Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5650.roa
File:                     AS5650.roa (raw, json)
Hash identifier:          WuLYzNjOov8vjc77D8fMzxKH6bFPsEUsEEuKnd5k9fM=
Subject key identifier:   C8:65:23:0E:66:94:88:00:88:A7:46:F1:10:FF:AD:41:96:B6:B9:CA
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       0E5C9B757A353ABA0A887502F97EE508AEC8C5D9
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5650.roa
Signing time:             Wed 22 Jul 2026 04:11:16 +0000
ROA not before:           Wed 22 Jul 2026 04:06:16 +0000
ROA not after:            Wed 21 Jul 2027 04:11:16 +0000
asID:                     5650
IP address blocks:        157.254.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 05:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:5c:9b:75:7a:35:3a:ba:0a:88:75:02:f9:7e:e5:08:ae:c8:c5:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul 22 04:06:16 2026 GMT
            Not After : Jul 21 04:11:16 2027 GMT
        Subject: CN=C865230E6694880088A746F110FFAD4196B6B9CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:34:63:b4:d9:ab:ea:04:8e:76:ab:62:4c:70:
                    55:32:7f:8c:e6:cc:12:68:39:a8:80:81:c5:a9:cb:
                    1f:fd:ba:ce:10:f6:7c:1a:cd:31:02:37:90:ff:e3:
                    1f:cc:c7:58:cd:97:fd:cb:34:31:9a:73:c6:60:34:
                    47:64:27:d2:26:48:8e:87:50:67:75:5d:bf:e3:07:
                    54:dd:3f:65:fc:c0:b0:f7:37:53:47:1f:b9:2f:d1:
                    d7:cd:d1:fd:8a:e5:3d:a8:4a:a1:12:85:84:b0:37:
                    2e:e2:46:ce:2b:15:9c:ea:f8:56:7e:75:95:08:b9:
                    9d:38:9e:78:50:93:27:e3:51:5e:1b:ef:8b:4b:2f:
                    06:c5:00:03:84:3a:36:bc:af:62:8e:12:76:1c:51:
                    e1:6a:8a:60:d8:91:09:cf:ca:0c:dd:db:84:7f:b6:
                    a6:1f:1a:35:b2:7e:bd:9d:65:b9:9c:45:9a:4f:c1:
                    23:33:36:8c:df:c1:5e:6c:39:7b:96:41:91:b2:21:
                    81:0e:b3:71:d3:e6:5f:c5:0f:fa:9f:a7:34:d1:af:
                    f6:cc:8e:ed:a8:d5:31:a3:b3:77:37:4b:39:0c:f8:
                    0e:1a:83:ce:ca:2f:2d:8e:4d:65:ab:9a:3d:f8:d9:
                    f9:46:2c:dd:24:6f:84:36:f7:ee:04:11:93:3c:78:
                    ed:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:65:23:0E:66:94:88:00:88:A7:46:F1:10:FF:AD:41:96:B6:B9:CA
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS5650.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:a0:95:97:db:44:18:b0:a5:b5:c5:a3:16:de:48:cd:4f:f6:
         71:e1:ed:aa:0c:e1:e0:99:8a:c6:a2:7c:a9:5a:10:c5:03:35:
         45:32:dd:03:f0:66:6b:79:3b:cc:ea:7b:9e:2f:50:c7:03:e0:
         1a:a1:8f:16:2c:74:f0:d5:bf:a5:f6:1b:e8:ff:39:90:10:44:
         f3:fd:05:f4:3a:2d:aa:55:3d:5d:17:8c:00:4f:88:91:d8:09:
         37:3d:72:4e:ac:33:da:57:70:ea:c5:4b:20:c5:d0:f6:7c:38:
         6d:6c:25:66:41:3f:6c:89:2d:5c:8c:5f:c6:71:dd:07:76:2e:
         28:74:88:6f:d2:db:e2:0a:b6:0c:f0:11:40:88:53:24:0b:e6:
         f6:96:c8:28:80:99:ac:13:be:9e:b9:8e:53:b0:5b:73:91:94:
         67:5c:c4:a0:f8:45:94:d8:5c:2a:53:50:62:2a:7c:f0:13:68:
         d9:7d:e7:14:6b:63:0a:99:b7:84:fb:8a:f0:d8:c3:75:5b:9c:
         0e:43:67:ab:e0:d4:98:e0:b7:cf:1b:ee:a1:22:7b:da:87:ad:
         89:95:8d:bb:c9:fa:01:84:ff:90:09:9c:a9:36:72:93:02:a1:
         f7:d8:af:20:b2:2c:ae:6f:b9:ac:f1:05:c7:58:09:4e:a2:37:
         c3:76:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 07:45:44 2026 by rpki-client