Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa
File:                     AS5065.roa (raw, json)
Hash identifier:          /SSQYrdWH3GMZTaskcjPLHZ2Lbmap4da1EwazDvMXs8=
Subject key identifier:   63:9B:4F:A3:3E:FD:6F:18:8B:4F:B9:EC:92:D5:DE:B5:C1:A5:F6:F4
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       16C1FECB2E297CB15860306A76C7C4C1C716869D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa
Signing time:             Thu 28 Aug 2025 00:01:24 +0000
ROA not before:           Wed 27 Aug 2025 23:56:24 +0000
ROA not after:            Thu 27 Aug 2026 00:01:24 +0000
asID:                     5065
IP address blocks:        23.94.142.0/24 maxlen: 24
                          162.213.2.0/24 maxlen: 24
                          190.92.160.0/22 maxlen: 24
                          208.76.42.0/24 maxlen: 24
                          209.200.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c1:fe:cb:2e:29:7c:b1:58:60:30:6a:76:c7:c4:c1:c7:16:86:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 27 23:56:24 2025 GMT
            Not After : Aug 27 00:01:24 2026 GMT
        Subject: CN=639B4FA33EFD6F188B4FB9EC92D5DEB5C1A5F6F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:54:45:94:27:59:b1:77:5a:6d:6e:e0:f6:26:
                    a9:b1:a4:07:38:11:50:06:46:81:df:40:83:d3:51:
                    9a:7d:b7:fe:d3:43:f1:b3:47:b5:5d:2d:02:ab:c3:
                    f6:2b:b7:37:b8:cf:f3:92:58:70:b0:c7:f4:6a:dd:
                    00:57:1f:a4:73:62:71:e8:f8:07:fe:a7:6d:39:ba:
                    24:2d:7a:b2:b3:c9:33:b8:16:0e:b2:f9:b5:cb:23:
                    4c:1e:4e:ff:36:ed:51:f1:5f:1f:f1:2a:e7:8e:29:
                    c7:a7:86:dc:09:f3:ea:22:90:c9:4d:6a:8f:bd:fd:
                    b0:66:9c:bb:60:72:50:9e:8d:e4:94:01:5a:0e:93:
                    1d:5b:69:b4:39:ac:78:93:f7:dc:1d:86:9c:87:f8:
                    0f:46:ae:5d:7d:7b:44:6a:53:34:4f:52:79:82:fc:
                    1d:fc:9d:4d:f0:db:5a:cb:dc:38:f9:be:3d:28:4c:
                    8b:75:ad:d0:fd:e5:00:34:98:f3:2e:a1:68:9a:76:
                    0b:1c:5e:07:86:af:90:ad:d9:9d:e7:a9:f5:db:72:
                    f0:13:c7:13:3c:24:5c:8d:6b:3f:df:b2:27:05:08:
                    84:e5:06:2d:ea:de:18:1d:43:c5:b5:1c:ba:b1:d3:
                    78:56:5b:33:38:f7:f7:17:62:1b:b5:79:14:86:aa:
                    34:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9B:4F:A3:3E:FD:6F:18:8B:4F:B9:EC:92:D5:DE:B5:C1:A5:F6:F4
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.142.0/24
                  162.213.2.0/24
                  190.92.160.0/22
                  208.76.42.0/24
                  209.200.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:c9:b2:4e:37:a5:e4:07:5d:51:5d:d6:9e:84:a2:01:01:e9:
         48:52:5c:dd:d8:f8:05:11:31:2d:1a:8a:9d:6f:0f:29:28:ce:
         7b:0e:e7:07:b8:c2:82:ea:14:ed:7e:74:e2:18:c3:cd:be:51:
         5d:48:f0:51:03:c5:1b:f0:3b:10:a0:66:79:e4:79:84:a9:87:
         16:cd:86:e6:23:15:56:1c:f3:b3:e4:41:54:68:64:34:72:e5:
         71:1a:70:83:06:76:b8:4a:d9:a3:f5:5c:db:ac:e6:2e:34:e5:
         b2:b0:20:6a:7c:1c:69:a2:7a:57:c9:e6:22:69:7b:20:ae:ab:
         69:7e:b4:bb:ef:29:92:ca:79:cc:fe:dc:07:81:25:af:20:c8:
         79:ae:f1:af:f0:cb:df:ff:e0:d2:e0:8a:4c:82:70:cc:f4:83:
         14:e0:de:0b:d0:71:eb:77:ac:4d:52:15:59:cf:e5:2e:99:f5:
         cf:0a:01:3e:48:72:41:18:fc:a3:09:fe:cd:23:5a:71:4d:fe:
         4e:3d:80:bd:c8:5b:b4:a7:d9:bc:50:d0:3f:3b:f1:be:8e:bc:
         6b:9a:2d:53:8f:6b:43:47:c3:be:fd:a3:6a:d9:0d:f9:f6:d5:
         fb:27:7a:08:9e:3e:a2:48:b4:3c:42:95:e3:e9:a5:b0:47:fa:
         bb:dc:91:bb
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIUFsH+yy4pfLFYYDBqdsfEwccWhp0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwODI3MjM1NjI0WhcNMjYwODI3MDAwMTI0
WjAzMTEwLwYDVQQDEyg2MzlCNEZBMzNFRkQ2RjE4OEI0RkI5RUM5MkQ1REVCNUMx
QTVGNkY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlRFlCdZsXda
bW7g9iapsaQHOBFQBkaB30CD01Gafbf+00Pxs0e1XS0Cq8P2K7c3uM/zklhwsMf0
at0AVx+kc2Jx6PgH/qdtObokLXqys8kzuBYOsvm1yyNMHk7/Nu1R8V8f8SrnjinH
p4bcCfPqIpDJTWqPvf2wZpy7YHJQno3klAFaDpMdW2m0Oax4k/fcHYach/gPRq5d
fXtEalM0T1J5gvwd/J1N8Ntay9w4+b49KEyLda3Q/eUANJjzLqFomnYLHF4Hhq+Q
rdmd56n123LwE8cTPCRcjWs/37InBQiE5QYt6t4YHUPFtRy6sdN4VlszOPf3F2Ib
tXkUhqo0VwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGObT6M+/W8Yi0+57JLV3rXB
pfb0MB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzUwNjUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwNwYI
KwYBBQUHAQcBAf8EKDAmMCQEAgABMB4DBAAXXo4DBACi1QIDBAK+XKADBADQTCoD
BADRyPowDQYJKoZIhvcNAQELBQADggEBAITJsk43peQHXVFd1p6EogEB6UhSXN3Y
+AURMS0aip1vDykoznsO5we4woLqFO1+dOIYw82+UV1I8FEDxRvwOxCgZnnkeYSp
hxbNhuYjFVYc87PkQVRoZDRy5XEacIMGdrhK2aP1XNus5i405bKwIGp8HGmielfJ
5iJpeyCuq2l+tLvvKZLKecz+3AeBJa8gyHmu8a/wy9//4NLgikyCcMz0gxTg3gvQ
cet3rE1SFVnP5S6Z9c8KAT5IckEY/KMJ/s0jWnFN/k49gL3IW7Sn2bxQ0D878b6O
vGuaLVOPa0NHw779o2rZDfn21fsnegiePqJItDxClePppbBH+rvckbs=
-----END CERTIFICATE-----
Generated at Tue Sep 16 03:34:34 2025 by rpki-client