Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60445.roa
File:                     AS60445.roa (raw, json)
Hash identifier:          NKfUgigMwYUPrmKJzrkhEnspheJJ+qaWvm7aMo8LFiM=
Subject key identifier:   B2:A0:93:85:86:40:10:FE:41:15:C8:F9:5F:26:BA:DD:53:83:91:EC
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       1AB49C81965B64C7527A191C1072739E05365BEC
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60445.roa
Signing time:             Tue 01 Sep 2026 23:59:18 +0000
ROA not before:           Tue 01 Sep 2026 23:54:18 +0000
ROA not after:            Tue 31 Aug 2027 23:59:18 +0000
asID:                     60445
IP address blocks:        2a0a:6047::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b4:9c:81:96:5b:64:c7:52:7a:19:1c:10:72:73:9e:05:36:5b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Sep  1 23:54:18 2026 GMT
            Not After : Aug 31 23:59:18 2027 GMT
        Subject: CN=B2A09385864010FE4115C8F95F26BADD538391EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:ff:76:bf:8c:65:51:96:10:d6:05:18:bc:
                    11:e8:64:48:44:9b:9f:30:2a:9e:37:f8:44:b1:99:
                    7f:8c:13:33:2d:17:ff:72:27:74:3c:a4:81:0e:a7:
                    c2:93:3a:12:b1:b2:96:7b:14:7a:95:e8:fa:53:da:
                    0b:26:fc:5a:f4:ad:b8:3f:99:67:88:85:9a:ac:96:
                    ce:c7:a9:8c:82:86:75:57:8d:59:6e:8f:9c:a6:7c:
                    1b:20:0b:34:34:ae:d9:b8:e6:a2:31:35:f0:7c:f2:
                    68:bc:3a:ca:48:b1:ce:5e:3b:b1:dd:77:d3:55:e8:
                    50:16:4d:58:05:5c:68:0b:c0:13:b1:0a:d4:c6:3a:
                    c8:8d:75:b5:f1:ea:ce:f7:35:30:56:20:dd:ee:ed:
                    15:ce:73:33:de:04:81:c3:b3:a8:4b:68:99:5a:b5:
                    1e:0f:c7:09:28:d9:2b:ca:e2:1e:26:93:6c:0e:23:
                    b5:b5:f0:9c:b6:b4:31:76:47:47:ae:b4:ba:d3:41:
                    0e:dd:94:18:4e:00:0b:a2:87:11:f0:59:06:a9:8b:
                    e1:22:59:fa:68:61:b8:ce:43:19:a4:fd:21:7b:67:
                    4f:88:4e:bf:f6:14:c8:ea:74:8d:19:df:f3:6d:94:
                    71:00:fc:4d:5c:a7:1a:cf:f1:6a:99:69:ec:ad:ae:
                    2e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A0:93:85:86:40:10:FE:41:15:C8:F9:5F:26:BA:DD:53:83:91:EC
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS60445.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6047::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:e2:14:47:54:76:16:32:1f:25:38:cb:97:8c:e8:22:c6:40:
         fd:46:eb:1b:bb:89:89:bd:d1:32:bf:92:d4:34:43:01:20:95:
         38:be:78:4a:14:76:34:e1:43:d7:23:7c:d1:f7:4c:48:87:a5:
         c6:5e:16:09:56:07:a6:fa:08:e6:f1:28:f7:b3:44:cb:4c:00:
         d4:42:33:ef:98:44:ae:cf:ff:ca:21:bf:fe:95:e1:cc:15:c5:
         2d:32:24:49:bf:72:ec:71:71:b5:c1:35:8f:b3:de:6c:60:96:
         d4:3c:bd:fb:5c:44:d5:00:b6:ae:65:7d:5d:e4:4b:bc:2c:e4:
         54:af:97:02:8e:77:1d:0c:81:c4:f3:69:16:9d:c2:74:a9:06:
         c4:ee:ea:47:0a:c2:fa:b7:ab:42:07:a8:ff:43:0b:ca:ef:c9:
         77:ca:a9:62:f4:f8:c5:c4:79:a0:ba:13:6c:be:6a:02:1c:6e:
         b6:5e:15:8f:25:ae:43:ff:a6:ce:b0:64:b4:59:08:39:d4:ff:
         70:f0:92:e3:96:27:99:5d:36:1a:4c:5d:61:43:db:fc:9e:97:
         2e:c1:7b:75:40:0f:be:3f:14:69:05:25:ef:5b:9e:aa:01:2d:
         79:a3:d9:fa:62:51:e1:23:b8:02:03:da:d3:ea:39:0e:e0:bb:
         34:5c:86:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----