Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/AS5650.roa
File:                     AS5650.roa (raw, json)
Hash identifier:          feODKNxwYnMY5IWOpaT0ANjYTImhM0lNxIvkUda4N8o=
Subject key identifier:   97:CE:D2:58:FC:28:DD:ED:D8:55:19:70:79:1F:C0:A9:7E:63:2E:16
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       3C6C53E1631ED34082E8C701E4F31416CB338CB4
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/AS5650.roa
Signing time:             Fri 05 Apr 2024 15:44:39 +0000
ROA not before:           Fri 05 Apr 2024 15:39:39 +0000
ROA not after:            Fri 04 Apr 2025 15:44:39 +0000
asID:                     5650
IP address blocks:        47.136.0.0/13 maxlen: 13
                          47.136.0.0/14 maxlen: 14
                          47.137.208.0/21 maxlen: 21
                          47.137.216.0/21 maxlen: 21
                          47.140.0.0/16 maxlen: 16
                          47.140.56.0/22 maxlen: 22
                          47.140.112.0/22 maxlen: 22
                          47.140.116.0/22 maxlen: 22
                          47.140.157.0/24 maxlen: 24
                          47.140.158.0/24 maxlen: 24
                          47.140.204.0/24 maxlen: 24
                          47.140.205.0/24 maxlen: 24
                          47.140.216.0/22 maxlen: 22
                          47.140.224.0/20 maxlen: 20
                          47.140.244.0/23 maxlen: 23
                          47.141.0.0/16 maxlen: 16
                          47.142.0.0/17 maxlen: 17
                          47.142.83.0/24 maxlen: 24
                          47.142.128.0/17 maxlen: 17
                          47.143.8.0/21 maxlen: 21
                          47.143.32.0/22 maxlen: 22
                          47.143.38.0/24 maxlen: 24
                          47.143.39.0/24 maxlen: 24
                          47.143.64.0/20 maxlen: 20
                          47.143.80.0/20 maxlen: 20
                          47.143.96.0/20 maxlen: 20
                          47.143.112.0/22 maxlen: 22
                          47.143.116.0/22 maxlen: 22
                          47.143.120.0/22 maxlen: 22
                          47.143.124.0/24 maxlen: 24
                          47.143.125.0/24 maxlen: 24
                          47.143.126.0/24 maxlen: 24
                          47.143.128.0/19 maxlen: 19
                          47.143.176.0/20 maxlen: 20
                          47.143.192.0/19 maxlen: 19
                          47.144.0.0/12 maxlen: 12
                          47.144.0.0/13 maxlen: 13
                          47.152.0.0/14 maxlen: 14
                          47.156.0.0/16 maxlen: 16
                          47.157.0.0/16 maxlen: 16
                          47.158.0.0/16 maxlen: 16
                          47.159.0.0/17 maxlen: 17
                          47.159.128.0/18 maxlen: 18
                          47.159.192.0/19 maxlen: 19
                          47.159.224.0/19 maxlen: 19
                          47.160.0.0/12 maxlen: 12
                          47.160.0.0/18 maxlen: 18
                          47.160.64.0/18 maxlen: 18
                          47.160.128.0/18 maxlen: 18
                          47.161.0.0/18 maxlen: 18
                          47.161.160.0/22 maxlen: 22
                          47.161.168.0/22 maxlen: 22
                          47.161.172.0/22 maxlen: 22
                          47.176.0.0/14 maxlen: 14
                          47.177.0.0/16 maxlen: 16
                          47.177.0.0/18 maxlen: 18
                          47.178.0.0/17 maxlen: 17
                          47.180.0.0/15 maxlen: 15
                          47.180.0.0/16 maxlen: 16
                          47.181.0.0/19 maxlen: 19
                          47.181.12.0/23 maxlen: 23
                          47.181.14.0/23 maxlen: 23
                          47.181.32.0/22 maxlen: 22
                          47.181.34.0/23 maxlen: 23
                          47.181.36.0/23 maxlen: 23
                          47.181.38.0/23 maxlen: 23
                          47.181.40.0/23 maxlen: 23
                          47.181.42.0/23 maxlen: 23
                          47.181.44.0/23 maxlen: 23
                          47.181.46.0/23 maxlen: 23
                          47.181.48.0/20 maxlen: 20
                          47.181.64.0/18 maxlen: 18
                          47.181.88.0/21 maxlen: 21
                          47.181.128.0/18 maxlen: 18
                          47.181.192.0/18 maxlen: 18
                          172.95.0.0/16 maxlen: 16
                          172.95.0.0/17 maxlen: 17
                          172.95.128.0/19 maxlen: 19
                          172.95.160.0/20 maxlen: 20
                          172.95.176.0/20 maxlen: 20
                          172.95.192.0/19 maxlen: 19
                          172.95.224.0/24 maxlen: 24
                          172.95.225.0/24 maxlen: 24
                          172.95.226.0/24 maxlen: 24
                          172.95.227.0/24 maxlen: 24
                          172.95.229.0/24 maxlen: 24
                          172.95.231.0/24 maxlen: 24
                          172.95.232.0/21 maxlen: 21
                          172.95.240.0/24 maxlen: 24
                          172.95.241.0/24 maxlen: 24
                          172.95.242.0/24 maxlen: 24
                          172.95.248.0/21 maxlen: 21
                          172.102.64.0/18 maxlen: 18
                          172.102.74.0/23 maxlen: 23
                          172.102.96.0/20 maxlen: 20
                          2606:4e80::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 May 2024 11:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6c:53:e1:63:1e:d3:40:82:e8:c7:01:e4:f3:14:16:cb:33:8c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Apr  5 15:39:39 2024 GMT
            Not After : Apr  4 15:44:39 2025 GMT
        Subject: CN=97CED258FC28DDEDD8551970791FC0A97E632E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:21:19:b7:c0:35:3a:b4:2a:c0:4c:d9:0b:65:
                    91:b2:d8:57:47:c8:db:9c:c8:f5:d7:5e:3f:97:c9:
                    f2:34:9a:53:d9:02:fb:74:88:03:cd:78:be:c3:f6:
                    fa:cc:8d:f8:03:e9:f0:7f:4c:9e:d8:f7:d2:8b:69:
                    ed:3e:8a:92:84:83:76:e1:9d:84:c8:b5:37:9e:d0:
                    1f:49:15:49:2a:7a:ef:a1:13:6a:23:ac:38:d4:45:
                    9f:08:10:40:de:28:5d:40:6e:2f:75:59:37:ee:0d:
                    31:af:d0:44:05:a8:74:b4:e1:c8:ed:c7:4e:10:fd:
                    00:f4:ff:14:bd:ed:05:e5:6d:2e:ed:e7:23:20:c9:
                    66:d7:88:95:3b:e4:82:b8:bb:9f:a8:6a:e8:03:44:
                    f9:3a:04:9a:32:2a:5d:08:df:4e:73:c6:54:e0:e4:
                    b7:38:db:cd:78:59:1a:3b:9f:45:6f:76:b9:47:2b:
                    5f:f9:41:ce:cc:d4:38:57:3c:f8:1f:a4:f0:43:06:
                    66:e5:81:52:3d:b5:61:af:49:ba:a0:c5:d7:69:59:
                    da:76:7c:4b:d2:b1:04:03:8f:5b:85:2a:9d:d9:40:
                    6e:1a:7a:fb:55:dd:78:dc:45:1e:40:f6:1f:c9:23:
                    17:b1:05:b7:27:a9:34:67:a4:ae:36:43:1d:ba:d7:
                    0d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CE:D2:58:FC:28:DD:ED:D8:55:19:70:79:1F:C0:A9:7E:63:2E:16
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/AS5650.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.136.0.0-47.181.255.255
                  172.95.0.0/16
                  172.102.64.0/18
                IPv6:
                  2606:4e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:dc:d0:43:42:14:58:bd:9e:cc:96:d0:ef:f5:d0:31:9e:c3:
         e0:ac:d6:5d:b8:73:03:57:ee:0b:5d:de:a4:ae:c9:3f:4f:e0:
         94:a0:36:fc:3d:38:21:64:c6:70:37:58:8c:cb:28:ed:41:6c:
         62:f9:7e:08:57:30:94:3b:8b:c6:ac:8e:b9:e7:f9:aa:05:38:
         11:6a:48:38:1f:98:f1:5f:96:9f:cc:e1:29:2b:9f:be:51:94:
         16:5f:e9:d1:e0:32:8d:a0:f1:1b:bd:98:2b:05:b5:ef:f4:e6:
         49:a1:bb:25:1e:39:92:17:0d:9e:91:c4:11:63:d6:93:dd:d9:
         b0:d8:db:cb:7c:f8:e8:c6:f9:1c:48:f6:6f:6d:20:4c:ec:33:
         3c:9b:38:15:f1:f7:7f:f5:89:cb:7d:11:07:f4:54:62:76:b7:
         37:14:ce:0f:b8:cc:72:c3:b4:a8:24:45:ff:29:41:97:e3:c7:
         08:0b:1f:b3:29:aa:0f:03:fb:ef:bd:2b:9a:11:39:5d:6c:a5:
         5b:9d:68:11:98:5e:af:b4:c4:ce:56:32:59:91:aa:38:01:3d:
         e2:ae:bd:d0:88:2a:0b:2e:38:bd:1d:1d:11:41:1b:23:db:04:
         33:2b:cf:8c:2d:89:9a:43:1f:0c:3e:14:04:15:ac:61:3c:35:
         b8:14:eb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 10:47:53 2024 by rpki-client on console-fra.rpki-client.org