Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS5650.roa
File:                     AS5650.roa (raw, json)
Hash identifier:          WHGyTg+JyiY3viLGUAoLIYLiFLh6qMB7nbpckG7qSWg=
Subject key identifier:   B1:1B:1C:4D:8D:40:FE:A9:3C:99:AB:4E:66:90:E0:98:76:4D:1D:21
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       7BDBB7DC31880BDC89331CA79B73C6AA14B8345A
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS5650.roa
Signing time:             Thu 21 May 2026 04:42:50 +0000
ROA not before:           Thu 21 May 2026 04:37:50 +0000
ROA not after:            Thu 20 May 2027 04:42:50 +0000
asID:                     5650
IP address blocks:        140.99.144.0/22 maxlen: 24
                          140.99.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/c556b910-dc6c-4228-adf3-8828ac96ee60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 01:29:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:db:b7:dc:31:88:0b:dc:89:33:1c:a7:9b:73:c6:aa:14:b8:34:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: May 21 04:37:50 2026 GMT
            Not After : May 20 04:42:50 2027 GMT
        Subject: CN=B11B1C4D8D40FEA93C99AB4E6690E098764D1D21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:98:81:a1:60:28:dd:73:08:b0:2b:cb:f6:c5:
                    9f:65:9a:59:47:a9:ba:2c:64:e3:8c:4d:fb:32:a0:
                    32:ec:58:66:58:d1:00:2f:70:d8:4f:2a:15:c9:35:
                    c4:26:62:2f:c4:f1:d0:b0:2c:8c:1d:48:4c:15:10:
                    f8:09:ac:61:14:78:f4:e2:8a:ed:f1:58:4d:9e:b9:
                    4b:d5:b2:d5:8f:9d:8e:15:24:3b:96:9a:9e:20:c8:
                    ef:24:31:54:97:76:a3:a4:ad:b8:22:e4:c3:35:90:
                    54:73:be:1f:9c:3c:e4:40:85:32:62:0a:77:2b:d4:
                    18:9e:ab:0f:56:4b:6a:30:a8:d8:77:b3:d2:89:a8:
                    52:f1:44:bb:33:e7:48:9d:8c:ae:cc:87:ad:cb:27:
                    1f:74:48:15:16:a3:ce:47:f8:63:48:43:81:09:44:
                    20:9d:79:54:bc:55:b5:c8:03:ab:09:0a:18:9a:04:
                    9f:cd:9f:1b:87:bc:3a:80:dc:cb:bc:c7:ba:3d:ae:
                    6b:58:06:eb:3f:5a:91:95:70:ef:df:d5:43:1d:3d:
                    fe:4e:2c:a9:82:00:69:19:16:12:3d:cf:de:10:24:
                    2e:55:76:bd:4e:a9:4a:63:c8:d6:5e:92:d8:48:93:
                    2a:0d:6d:2a:98:9e:12:97:62:63:0c:ab:97:61:88:
                    f7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:1B:1C:4D:8D:40:FE:A9:3C:99:AB:4E:66:90:E0:98:76:4D:1D:21
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS5650.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.144.0/22
                  140.99.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:39:0a:5f:fc:3c:1c:3a:bf:e3:65:c6:d7:c9:26:37:d3:9b:
         e7:ca:05:fa:a3:f2:45:40:2e:5c:73:b1:94:6a:f9:f1:90:12:
         14:bf:de:6f:b0:1d:67:95:24:f1:17:db:7f:f8:c5:5f:74:a3:
         b6:a0:d1:bc:6e:ed:68:ea:a7:8e:27:0f:82:89:5a:91:44:40:
         b6:9c:4f:6b:61:3e:83:1f:f8:45:c7:8f:fd:d3:b7:3f:1b:5c:
         1d:09:85:ce:af:db:1a:45:4c:23:ae:4e:2c:65:04:da:c4:aa:
         35:56:66:27:97:54:36:58:af:ea:b6:6f:17:29:9e:48:9e:e9:
         fd:6b:fd:4e:6b:ec:42:53:df:29:15:64:e9:ea:d3:e8:cc:44:
         75:fe:7a:96:94:84:30:1b:62:e3:18:ca:cf:73:a8:0b:82:39:
         ab:31:50:80:9a:c8:01:61:a6:ee:43:26:82:63:3c:c3:da:c7:
         77:ae:bb:48:cf:67:a0:19:85:1e:52:63:86:80:5d:f9:7c:5c:
         5f:79:99:85:da:8b:c2:96:99:c5:66:1b:89:db:2d:71:f0:7a:
         33:3a:3f:bc:46:c6:28:af:ca:da:cd:b2:95:43:1e:fc:4f:25:
         0f:70:e8:27:26:ca:76:8d:e9:b5:3c:43:2a:64:a5:06:6f:6d:
         63:f1:1c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:16:34 2026 by rpki-client