Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS5065.roa
File:                     AS5065.roa (raw, json)
Hash identifier:          0gbjY3uvVDnroh6tSity9ippsbb4EZ6gMTzyPl67f+8=
Subject key identifier:   01:48:3C:C7:C5:13:5D:F9:04:69:DA:79:4F:70:5A:A2:2F:91:54:F9
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       2237153F13D53CD5557BA7C111982C5435119D3B
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS5065.roa
Signing time:             Sun 09 Mar 2025 13:28:26 +0000
ROA not before:           Sun 09 Mar 2025 13:23:26 +0000
ROA not after:            Sun 08 Mar 2026 13:28:26 +0000
asID:                     5065
IP address blocks:        140.99.35.0/24 maxlen: 24
                          140.99.186.0/23 maxlen: 24
                          140.99.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 16:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:37:15:3f:13:d5:3c:d5:55:7b:a7:c1:11:98:2c:54:35:11:9d:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Mar  9 13:23:26 2025 GMT
            Not After : Mar  8 13:28:26 2026 GMT
        Subject: CN=01483CC7C5135DF90469DA794F705AA22F9154F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8a:55:c7:f4:7a:b0:bb:4c:cb:08:f4:8c:42:
                    3a:dd:79:7a:04:be:46:22:3a:b5:bc:98:d6:91:06:
                    00:f0:af:2b:4d:52:26:bf:44:c2:f1:b5:d9:03:7e:
                    2f:18:91:1c:98:31:70:bf:ce:1e:29:26:c2:cf:b6:
                    11:fe:bb:b4:07:6e:e9:d1:bb:c7:0a:7b:68:3e:85:
                    ac:c1:f1:64:37:84:94:08:b4:16:59:1f:fa:12:72:
                    fa:a1:59:48:51:28:80:aa:67:87:8c:dc:ec:af:30:
                    22:6c:6f:a2:af:5d:7c:96:8e:f9:a5:5e:55:c8:e7:
                    94:c6:49:5c:cc:5c:61:e2:22:93:de:08:47:6a:a6:
                    8b:0b:79:41:31:36:2b:31:2c:b6:fe:b1:97:48:aa:
                    98:46:57:6a:61:da:09:2a:de:c9:22:9e:86:ed:0a:
                    0f:86:82:8c:73:bd:ba:10:23:55:90:71:2b:9e:7f:
                    68:1d:3f:eb:b3:46:09:3d:37:56:0e:77:73:21:71:
                    78:03:45:61:88:7a:9a:c7:4e:cf:6d:fa:98:99:c0:
                    a6:16:80:5e:21:04:77:87:16:56:58:5a:60:eb:8d:
                    c8:4b:7a:c9:7f:b2:69:91:60:26:7e:a0:c8:2d:db:
                    a1:d9:cf:ca:d9:d0:3c:a9:a1:7a:d2:64:de:2e:c3:
                    86:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:48:3C:C7:C5:13:5D:F9:04:69:DA:79:4F:70:5A:A2:2F:91:54:F9
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS5065.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.35.0/24
                  140.99.186.0/23
                  140.99.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:4a:a3:9b:b6:5d:45:68:1b:db:33:fa:b4:e2:f1:8a:7e:63:
         be:e7:7f:b0:ce:bc:cb:2c:61:de:25:5c:8e:45:e1:89:42:a9:
         17:c1:4f:0a:35:57:14:f2:89:ab:12:0a:0d:d5:1c:fe:68:9b:
         23:52:6c:19:3e:b9:6d:b1:f8:78:36:a5:9d:1b:03:c7:5b:e4:
         73:2a:72:e5:b1:6c:eb:5e:6e:fb:c9:d7:ef:29:65:0b:d6:ad:
         6d:37:2d:80:24:e8:ed:bb:b5:85:94:1b:05:21:63:bc:69:c0:
         b8:c8:08:10:8f:ae:49:30:96:58:11:37:0b:97:1c:08:23:14:
         85:94:2a:1d:2c:8b:d3:5d:3f:ed:49:58:95:86:74:ab:e5:26:
         21:ec:20:21:5d:3b:50:9f:42:77:7b:a6:a2:0f:a5:94:c8:3b:
         fa:49:77:28:01:db:14:d2:a9:eb:60:3a:21:8e:48:a4:03:38:
         12:bd:da:0e:96:17:ec:db:d8:ee:f8:81:08:a2:e0:d9:34:31:
         9a:d5:43:65:02:39:60:cd:8d:51:83:dd:cf:95:ad:84:c9:32:
         59:03:77:79:2d:e7:b1:8f:bd:19:02:70:77:3f:3f:a5:fc:d0:
         2e:68:ce:f2:91:14:ab:90:a8:fc:8b:bd:f9:ad:13:ef:81:13:
         02:49:b7:40
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIUIjcVPxPVPNVVe6fBEZgsVDURnTswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWM5MzU2ODQ4NTAzNGQ2ZjU5MDEyNjI3ODAxNWU1NTc4
Njc2NTMyM2YzMjlkNmFhMDUwHhcNMjUwMzA5MTMyMzI2WhcNMjYwMzA4MTMyODI2
WjAzMTEwLwYDVQQDEygwMTQ4M0NDN0M1MTM1REY5MDQ2OURBNzk0RjcwNUFBMjJG
OTE1NEY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4pVx/R6sLtM
ywj0jEI63Xl6BL5GIjq1vJjWkQYA8K8rTVImv0TC8bXZA34vGJEcmDFwv84eKSbC
z7YR/ru0B27p0bvHCntoPoWswfFkN4SUCLQWWR/6EnL6oVlIUSiAqmeHjNzsrzAi
bG+ir118lo75pV5VyOeUxklczFxh4iKT3ghHaqaLC3lBMTYrMSy2/rGXSKqYRldq
YdoJKt7JIp6G7QoPhoKMc726ECNVkHErnn9oHT/rs0YJPTdWDndzIXF4A0VhiHqa
x07PbfqYmcCmFoBeIQR3hxZWWFpg643IS3rJf7JpkWAmfqDILduh2c/K2dA8qaF6
0mTeLsOGrwIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFAFIPMfFE135BGnaeU9wWqIv
kVT5MB8GA1UdIwQYMBaAFLsns3tY8FYG4V9SyiQuodT+trMEMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTgzN2ZkMGRmMGE3MGM4LzAv
QkIyN0IzN0I1OEYwNTYwNkUxNUY1MkNBMjQyRUExRDRGRUI2QjMwNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2M1NTZiOTEwLWRjNmMtNDIyOC1hZGYzLTg4MjhhYzk2ZWU2MC9lYzkz
NTY4NDg1MDM0ZDZmNTkwMTI2Mjc4MDE1ZTU1Nzg2NzY1MzIzZjMyOWQ2YWEwNS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MmQ1ZGU0MTAxODM3ZmQwZGYw
YTcwYzgvMC9BUzUwNjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwKwYI
KwYBBQUHAQcBAf8EHDAaMBgEAgABMBIDBACMYyMDBAGMY7oDBACMY80wDQYJKoZI
hvcNAQELBQADggEBAFJKo5u2XUVoG9sz+rTi8Yp+Y77nf7DOvMssYd4lXI5F4YlC
qRfBTwo1VxTyiasSCg3VHP5omyNSbBk+uW2x+Hg2pZ0bA8db5HMqcuWxbOtebvvJ
1+8pZQvWrW03LYAk6O27tYWUGwUhY7xpwLjICBCPrkkwllgRNwuXHAgjFIWUKh0s
i9NdP+1JWJWGdKvlJiHsICFdO1CfQnd7pqIPpZTIO/pJdygB2xTSqetgOiGOSKQD
OBK92g6WF+zb2O74gQii4Nk0MZrVQ2UCOWDNjVGD3c+VrYTJMlkDd3kt57GPvRkC
cHc/P6X80C5ozvKRFKuQqPyLvfmtE++BEwJJt0A=
-----END CERTIFICATE-----
Generated at Tue Apr 8 17:09:30 2025 by rpki-client