Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/AS5650.roa
File:                     AS5650.roa (raw, json)
Hash identifier:          3n3OF4DdUqT5NvAHlh+/gNuWVZDO612XPwcBM0XyGgI=
Subject key identifier:   74:ED:CA:C0:EF:CD:39:05:06:D0:B7:38:5B:0B:BC:70:F5:41:E2:4C
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       6BEDF2D53BAA0817091E1C28F65F78F78F350318
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/AS5650.roa
Signing time:             Fri 12 Jul 2024 16:09:14 +0000
ROA not before:           Fri 12 Jul 2024 16:04:14 +0000
ROA not after:            Fri 11 Jul 2025 16:09:14 +0000
asID:                     5650
IP address blocks:        47.182.0.0/15 maxlen: 15
                          47.182.0.0/17 maxlen: 17
                          47.182.130.0/23 maxlen: 23
                          47.182.136.0/21 maxlen: 21
                          47.182.144.0/20 maxlen: 20
                          47.182.160.0/20 maxlen: 20
                          47.182.176.0/20 maxlen: 20
                          47.182.192.0/20 maxlen: 20
                          47.182.208.0/21 maxlen: 21
                          47.182.224.0/23 maxlen: 23
                          47.182.227.0/24 maxlen: 24
                          47.182.228.0/24 maxlen: 24
                          47.182.229.0/24 maxlen: 24
                          47.182.244.0/23 maxlen: 23
                          47.182.248.0/23 maxlen: 23
                          47.182.250.0/23 maxlen: 23
                          47.182.252.0/23 maxlen: 23
                          47.182.254.0/23 maxlen: 23
                          47.183.32.0/22 maxlen: 22
                          47.183.44.0/24 maxlen: 24
                          47.183.108.0/24 maxlen: 24
                          47.183.112.0/22 maxlen: 22
                          47.183.116.0/23 maxlen: 23
                          47.183.120.0/21 maxlen: 21
                          47.183.120.0/23 maxlen: 23
                          47.183.122.0/23 maxlen: 23
                          47.183.144.0/20 maxlen: 20
                          47.183.192.0/18 maxlen: 18
                          47.183.202.0/23 maxlen: 23
                          47.184.0.0/14 maxlen: 14
                          47.186.152.0/22 maxlen: 22
                          47.186.160.0/20 maxlen: 20
                          47.186.176.0/20 maxlen: 20
                          47.188.0.0/15 maxlen: 15
                          47.188.0.0/16 maxlen: 16
                          47.188.160.0/22 maxlen: 22
                          47.188.200.0/22 maxlen: 22
                          47.188.224.0/22 maxlen: 22
                          47.188.244.0/22 maxlen: 22
                          47.188.254.0/23 maxlen: 23
                          47.189.0.0/17 maxlen: 17
                          47.189.60.0/23 maxlen: 23
                          47.189.80.0/22 maxlen: 22
                          47.189.128.0/18 maxlen: 18
                          47.189.188.0/22 maxlen: 22
                          47.189.192.0/19 maxlen: 19
                          47.189.224.0/19 maxlen: 19
                          47.190.0.0/16 maxlen: 16
                          47.190.0.0/17 maxlen: 17
                          47.190.124.0/22 maxlen: 22
                          47.190.128.0/21 maxlen: 21
                          47.190.132.0/23 maxlen: 23
                          47.190.134.0/23 maxlen: 23
                          47.190.136.0/23 maxlen: 23
                          47.190.138.0/23 maxlen: 23
                          47.190.140.0/22 maxlen: 22
                          47.190.144.0/21 maxlen: 21
                          47.190.152.0/22 maxlen: 22
                          47.190.156.0/22 maxlen: 22
                          47.190.160.0/20 maxlen: 20
                          47.190.176.0/20 maxlen: 20
                          47.190.192.0/23 maxlen: 23
                          47.190.196.0/23 maxlen: 23
                          172.102.32.0/19 maxlen: 19
                          172.102.48.0/21 maxlen: 21
                          172.108.0.0/16 maxlen: 16
                          172.108.0.0/19 maxlen: 19
                          172.108.0.0/24 maxlen: 24
                          172.108.36.0/22 maxlen: 22
                          172.108.40.0/21 maxlen: 21
                          172.108.96.0/24 maxlen: 24
                          172.108.97.0/24 maxlen: 24
                          172.108.98.0/24 maxlen: 24
                          172.108.99.0/24 maxlen: 24
                          172.108.104.0/24 maxlen: 24
                          172.108.105.0/24 maxlen: 24
                          172.108.106.0/24 maxlen: 24
                          172.108.107.0/24 maxlen: 24
                          172.108.108.0/24 maxlen: 24
                          172.108.109.0/24 maxlen: 24
                          172.108.112.0/24 maxlen: 24
                          172.108.113.0/24 maxlen: 24
                          172.108.114.0/24 maxlen: 24
                          172.108.115.0/24 maxlen: 24
                          172.108.116.0/24 maxlen: 24
                          172.108.117.0/24 maxlen: 24
                          172.108.120.0/24 maxlen: 24
                          172.108.121.0/24 maxlen: 24
                          172.108.192.0/18 maxlen: 18
                          2606:4c80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 02:20:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ed:f2:d5:3b:aa:08:17:09:1e:1c:28:f6:5f:78:f7:8f:35:03:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Jul 12 16:04:14 2024 GMT
            Not After : Jul 11 16:09:14 2025 GMT
        Subject: CN=74EDCAC0EFCD390506D0B7385B0BBC70F541E24C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:96:ed:5b:e9:db:4c:96:5b:1c:d0:9e:0f:
                    86:c7:c7:29:04:e4:46:16:d8:a8:e9:7b:8a:09:2c:
                    5a:91:0c:52:a6:6f:b6:ed:2d:39:8c:d6:24:a5:29:
                    b5:ca:73:37:74:a8:3e:27:6e:73:a0:da:6d:31:92:
                    30:d5:54:54:2e:28:e8:ac:c8:5e:e4:3f:5c:81:1e:
                    c8:31:bd:6b:56:f4:eb:2e:11:ef:c8:e3:16:c9:97:
                    db:5a:cf:86:31:5c:88:83:e3:93:92:4f:34:f7:b3:
                    41:75:c2:53:29:a8:f2:43:27:bc:2d:d3:b5:31:39:
                    eb:ef:a8:36:34:62:06:ef:5e:0a:90:87:0f:b5:f6:
                    2d:c8:45:62:3a:ce:52:99:14:9a:96:60:86:f0:19:
                    39:eb:33:65:4a:49:54:c7:9f:ee:1d:98:ea:20:e9:
                    60:54:14:00:28:3a:db:96:31:f3:f8:e2:23:07:5e:
                    41:db:da:06:a8:07:d3:5d:ce:02:1a:3e:ff:b0:ac:
                    09:a4:64:a6:87:4f:5c:48:31:0b:40:91:65:03:e4:
                    bf:11:df:9c:86:8f:ad:b4:1f:b0:f6:f6:01:16:f4:
                    f0:e4:a5:bd:f5:65:e6:17:13:f4:43:cf:13:85:9e:
                    ba:ac:a4:7f:6c:8f:70:8b:38:64:68:89:4c:7d:0d:
                    6a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:ED:CA:C0:EF:CD:39:05:06:D0:B7:38:5B:0B:BC:70:F5:41:E2:4C
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/AS5650.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.0.0-47.190.255.255
                  172.102.32.0/19
                  172.108.0.0/16
                IPv6:
                  2606:4c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:6d:ce:9f:b6:72:43:cc:39:61:78:63:a4:d8:ac:1c:3c:84:
         fa:ff:10:f2:9c:e7:ee:a2:49:43:b6:25:e7:a6:e6:a4:84:86:
         a0:90:f0:da:d5:c3:94:4c:98:97:af:51:c2:49:6c:93:2f:b6:
         22:68:60:ea:41:c4:6c:38:17:d7:f9:10:cf:ac:e0:21:96:99:
         b0:a3:e8:b8:67:99:7c:1b:3b:c4:08:be:6a:0a:01:8e:31:1b:
         14:00:1f:ea:09:5c:ff:b5:aa:11:e9:3d:4b:08:d7:73:62:8f:
         47:3f:4b:4c:b9:82:8c:a3:4a:5b:75:76:5d:ba:85:2b:62:96:
         5d:b3:18:ec:92:89:c3:40:5f:e2:ea:9f:27:64:d4:fb:7e:1a:
         cc:1a:c2:77:a3:df:39:17:03:ee:5b:6c:4d:c4:22:05:51:b8:
         4f:c8:92:a3:a5:02:1b:45:c1:b8:10:f7:97:36:13:1a:7a:7a:
         89:d3:f3:bd:53:b1:b1:44:67:c3:1d:11:21:22:b5:3e:d7:c8:
         d3:20:f3:33:50:3d:ec:06:c9:5f:6d:fd:1f:a8:ac:20:b1:8e:
         24:70:48:2e:b2:26:c5:1f:b9:d6:fc:eb:48:d9:86:bd:94:cb:
         82:d8:7d:ad:f4:c3:e5:74:08:a2:d3:81:fa:47:17:cc:f6:be:
         b6:0d:85:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:36 2024 by rpki-client on console-ams.rpki-client.org