Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS5650.roa
File:                     AS5650.roa (raw, json)
Hash identifier:          2PAF01EkMEosMVs1/v4xshsbj32gSleP5VSPvMeCZz0=
Subject key identifier:   AD:1A:7E:3D:DC:12:C1:AC:CF:73:2B:30:F7:FC:C1:A9:5A:51:A2:E1
Certificate issuer:       /CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
Certificate serial:       3D2C1F2CDCE1930B555F3D28A338C6A829E867E6
Authority key identifier: F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS5650.roa
Signing time:             Wed 06 May 2026 07:17:19 +0000
ROA not before:           Wed 06 May 2026 07:12:19 +0000
ROA not after:            Wed 05 May 2027 07:17:19 +0000
asID:                     5650
IP address blocks:        207.180.16.0/24 maxlen: 24
                          207.180.17.0/24 maxlen: 24
                          207.180.18.0/24 maxlen: 24
                          216.75.130.0/24 maxlen: 24
                          216.75.136.0/22 maxlen: 22
                          216.75.140.0/24 maxlen: 24
                          216.75.152.0/24 maxlen: 24
                          216.75.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl
                          rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 03:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2c:1f:2c:dc:e1:93:0b:55:5f:3d:28:a3:38:c6:a8:29:e8:67:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683
        Validity
            Not Before: May  6 07:12:19 2026 GMT
            Not After : May  5 07:17:19 2027 GMT
        Subject: CN=AD1A7E3DDC12C1ACCF732B30F7FCC1A95A51A2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:41:2a:20:91:2e:5d:d7:13:5f:bd:1d:26:
                    00:26:a1:5a:3e:c2:95:bc:a5:a1:53:90:b1:f5:16:
                    b4:9f:36:24:9d:e3:b5:ce:99:92:0d:cf:21:31:0d:
                    7f:a9:74:b6:ad:16:42:e5:47:7e:e8:c3:3f:bb:1f:
                    19:28:4f:97:70:44:f9:9f:03:ca:22:6b:1e:d9:86:
                    bf:b2:80:50:30:a6:dc:cd:96:e6:f5:74:ed:8f:4d:
                    a7:58:45:fd:ac:fd:eb:ea:09:48:79:f1:c2:ec:c5:
                    fc:c3:05:ad:6d:c2:38:f6:7a:0f:46:d0:a4:7a:19:
                    bd:15:7e:d0:d6:bf:87:3f:8a:3b:fd:1a:04:89:bd:
                    b0:a8:94:e7:a4:d8:19:0c:85:b8:77:97:d0:7a:78:
                    bb:22:76:1d:66:21:7e:d5:12:1d:32:90:2f:9d:00:
                    89:77:f6:a5:b5:af:f8:62:74:86:20:41:d3:82:6b:
                    74:11:c4:69:6f:a0:2f:d9:2d:74:f4:1d:8e:1f:65:
                    e9:60:d6:bc:43:60:26:77:fa:ee:ac:d4:29:73:fe:
                    dd:bb:17:ca:1c:cc:80:21:c4:01:43:d5:62:3e:84:
                    a8:10:e3:f2:00:0d:0f:a3:d3:ff:58:d5:cc:cf:d5:
                    e4:15:a1:0f:97:25:3d:27:e6:7b:83:35:3f:bb:da:
                    2b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1A:7E:3D:DC:12:C1:AC:CF:73:2B:30:F7:FC:C1:A9:5A:51:A2:E1
            X509v3 Authority Key Identifier:
                keyid:F4:1D:74:53:FD:D1:05:23:4D:49:0F:70:21:F0:7C:52:E1:82:D4:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/F41D7453FDD105234D490F7021F07C52E182D48C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e08699e0-0ca7-4b27-ad5d-69c6d9732ded/f0cdca5ed52ad89747b4a78c5029584a0ca1f0672400c63683.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4d9311dfdb6c4a5ba61b7bae0786dd3f/0/AS5650.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.180.16.0-207.180.18.255
                  216.75.130.0/24
                  216.75.136.0-216.75.140.255
                  216.75.152.0/24
                  216.75.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:c9:c5:a8:e9:97:ec:39:36:f0:57:cd:9e:a9:9c:32:02:eb:
         b3:8d:3f:01:ec:52:41:74:4a:49:8f:85:36:91:cc:d0:94:2e:
         a9:e2:ce:d1:01:f2:17:47:b5:6d:89:59:77:de:16:5a:8e:1e:
         87:8c:bb:e8:9c:70:e2:0a:4f:66:9f:3b:34:b2:e9:8f:26:d1:
         40:c6:2d:f6:dc:8b:42:94:5a:4d:7c:28:e0:de:3d:ea:65:89:
         00:6d:39:c5:9a:c8:6f:7e:63:bb:ec:c1:6f:2f:c5:07:d5:46:
         ac:14:75:fd:4b:d9:c2:77:06:9a:e2:e6:03:a8:70:8a:96:7a:
         4f:58:3d:4c:69:81:52:64:b5:c5:4f:f7:61:40:0e:d3:99:c1:
         2d:0f:f8:51:4b:cb:14:27:1f:3b:c4:30:f5:3a:ee:a8:08:d9:
         c7:06:c6:f1:8b:4b:01:4a:34:09:a3:eb:ab:61:ec:c4:b2:9c:
         f3:5f:30:6f:1b:cc:50:bc:fd:18:9f:02:b5:5e:9c:be:46:da:
         98:c9:c3:dc:3d:43:77:96:4c:76:22:a4:02:28:56:4c:37:1a:
         9c:69:2f:2f:04:1d:07:bc:c8:22:33:8b:d4:dd:54:8b:c5:8c:
         9b:59:a5:6c:4f:f6:5f:7c:57:c2:eb:dc:6b:da:f3:b8:55:57:
         df:88:2c:d9
-----BEGIN CERTIFICATE-----
MIIFpTCCBI2gAwIBAgIUPSwfLNzhkwtVXz0oozjGqCnoZ+YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjBjZGNhNWVkNTJhZDg5NzQ3YjRhNzhjNTAyOTU4NGEw
Y2ExZjA2NzI0MDBjNjM2ODMwHhcNMjYwNTA2MDcxMjE5WhcNMjcwNTA1MDcxNzE5
WjAzMTEwLwYDVQQDEyhBRDFBN0UzRERDMTJDMUFDQ0Y3MzJCMzBGN0ZDQzFBOTVB
NTFBMkUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGBBKiCRLl3X
E1+9HSYAJqFaPsKVvKWhU5Cx9Ra0nzYkneO1zpmSDc8hMQ1/qXS2rRZC5Ud+6MM/
ux8ZKE+XcET5nwPKImse2Ya/soBQMKbczZbm9XTtj02nWEX9rP3r6glIefHC7MX8
wwWtbcI49noPRtCkehm9FX7Q1r+HP4o7/RoEib2wqJTnpNgZDIW4d5fQeni7InYd
ZiF+1RIdMpAvnQCJd/alta/4YnSGIEHTgmt0EcRpb6Av2S109B2OH2XpYNa8Q2Am
d/rurNQpc/7duxfKHMyAIcQBQ9ViPoSoEOPyAA0Po9P/WNXMz9XkFaEPlyU9J+Z7
gzU/u9ormwIDAQABo4ICpTCCAqEwHQYDVR0OBBYEFK0afj3cEsGsz3MrMPf8wala
UaLhMB8GA1UdIwQYMBaAFPQddFP90QUjTUkPcCHwfFLhgtSMMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzRkOTMxMWRmZGI2YzRhNWJhNjFiN2JhZTA3ODZkZDNmLzAv
RjQxRDc0NTNGREQxMDUyMzRENDkwRjcwMjFGMDdDNTJFMTgyRDQ4Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyL2UwODY5OWUwLTBjYTctNGIyNy1hZDVkLTY5YzZkOTczMmRlZC9mMGNk
Y2E1ZWQ1MmFkODk3NDdiNGE3OGM1MDI5NTg0YTBjYTFmMDY3MjQwMGM2MzY4My5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvNGQ5MzExZGZkYjZjNGE1YmE2MWI3YmFlMDc4
NmRkM2YvMC9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwRwYI
KwYBBQUHAQcBAf8EODA2MDQEAgABMC4wDAMEBM+0EAMEAM+0EgMEANhLgjAMAwQD
2EuIAwQA2EuMAwQA2EuYAwQA2EubMA0GCSqGSIb3DQEBCwUAA4IBAQB4ycWo6Zfs
OTbwV82eqZwyAuuzjT8B7FJBdEpJj4U2kczQlC6p4s7RAfIXR7VtiVl33hZajh6H
jLvonHDiCk9mnzs0sumPJtFAxi323ItClFpNfCjg3j3qZYkAbTnFmshvfmO77MFv
L8UH1UasFHX9S9nCdwaa4uYDqHCKlnpPWD1MaYFSZLXFT/dhQA7TmcEtD/hRS8sU
Jx87xDD1Ou6oCNnHBsbxi0sBSjQJo+urYezEspzzXzBvG8xQvP0YnwK1Xpy+RtqY
ycPcPUN3lkx2IqQCKFZMNxqcaS8vBB0HvMgiM4vU3VSLxYybWaVsT/ZffFfC69xr
2vO4VVffiCzZ
-----END CERTIFICATE-----
Generated at Thu May 7 04:12:30 2026 by rpki-client