Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: 8Ad6pry60xHq6d+RcOmug9wqQhsaYCfvUbn0+oYWlhU=
Subject key identifier: 12:D0:74:02:3E:3F:4C:46:55:75:C8:80:F2:A1:B9:32:11:35:EF:61
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 10BF0C2E99BB115E0CA71FE51CEB9B878910EDF6
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS5650.roa
Signing time: Tue 01 Oct 2024 12:42:17 +0000
ROA not before: Tue 01 Oct 2024 12:37:17 +0000
ROA not after: Tue 30 Sep 2025 12:42:17 +0000
asID: 5650
IP address blocks: 45.52.0.0/15 maxlen: 15
45.52.185.0/24 maxlen: 24
50.32.0.0/15 maxlen: 15
50.32.0.0/17 maxlen: 17
50.32.128.0/17 maxlen: 17
50.33.0.0/18 maxlen: 18
50.33.64.0/19 maxlen: 19
50.33.96.0/20 maxlen: 20
50.33.98.0/23 maxlen: 23
50.33.112.0/20 maxlen: 20
50.33.128.0/18 maxlen: 18
50.33.192.0/18 maxlen: 18
50.36.0.0/18 maxlen: 18
50.36.64.0/18 maxlen: 18
50.36.128.0/19 maxlen: 19
50.36.160.0/19 maxlen: 19
50.36.192.0/19 maxlen: 19
50.36.224.0/19 maxlen: 19
50.37.0.0/19 maxlen: 19
50.37.32.0/19 maxlen: 19
50.38.128.0/17 maxlen: 17
50.39.0.0/19 maxlen: 19
50.39.32.0/19 maxlen: 19
50.40.0.0/16 maxlen: 16
50.41.0.0/16 maxlen: 16
50.42.0.0/19 maxlen: 19
50.42.32.0/19 maxlen: 19
50.42.64.0/18 maxlen: 18
50.42.93.0/24 maxlen: 24
50.42.128.0/18 maxlen: 18
50.42.192.0/18 maxlen: 18
50.43.128.0/17 maxlen: 17
50.44.0.0/16 maxlen: 16
50.45.0.0/17 maxlen: 17
50.48.0.0/14 maxlen: 14
50.48.0.0/15 maxlen: 15
50.50.0.0/16 maxlen: 16
50.51.0.0/16 maxlen: 16
50.52.128.0/17 maxlen: 17
50.54.0.0/17 maxlen: 17
50.55.0.0/16 maxlen: 16
50.55.32.0/19 maxlen: 19
50.55.128.0/17 maxlen: 17
50.102.0.0/15 maxlen: 15
50.104.0.0/15 maxlen: 15
50.104.0.0/17 maxlen: 17
50.104.128.0/17 maxlen: 17
50.105.0.0/18 maxlen: 18
50.105.64.0/18 maxlen: 18
50.105.128.0/17 maxlen: 17
50.106.64.0/18 maxlen: 18
50.106.128.0/18 maxlen: 18
50.106.192.0/18 maxlen: 18
50.107.0.0/20 maxlen: 20
50.107.16.0/21 maxlen: 21
50.107.32.0/20 maxlen: 20
50.107.48.0/20 maxlen: 20
50.107.64.0/18 maxlen: 18
50.107.128.0/17 maxlen: 17
50.108.0.0/18 maxlen: 18
50.108.64.0/18 maxlen: 18
50.108.128.0/17 maxlen: 17
50.109.0.0/17 maxlen: 17
50.109.128.0/18 maxlen: 18
50.109.192.0/19 maxlen: 19
50.110.0.0/16 maxlen: 16
50.111.0.0/16 maxlen: 16
50.120.0.0/18 maxlen: 18
50.120.96.0/19 maxlen: 19
50.120.128.0/17 maxlen: 17
50.120.128.0/19 maxlen: 19
50.120.160.0/19 maxlen: 19
50.120.192.0/19 maxlen: 19
50.120.224.0/19 maxlen: 19
50.121.0.0/16 maxlen: 16
50.121.0.0/17 maxlen: 17
50.121.128.0/17 maxlen: 17
50.122.0.0/16 maxlen: 16
50.122.0.0/18 maxlen: 18
50.122.64.0/19 maxlen: 19
50.122.96.0/19 maxlen: 19
50.122.128.0/17 maxlen: 17
50.123.0.0/18 maxlen: 18
50.123.128.0/18 maxlen: 18
50.123.192.0/18 maxlen: 18
50.124.0.0/18 maxlen: 18
50.124.64.0/19 maxlen: 19
50.124.96.0/19 maxlen: 19
50.124.128.0/18 maxlen: 18
50.124.192.0/19 maxlen: 19
50.124.202.0/24 maxlen: 24
50.124.224.0/19 maxlen: 19
50.126.0.0/19 maxlen: 19
50.126.32.0/19 maxlen: 19
50.126.128.0/18 maxlen: 18
50.126.192.0/18 maxlen: 18
50.127.0.0/17 maxlen: 17
50.127.128.0/18 maxlen: 18
50.127.192.0/19 maxlen: 19
50.127.224.0/19 maxlen: 19
65.37.0.0/17 maxlen: 17
65.73.0.0/16 maxlen: 16
66.133.128.0/18 maxlen: 18
66.133.171.0/24 maxlen: 24
70.100.0.0/15 maxlen: 15
74.32.0.0/12 maxlen: 12
74.36.112.0/20 maxlen: 20
74.36.136.0/21 maxlen: 21
74.37.24.0/24 maxlen: 24
74.39.33.0/24 maxlen: 24
74.39.44.0/22 maxlen: 22
74.39.188.0/24 maxlen: 24
74.40.66.0/24 maxlen: 24
74.42.128.0/20 maxlen: 20
74.43.114.0/24 maxlen: 24
74.43.219.0/24 maxlen: 24
74.44.208.0/21 maxlen: 21
74.45.1.0/24 maxlen: 24
74.45.32.0/19 maxlen: 19
74.45.99.0/24 maxlen: 24
74.45.231.0/24 maxlen: 24
74.45.243.0/24 maxlen: 24
74.45.244.0/24 maxlen: 24
74.45.245.0/24 maxlen: 24
74.46.46.0/23 maxlen: 23
74.46.252.0/22 maxlen: 22
104.169.0.0/16 maxlen: 16
104.235.0.0/16 maxlen: 16
104.240.0.0/16 maxlen: 16
170.215.0.0/16 maxlen: 16
170.215.71.0/24 maxlen: 24
170.215.75.0/24 maxlen: 24
172.76.0.0/14 maxlen: 14
173.84.0.0/14 maxlen: 14
173.84.12.0/24 maxlen: 24
173.84.14.0/24 maxlen: 24
173.85.0.0/19 maxlen: 19
173.86.76.0/22 maxlen: 22
173.86.198.0/23 maxlen: 23
173.86.225.0/24 maxlen: 24
173.87.28.0/22 maxlen: 22
173.87.176.0/20 maxlen: 20
184.8.0.0/13 maxlen: 13
184.8.228.0/22 maxlen: 22
184.9.28.0/24 maxlen: 24
184.10.176.0/20 maxlen: 20
184.12.6.0/24 maxlen: 24
184.12.136.0/22 maxlen: 22
184.16.0.0/14 maxlen: 14
192.182.0.0/17 maxlen: 17
192.182.0.0/18 maxlen: 18
192.182.64.0/18 maxlen: 18
192.182.160.0/19 maxlen: 19
192.182.192.0/19 maxlen: 19
192.182.224.0/19 maxlen: 19
192.183.0.0/18 maxlen: 18
192.183.64.0/18 maxlen: 18
192.183.128.0/19 maxlen: 19
192.183.224.0/19 maxlen: 19
209.177.112.0/20 maxlen: 20
216.67.192.0/19 maxlen: 19
2001:1960::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:bf:0c:2e:99:bb:11:5e:0c:a7:1f:e5:1c:eb:9b:87:89:10:ed:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Oct 1 12:37:17 2024 GMT
Not After : Sep 30 12:42:17 2025 GMT
Subject: CN=12D074023E3F4C465575C880F2A1B9321135EF61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:69:99:26:18:49:eb:bc:40:4c:72:82:06:cf:
62:8c:21:a4:6a:84:28:9d:5f:4b:c2:c8:29:3d:c2:
bc:8d:af:4c:4c:b2:ef:6e:ec:a2:03:49:a0:9d:cf:
3f:c5:b0:60:fd:50:ce:11:29:9e:3b:ff:75:a6:3b:
69:2d:3c:33:ff:0b:5c:7b:28:42:ce:cc:7e:e1:21:
4a:e9:ec:cc:7d:19:16:42:0f:32:e4:a4:cc:52:0a:
45:fb:c9:eb:a1:c8:b5:d2:49:86:6d:90:4a:ec:98:
9c:2c:e4:d5:1e:fe:bb:92:23:a2:90:63:be:6b:de:
13:de:b7:5f:91:a0:ac:86:05:00:b4:9e:ca:ef:bd:
b4:08:a3:3c:7e:3f:fa:15:5a:b7:50:b8:4e:f2:e7:
9c:48:0a:84:76:6c:3b:28:61:42:25:d8:04:62:b4:
2c:21:72:0a:94:8b:d3:83:27:06:fd:e6:cd:f0:2b:
4d:7a:cf:fd:e3:c4:3d:03:1e:a3:cc:62:9a:5d:1c:
15:5d:0a:81:bd:1c:c5:46:48:3e:13:90:14:cc:33:
dc:74:3b:bc:0f:87:cb:c8:4e:84:cd:d0:e6:67:05:
fb:30:5c:21:ad:63:ae:ee:dd:f7:70:98:70:bb:7c:
fb:89:83:a6:d3:95:16:7f:12:b6:8f:4e:97:a2:0e:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D0:74:02:3E:3F:4C:46:55:75:C8:80:F2:A1:B9:32:11:35:EF:61
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.52.0.0/15
50.32.0.0/15
50.36.0.0-50.37.63.255
50.38.128.0-50.39.63.255
50.40.0.0-50.42.255.255
50.43.128.0-50.45.127.255
50.48.0.0/14
50.52.128.0/17
50.54.0.0/17
50.55.0.0/16
50.102.0.0-50.105.255.255
50.106.64.0-50.107.23.255
50.107.32.0-50.109.223.255
50.110.0.0/15
50.120.0.0/18
50.120.96.0-50.123.63.255
50.123.128.0-50.124.255.255
50.126.0.0/18
50.126.128.0-50.127.255.255
65.37.0.0/17
65.73.0.0/16
66.133.128.0/18
70.100.0.0/15
74.32.0.0/12
104.169.0.0/16
104.235.0.0/16
104.240.0.0/16
170.215.0.0/16
172.76.0.0/14
173.84.0.0/14
184.8.0.0-184.19.255.255
192.182.0.0/17
192.182.160.0-192.183.159.255
192.183.224.0/19
209.177.112.0/20
216.67.192.0/19
IPv6:
2001:1960::/32
Signature Algorithm: sha256WithRSAEncryption
7e:7b:bc:18:cb:23:e8:3c:f4:22:ff:93:d5:5f:b5:b2:16:7e:
85:32:62:53:8d:2b:b7:4b:fc:86:e9:97:67:5e:7f:07:25:6d:
29:11:99:f6:75:d5:62:3a:ec:b5:07:9f:93:fc:b1:5f:08:1b:
e9:42:8f:c1:87:77:62:90:87:8c:a6:6f:b6:4d:b7:93:0e:b4:
9e:07:db:8a:90:17:61:82:61:01:cf:1a:fd:2c:fb:e0:73:15:
4d:81:86:67:6a:9b:04:5b:a3:40:af:2e:af:8f:de:6f:4d:d7:
0e:b0:8c:f9:8e:f1:e2:be:67:fa:8f:bc:a3:87:f3:87:df:0e:
32:4f:d1:74:6d:b9:7a:c3:d6:71:b9:68:ff:2a:e4:f2:ac:61:
2a:6c:54:10:93:4d:8a:e5:38:7b:51:5f:af:9b:41:4e:24:1b:
d7:25:f2:06:37:67:f5:85:69:25:45:41:d3:06:52:fa:e2:93:
fd:fa:de:bb:ff:aa:69:7b:36:56:3d:37:cc:87:88:c9:96:4a:
fe:af:fe:76:ef:e2:a3:95:24:14:e0:9d:f4:96:f6:21:42:c5:
59:42:e5:a8:58:a3:15:a3:20:af:74:00:66:3b:2d:ed:76:5b:
b9:4c:ff:31:49:44:f5:dd:d1:b5:a6:4a:ce:b1:f4:db:e4:08:
77:28:1e:b0
-----BEGIN CERTIFICATE-----
MIIGsTCCBZmgAwIBAgIUEL8MLpm7EV4Mpx/lHOubh4kQ7fYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjQxMDAxMTIzNzE3WhcNMjUwOTMwMTI0MjE3
WjAzMTEwLwYDVQQDEygxMkQwNzQwMjNFM0Y0QzQ2NTU3NUM4ODBGMkExQjkzMjEx
MzVFRjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGmZJhhJ67xA
THKCBs9ijCGkaoQonV9LwsgpPcK8ja9MTLLvbuyiA0mgnc8/xbBg/VDOESmeO/91
pjtpLTwz/wtceyhCzsx+4SFK6ezMfRkWQg8y5KTMUgpF+8nroci10kmGbZBK7Jic
LOTVHv67kiOikGO+a94T3rdfkaCshgUAtJ7K7720CKM8fj/6FVq3ULhO8uecSAqE
dmw7KGFCJdgEYrQsIXIKlIvTgycG/ebN8CtNes/948Q9Ax6jzGKaXRwVXQqBvRzF
Rkg+E5AUzDPcdDu8D4fLyE6EzdDmZwX7MFwhrWOu7t33cJhwu3z7iYOm05UWfxK2
j06Xog4oVQIDAQABo4IDsTCCA60wHQYDVR0OBBYEFBLQdAI+P0xGVXXIgPKhuTIR
Ne9hMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy
ZjA5N2YvNC9BUzU2NTAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwggFR
BggrBgEFBQcBBwEB/wSCAUAwggE8MIIBKQQCAAEwggEhAwMBLTQDAwEyIDALAwMC
MiQDBAYyJQAwDAMEBzImgAMEBjInADAKAwMDMigDAwAyKjAMAwQHMiuAAwQHMi0A
AwMCMjADBAcyNIADBAcyNgADAwAyNzAKAwMBMmYDAwEyaDAMAwQGMmpAAwQDMmsQ
MAwDBAUyayADBAUybcADAwEybgMEBjJ4ADAMAwQFMnhgAwQGMnsAMAsDBAcye4AD
AwAyfAMEBjJ+ADALAwQHMn6AAwMHMgADBAdBJQADAwBBSQMEBkKFgAMDAUZkAwME
SiADAwBoqQMDAGjrAwMAaPADAwCq1wMDAqxMAwMCrVQwCgMDA7gIAwMCuBADBAfA
tgAwDAMEBcC2oAMEBcC3gAMEBcC34AMEBNGxcAMEBdhDwDANBAIAAjAHAwUAIAEZ
YDANBgkqhkiG9w0BAQsFAAOCAQEAfnu8GMsj6Dz0Iv+T1V+1shZ+hTJiU40rt0v8
humXZ15/ByVtKRGZ9nXVYjrstQefk/yxXwgb6UKPwYd3YpCHjKZvtk23kw60ngfb
ipAXYYJhAc8a/Sz74HMVTYGGZ2qbBFujQK8ur4/eb03XDrCM+Y7x4r5n+o+8o4fz
h98OMk/RdG25esPWcblo/yrk8qxhKmxUEJNNiuU4e1Ffr5tBTiQb1yXyBjdn9YVp
JUVB0wZS+uKT/freu/+qaXs2Vj03zIeIyZZK/q/+du/io5UkFOCd9Jb2IULFWULl
qFijFaMgr3QAZjst7XZbuUz/MUlE9d3RtaZKzrH02+QIdygesA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:50:08 2024 by rpki-client on console-fra.rpki-client.org