Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60781.roa
File: AS60781.roa (raw, json)
Hash identifier: XdyCx+XeFwUNEc2IUshh/Zxi6HfLjlYyAYKjdSjtbNY=
Subject key identifier: CE:DD:E1:EE:E9:FD:29:35:3F:B5:C0:0F:4F:D9:CF:E2:39:55:D4:4B
Certificate issuer: /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial: 5AF86C1F3ACE683721AF8C4E1E7E8F8ABF2B6265
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60781.roa
Signing time: Thu 18 Sep 2025 19:18:35 +0000
ROA not before: Thu 18 Sep 2025 19:13:35 +0000
ROA not after: Thu 17 Sep 2026 19:18:35 +0000
asID: 60781
IP address blocks: 94.26.24.0/24 maxlen: 24
160.202.133.0/24 maxlen: 24
185.99.135.0/24 maxlen: 24
199.47.241.0/24 maxlen: 24
199.47.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:f8:6c:1f:3a:ce:68:37:21:af:8c:4e:1e:7e:8f:8a:bf:2b:62:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Validity
Not Before: Sep 18 19:13:35 2025 GMT
Not After : Sep 17 19:18:35 2026 GMT
Subject: CN=CEDDE1EEE9FD29353FB5C00F4FD9CFE23955D44B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fd:ed:b0:b4:46:94:ae:0d:9b:64:c3:b8:5e:
38:69:7f:23:11:06:24:f1:87:a4:c1:3a:32:18:01:
56:f4:f2:b2:81:47:f7:ec:a7:61:8a:23:f4:d4:b9:
e4:69:7a:3d:15:0e:60:8e:ef:64:b1:6f:77:47:6e:
6d:e4:5c:cf:43:fb:e8:a2:01:33:53:2b:12:eb:1a:
9a:ff:b7:60:2d:bc:5d:18:4c:bd:c5:e8:a5:dc:61:
72:fa:21:eb:be:8b:9d:5c:ba:85:77:98:07:5b:b7:
d0:91:1c:2c:72:67:80:5d:06:fc:97:6b:0e:99:73:
41:7a:a6:6d:71:5c:0e:21:50:d5:2d:86:ea:c4:04:
82:23:b9:0c:c7:47:57:a6:55:7f:98:2d:52:49:88:
7d:cc:8a:c1:7d:22:11:10:b3:8e:cb:8d:ec:55:44:
29:14:ec:1b:e1:87:df:07:2f:95:14:b9:2b:17:3b:
6b:66:d5:6c:67:32:e7:76:49:d6:7a:6d:12:a0:2a:
23:b6:8e:c6:47:c4:45:e7:d4:c8:6a:99:31:85:25:
d1:2c:14:cd:4e:67:c7:44:f5:c3:20:5b:00:e1:be:
cc:f7:18:42:5c:b2:df:4c:24:47:40:fe:0c:2d:21:
c1:b0:ee:f9:6f:1c:8e:75:6e:40:4a:a2:b0:76:ea:
3c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:DD:E1:EE:E9:FD:29:35:3F:B5:C0:0F:4F:D9:CF:E2:39:55:D4:4B
X509v3 Authority Key Identifier:
keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.24.0/24
160.202.133.0/24
185.99.135.0/24
199.47.241.0-199.47.242.255
Signature Algorithm: sha256WithRSAEncryption
5a:ba:44:cf:d0:25:8f:97:89:94:a1:e6:d7:4e:b6:89:e3:a3:
06:e5:db:c9:d2:42:45:dd:c4:79:ea:e9:fc:d0:e0:bf:aa:a6:
0e:54:30:aa:87:f8:f7:b2:ad:9d:cb:98:7c:af:6c:c6:20:f4:
93:35:2e:a0:72:f0:01:fa:20:b8:b3:57:68:13:bb:06:52:5a:
0a:f5:44:a2:cc:7e:bf:4a:de:07:e8:9b:28:8a:c6:14:e4:ed:
d6:9f:21:71:74:13:e7:14:c4:e3:16:b6:7b:6a:5d:88:bd:7a:
44:9d:c0:0d:b9:51:3a:91:35:af:0f:9b:d2:dd:01:b6:6e:4b:
cf:62:10:22:29:8c:d0:cb:51:c8:9d:36:f2:4e:72:4d:83:e4:
ba:82:c7:66:bb:dd:89:47:b4:96:c8:2b:4d:49:c6:7b:91:3a:
95:cb:ca:29:24:b2:da:51:94:2c:78:f0:56:62:fd:6a:4f:8b:
7f:b9:fe:1f:9d:44:81:89:21:2b:31:31:9d:63:7c:36:02:4e:
4a:32:e8:59:45:ae:32:b7:3c:3c:27:2a:c1:a4:0a:c6:6c:5b:
4c:cc:78:38:57:44:11:c2:b4:e9:7c:1a:7f:8f:9c:78:4f:a3:
ec:4c:ab:7d:70:07:ec:c0:41:71:ee:ab:a0:f5:26:8d:3a:2d:
65:78:af:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:25:13 2025 by rpki-client