Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS5065.roa
File:                     AS5065.roa (raw, json)
Hash identifier:          8XbbGZk3uVFAWkSW2VgSh05vnxTZmNxGi0ixcqGkgrA=
Subject key identifier:   C4:1A:40:FB:9A:0A:A7:35:26:B5:10:55:FC:F5:E4:B5:46:77:B5:44
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       1111E840FC8AF34CC7E9FBD2376C773E5AF11C29
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS5065.roa
Signing time:             Tue 16 Apr 2024 16:21:26 +0000
ROA not before:           Tue 16 Apr 2024 16:16:26 +0000
ROA not after:            Tue 15 Apr 2025 16:21:26 +0000
asID:                     5065
IP address blocks:        98.142.250.0/24 maxlen: 24
                          104.234.121.0/24 maxlen: 24
                          104.234.164.0/24 maxlen: 24
                          104.234.201.0/24 maxlen: 24
                          104.234.218.0/24 maxlen: 24
                          104.234.221.0/24 maxlen: 24
                          104.234.248.0/24 maxlen: 24
                          104.234.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 03:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:11:e8:40:fc:8a:f3:4c:c7:e9:fb:d2:37:6c:77:3e:5a:f1:1c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr 16 16:16:26 2024 GMT
            Not After : Apr 15 16:21:26 2025 GMT
        Subject: CN=C41A40FB9A0AA73526B51055FCF5E4B54677B544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:ae:1e:b1:fb:0c:4e:25:d0:68:5a:d1:e8:
                    92:56:58:26:7a:bb:7b:b1:81:4c:ba:c7:ee:a1:65:
                    3b:2c:a9:c5:41:76:ec:d3:f5:59:f0:2e:a5:ff:f6:
                    fc:af:b1:89:a8:84:9f:67:35:7b:6f:22:98:6e:d8:
                    b5:47:c7:bb:98:59:a3:13:c3:07:b8:c9:ad:87:95:
                    3b:73:0a:f7:1a:fc:68:6d:0b:52:6c:f9:8c:ae:6e:
                    4d:6b:09:23:cb:a8:40:fe:10:35:81:35:c9:3f:dd:
                    0f:b9:28:13:6e:79:d7:b2:5f:10:f2:bb:15:0a:3a:
                    04:01:73:db:51:bb:e9:9b:56:a1:22:42:be:ae:af:
                    ba:cd:be:ed:11:a3:b5:91:3a:d8:32:a7:a1:19:40:
                    94:3f:30:27:f8:64:38:fb:7f:b0:55:e2:73:0e:dc:
                    d9:f7:b0:02:af:7d:4e:1f:7b:10:87:a0:ef:f2:38:
                    5a:cf:b1:ca:90:e7:1f:ba:84:aa:83:76:5d:41:4f:
                    75:7c:ce:51:6b:4d:55:0a:e2:e9:1f:c1:5f:bf:e1:
                    27:98:9d:30:51:73:1e:ac:13:ad:69:01:46:e5:29:
                    1a:0a:85:10:35:2d:74:30:c0:65:0c:32:bc:b4:02:
                    30:a6:ef:52:00:78:db:ef:0b:09:1d:04:4f:c0:ef:
                    ee:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1A:40:FB:9A:0A:A7:35:26:B5:10:55:FC:F5:E4:B5:46:77:B5:44
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS5065.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.250.0/24
                  104.234.121.0/24
                  104.234.164.0/24
                  104.234.201.0/24
                  104.234.218.0/24
                  104.234.221.0/24
                  104.234.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:2e:e4:64:de:60:23:c1:f7:f0:28:5f:b8:3b:58:f4:8e:47:
         c0:67:f3:61:d1:13:68:9d:c2:04:a3:49:41:b0:cb:08:02:22:
         5c:73:8f:22:88:6e:f6:fc:37:69:48:5a:61:09:9e:e5:71:2d:
         24:db:f7:9b:29:dc:66:a4:a9:0a:b2:9d:79:e3:85:dc:32:ae:
         4c:80:9f:21:4f:08:cb:77:a1:a7:16:82:30:0c:68:bc:3d:0e:
         2a:49:f1:b0:99:aa:ab:13:40:52:a5:7a:65:6c:ff:b9:b0:f5:
         16:bd:e6:b4:52:a4:2f:8d:f3:99:87:98:52:b1:dd:96:5e:25:
         ff:5f:74:19:46:64:c1:da:a5:5c:5b:c4:48:70:02:85:fe:ea:
         66:77:80:56:10:47:1a:90:b3:e8:f9:fd:29:21:0f:09:c7:6d:
         87:57:e1:5d:2e:73:3a:82:59:a0:ba:28:af:05:97:ab:da:cd:
         b8:19:fe:df:a7:eb:ce:19:70:8b:c0:79:bd:27:a5:57:a5:90:
         d7:0d:6d:8b:af:ed:21:98:13:79:c5:ed:05:9d:e6:16:e9:43:
         eb:cb:26:9d:69:22:4a:60:32:4f:52:68:5c:ee:42:0e:f6:bc:
         0c:82:c1:7b:52:e9:3d:a2:96:b3:4e:5a:ab:9a:52:f1:02:eb:
         70:53:7d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 03:46:51 2024 by rpki-client on console-fra.rpki-client.org