f:7c:c8:9e:e5:ff:ea:68:33:27:63:
         a5:71:e3:a8:50:8c:5e:58:78:9c:7c:3c:c1:fe:dc:27:9d:10:
         ce:a3:b8:bb:96:e0:56:8d:f0:c2:e9:84:e1:38:82:5c:26:14:
         9e:df:3c:72:e3:fb:2d:93:ca:f9:a5:40:8c:1b:93:2f:be:98:
         41:ad:09:b1:52:0e:52:9b:7b:4a:a4:a0:9a:5b:27:22:f1:af:
         96:58:9e:47:05:59:98:f0:ef:2c:90:a6:9c:33:0c:5f:77:19:
         4d:a3:8a:66:86:c4:79:a9:cf:95:da:20:a8:6d:da:86:5e:70:
         7a:b5:05:49:eb:23:10:3f:88:d0:fd:28:aa:f3:ea:19:45:08:
         a4:0d:53:60:24:13:78:24:33:81:33:75:6f:43:94:35:b4:98:
         bc:c4:71:1a:76:7d:c8:b3:9d:42:03:63:49:9e:7a:02:66:ef:
         6f:4b:8a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:35:10 2026 by rpki-client