Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/AS5650.roa
File:                     AS5650.roa (raw, json)
Hash identifier:          FlAnNkTf8VBHrj983020x5mT04+RpYMQpnyoQ2HzAfc=
Subject key identifier:   B9:65:FD:29:64:7F:01:FA:AB:8F:4A:61:5D:23:EA:C4:74:D7:2C:97
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       70DB8BB97EF7913B281FFCA933D9ED9908DAFCDA
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/AS5650.roa
Signing time:             Thu 16 Apr 2026 16:29:09 +0000
ROA not before:           Thu 16 Apr 2026 16:24:09 +0000
ROA not after:            Thu 15 Apr 2027 16:29:09 +0000
asID:                     5650
IP address blocks:        47.182.0.0/15 maxlen: 15
                          47.182.0.0/17 maxlen: 17
                          47.182.130.0/23 maxlen: 23
                          47.182.136.0/21 maxlen: 21
                          47.182.144.0/20 maxlen: 20
                          47.182.160.0/20 maxlen: 20
                          47.182.176.0/20 maxlen: 20
                          47.182.192.0/20 maxlen: 20
                          47.182.208.0/21 maxlen: 21
                          47.182.224.0/23 maxlen: 23
                          47.182.227.0/24 maxlen: 24
                          47.182.228.0/24 maxlen: 24
                          47.182.229.0/24 maxlen: 24
                          47.182.244.0/23 maxlen: 23
                          47.182.248.0/23 maxlen: 23
                          47.182.250.0/23 maxlen: 23
                          47.182.252.0/23 maxlen: 23
                          47.182.254.0/23 maxlen: 23
                          47.183.108.0/24 maxlen: 24
                          47.183.112.0/22 maxlen: 22
                          47.183.116.0/23 maxlen: 23
                          47.183.120.0/21 maxlen: 21
                          47.183.120.0/23 maxlen: 23
                          47.183.122.0/23 maxlen: 23
                          47.183.144.0/20 maxlen: 20
                          47.183.192.0/18 maxlen: 18
                          47.183.202.0/23 maxlen: 23
                          47.184.0.0/14 maxlen: 14
                          47.186.152.0/22 maxlen: 22
                          47.186.160.0/20 maxlen: 20
                          47.186.176.0/20 maxlen: 20
                          47.188.0.0/15 maxlen: 15
                          47.188.0.0/16 maxlen: 16
                          47.188.160.0/22 maxlen: 22
                          47.188.200.0/22 maxlen: 22
                          47.188.224.0/22 maxlen: 22
                          47.188.244.0/22 maxlen: 22
                          47.188.254.0/23 maxlen: 23
                          47.189.0.0/17 maxlen: 17
                          47.189.60.0/23 maxlen: 23
                          47.189.80.0/22 maxlen: 22
                          47.189.128.0/18 maxlen: 18
                          47.189.188.0/22 maxlen: 22
                          47.189.192.0/19 maxlen: 19
                          47.189.224.0/19 maxlen: 19
                          47.190.0.0/16 maxlen: 16
                          47.190.0.0/17 maxlen: 17
                          47.190.124.0/22 maxlen: 22
                          47.190.128.0/21 maxlen: 21
                          47.190.132.0/23 maxlen: 23
                          47.190.134.0/23 maxlen: 23
                          47.190.136.0/23 maxlen: 23
                          47.190.138.0/23 maxlen: 23
                          47.190.140.0/22 maxlen: 22
                          47.190.144.0/21 maxlen: 21
                          47.190.152.0/22 maxlen: 22
                          47.190.156.0/22 maxlen: 22
                          47.190.160.0/20 maxlen: 20
                          47.190.176.0/20 maxlen: 20
                          47.190.192.0/23 maxlen: 23
                          47.190.196.0/23 maxlen: 23
                          172.102.32.0/19 maxlen: 19
                          172.102.48.0/21 maxlen: 21
                          172.108.0.0/16 maxlen: 16
                          172.108.0.0/19 maxlen: 19
                          172.108.0.0/24 maxlen: 24
                          172.108.36.0/22 maxlen: 22
                          172.108.40.0/21 maxlen: 21
                          172.108.96.0/24 maxlen: 24
                          172.108.97.0/24 maxlen: 24
                          172.108.98.0/24 maxlen: 24
                          172.108.99.0/24 maxlen: 24
                          172.108.104.0/24 maxlen: 24
                          172.108.105.0/24 maxlen: 24
                          172.108.106.0/24 maxlen: 24
                          172.108.107.0/24 maxlen: 24
                          172.108.108.0/24 maxlen: 24
                          172.108.109.0/24 maxlen: 24
                          172.108.112.0/24 maxlen: 24
                          172.108.113.0/24 maxlen: 24
                          172.108.114.0/24 maxlen: 24
                          172.108.115.0/24 maxlen: 24
                          172.108.116.0/24 maxlen: 24
                          172.108.117.0/24 maxlen: 24
                          172.108.120.0/24 maxlen: 24
                          172.108.121.0/24 maxlen: 24
                          172.108.192.0/18 maxlen: 18
                          2606:4c80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 19:16:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:db:8b:b9:7e:f7:91:3b:28:1f:fc:a9:33:d9:ed:99:08:da:fc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Apr 16 16:24:09 2026 GMT
            Not After : Apr 15 16:29:09 2027 GMT
        Subject: CN=B965FD29647F01FAAB8F4A615D23EAC474D72C97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:39:be:e3:b7:dc:16:c8:83:e9:fa:bb:3b:f2:
                    c7:99:12:9d:e7:8f:b5:ea:08:30:97:e9:6c:dd:05:
                    d4:e3:01:bc:3f:8a:46:8a:c1:b4:47:dd:4b:91:eb:
                    0b:9a:e8:be:a8:e5:43:d8:cf:38:4b:18:af:fc:04:
                    92:40:4e:52:d8:97:20:ca:38:84:21:5e:4a:ea:8a:
                    c1:db:41:e1:e7:45:90:e2:63:4d:56:ad:5e:2b:c0:
                    02:fa:be:e5:86:bf:a5:e8:14:fd:c1:dd:62:be:de:
                    71:19:63:0c:81:f3:51:2b:bb:98:f2:02:19:ab:cc:
                    44:35:69:72:45:3b:e2:f2:57:b1:21:0f:bf:11:b3:
                    fd:04:cc:53:30:05:01:31:f7:d4:87:f4:30:87:03:
                    d1:30:ec:86:f7:45:5e:5c:44:99:8e:70:b6:e7:84:
                    c9:e1:e9:41:05:ac:63:f9:6c:6e:ef:4d:d2:b7:7c:
                    da:a2:c5:49:12:32:19:b6:0c:14:83:97:11:fa:d6:
                    b2:60:a8:b5:c0:cb:a5:da:51:32:9c:90:c1:f0:9d:
                    00:ca:c2:dc:b0:42:bf:8d:c1:4d:55:dd:3c:b4:75:
                    c4:48:a0:a2:ee:dd:1a:ce:94:16:93:12:16:14:46:
                    fa:47:97:5f:cc:57:fa:80:08:9f:c7:56:25:4e:2f:
                    10:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:65:FD:29:64:7F:01:FA:AB:8F:4A:61:5D:23:EA:C4:74:D7:2C:97
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/AS5650.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.182.0.0-47.190.255.255
                  172.102.32.0/19
                  172.108.0.0/16
                IPv6:
                  2606:4c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:ca:50:d4:13:58:cc:7f:c3:f8:b0:cf:ef:81:7e:c0:e0:1b:
         41:cb:90:95:02:2d:a4:ac:b2:8f:7b:54:81:b0:3c:75:09:f6:
         b8:fb:6f:65:03:26:5b:61:1d:c7:6d:bf:25:47:aa:9b:af:23:
         be:f9:5d:b0:c8:2c:83:82:36:99:d1:87:4f:60:40:46:39:30:
         5c:4a:71:8f:f6:62:69:3c:87:41:72:5a:23:54:c7:36:8c:49:
         2f:06:ed:fa:15:8e:af:a6:e3:53:56:c6:73:cf:e4:81:e6:42:
         86:fd:33:3e:09:1f:7c:8f:12:44:b5:f7:83:e0:84:fe:ec:41:
         b6:61:60:d4:e2:a3:ad:7f:28:34:33:eb:6b:a7:96:af:00:70:
         92:96:df:ef:c2:0a:9f:9a:fc:22:a9:3e:0c:2f:91:dd:29:b9:
         87:53:41:d6:6a:b5:6d:4e:57:93:0c:a0:a1:93:8e:d8:f6:18:
         b6:b1:9c:7b:1e:7e:ea:38:46:44:63:94:6e:b0:eb:81:be:39:
         57:0a:10:2d:27:c0:84:b1:d8:71:e1:a2:ca:5a:04:dd:89:6f:
         68:02:84:f2:a5:65:82:c6:6b:18:c8:8e:1f:39:9b:1b:fd:57:
         1f:ba:a2:b3:71:29:5b:1a:50:cb:77:fd:c8:c8:e8:3b:42:98:
         3b:97:6f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:32:07 2026 by rpki-client