Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/AS5650.roa
File:                     AS5650.roa (raw, json)
Hash identifier:          R649DQEzxFZwZKGSmMNhcuFho1mkKbYWomYXcrLTSyI=
Subject key identifier:   24:1B:8D:A5:D0:30:8A:EF:4E:27:30:72:AB:7C:ED:EA:A3:E0:94:AE
Certificate issuer:       /CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
Certificate serial:       77FD7552316900626D603375EC051C531A79ED6F
Authority key identifier: F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/AS5650.roa
Signing time:             Thu 12 Jun 2025 14:36:27 +0000
ROA not before:           Thu 12 Jun 2025 14:31:27 +0000
ROA not after:            Thu 11 Jun 2026 14:36:27 +0000
asID:                     5650
IP address blocks:        47.136.0.0/13 maxlen: 13
                          47.136.0.0/14 maxlen: 14
                          47.137.208.0/21 maxlen: 21
                          47.137.216.0/21 maxlen: 21
                          47.140.0.0/16 maxlen: 16
                          47.140.56.0/22 maxlen: 22
                          47.140.112.0/22 maxlen: 22
                          47.140.116.0/22 maxlen: 22
                          47.140.157.0/24 maxlen: 24
                          47.140.158.0/24 maxlen: 24
                          47.140.204.0/24 maxlen: 24
                          47.140.205.0/24 maxlen: 24
                          47.140.216.0/22 maxlen: 22
                          47.140.224.0/20 maxlen: 20
                          47.140.244.0/23 maxlen: 23
                          47.141.0.0/16 maxlen: 16
                          47.142.0.0/17 maxlen: 17
                          47.142.83.0/24 maxlen: 24
                          47.142.128.0/17 maxlen: 17
                          47.143.8.0/21 maxlen: 21
                          47.143.32.0/22 maxlen: 22
                          47.143.38.0/24 maxlen: 24
                          47.143.39.0/24 maxlen: 24
                          47.143.40.0/23 maxlen: 23
                          47.143.64.0/20 maxlen: 20
                          47.143.80.0/20 maxlen: 20
                          47.143.96.0/20 maxlen: 20
                          47.143.112.0/22 maxlen: 22
                          47.143.116.0/22 maxlen: 22
                          47.143.120.0/22 maxlen: 22
                          47.143.124.0/24 maxlen: 24
                          47.143.125.0/24 maxlen: 24
                          47.143.126.0/24 maxlen: 24
                          47.143.128.0/19 maxlen: 19
                          47.143.176.0/20 maxlen: 20
                          47.143.192.0/19 maxlen: 19
                          47.143.202.0/23 maxlen: 23
                          47.143.208.0/23 maxlen: 23
                          47.143.210.0/23 maxlen: 23
                          47.143.216.0/23 maxlen: 23
                          47.144.0.0/12 maxlen: 12
                          47.144.0.0/13 maxlen: 13
                          47.152.0.0/14 maxlen: 14
                          47.156.0.0/16 maxlen: 16
                          47.157.0.0/16 maxlen: 16
                          47.158.0.0/16 maxlen: 16
                          47.159.0.0/17 maxlen: 17
                          47.159.128.0/18 maxlen: 18
                          47.159.192.0/19 maxlen: 19
                          47.159.224.0/19 maxlen: 19
                          47.160.0.0/12 maxlen: 12
                          47.160.0.0/18 maxlen: 18
                          47.160.64.0/18 maxlen: 18
                          47.160.128.0/18 maxlen: 18
                          47.161.0.0/18 maxlen: 18
                          47.161.160.0/22 maxlen: 22
                          47.161.168.0/22 maxlen: 22
                          47.161.172.0/22 maxlen: 22
                          47.176.0.0/14 maxlen: 14
                          47.177.0.0/16 maxlen: 16
                          47.177.0.0/18 maxlen: 18
                          47.178.0.0/17 maxlen: 17
                          47.180.0.0/15 maxlen: 15
                          47.180.0.0/16 maxlen: 16
                          47.181.0.0/19 maxlen: 19
                          47.181.12.0/23 maxlen: 23
                          47.181.14.0/23 maxlen: 23
                          47.181.32.0/22 maxlen: 22
                          47.181.34.0/23 maxlen: 23
                          47.181.36.0/23 maxlen: 23
                          47.181.38.0/23 maxlen: 23
                          47.181.40.0/23 maxlen: 23
                          47.181.42.0/23 maxlen: 23
                          47.181.44.0/23 maxlen: 23
                          47.181.46.0/23 maxlen: 23
                          47.181.48.0/20 maxlen: 20
                          47.181.64.0/18 maxlen: 18
                          47.181.88.0/21 maxlen: 21
                          47.181.128.0/18 maxlen: 18
                          47.181.192.0/18 maxlen: 18
                          172.95.0.0/16 maxlen: 16
                          172.95.0.0/17 maxlen: 17
                          172.95.128.0/19 maxlen: 19
                          172.95.160.0/20 maxlen: 20
                          172.95.176.0/20 maxlen: 20
                          172.95.192.0/19 maxlen: 19
                          172.95.224.0/24 maxlen: 24
                          172.95.225.0/24 maxlen: 24
                          172.95.226.0/24 maxlen: 24
                          172.95.227.0/24 maxlen: 24
                          172.95.229.0/24 maxlen: 24
                          172.95.231.0/24 maxlen: 24
                          172.95.232.0/21 maxlen: 21
                          172.95.240.0/24 maxlen: 24
                          172.95.241.0/24 maxlen: 24
                          172.95.242.0/24 maxlen: 24
                          172.95.248.0/21 maxlen: 21
                          172.102.64.0/18 maxlen: 18
                          172.102.74.0/23 maxlen: 23
                          172.102.96.0/20 maxlen: 20
                          2606:4e80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/f16705a2-07ac-4031-9237-10489c31b96a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 06:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:fd:75:52:31:69:00:62:6d:60:33:75:ec:05:1c:53:1a:79:ed:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef
        Validity
            Not Before: Jun 12 14:31:27 2025 GMT
            Not After : Jun 11 14:36:27 2026 GMT
        Subject: CN=241B8DA5D0308AEF4E273072AB7CEDEAA3E094AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0d:fb:6c:4e:5a:63:06:ca:c6:91:fe:b5:4f:
                    e6:92:9e:9b:78:7e:05:3d:43:51:86:e0:53:20:d7:
                    dc:13:00:cd:1c:b3:7d:af:f1:12:5e:c2:95:c9:58:
                    d3:83:6e:d9:4e:97:8d:fa:d5:8b:d0:3b:ec:6b:c7:
                    3b:7a:71:6d:4d:38:0f:9d:0a:2d:5d:b0:e4:35:f4:
                    cd:0e:40:9a:27:23:1c:e3:fb:a0:22:5c:b8:35:5b:
                    38:a7:21:bb:c6:20:88:70:e1:b9:93:3b:74:2a:f5:
                    51:3d:a6:fd:d1:fa:fb:aa:31:73:8a:8d:1c:9b:a6:
                    b9:58:44:45:8e:e2:8e:6b:28:4a:c2:54:0d:11:f0:
                    39:da:16:72:0f:37:31:a8:f9:57:f2:86:07:31:f4:
                    a2:bd:55:4a:da:4e:91:7e:20:8c:3a:4e:06:5c:a7:
                    3c:b4:f6:c7:48:e6:0c:5e:6b:23:23:1d:ac:01:b5:
                    31:48:e4:65:bd:8c:66:bd:36:20:72:0f:a8:11:6f:
                    73:8d:48:23:c8:fb:41:b2:cd:e2:51:f8:98:90:0a:
                    45:93:9e:09:0a:34:55:5f:41:a5:04:ec:c9:ed:b4:
                    a6:81:cf:81:14:a4:b4:a0:4b:9a:56:aa:05:12:19:
                    b7:57:5e:b5:1c:8b:b1:a8:ae:8d:16:05:38:0b:96:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1B:8D:A5:D0:30:8A:EF:4E:27:30:72:AB:7C:ED:EA:A3:E0:94:AE
            X509v3 Authority Key Identifier:
                keyid:F7:8B:3E:52:D2:7B:D2:E7:4B:EA:4F:E6:E8:62:40:60:DD:38:5D:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/F78B3E52D27BD2E74BEA4FE6E8624060DD385D37.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16705a2-07ac-4031-9237-10489c31b96a/37666160059af2c1129ecb9e5f6abf5ca92bc8744d61d459ef.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/3/AS5650.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.136.0.0-47.181.255.255
                  172.95.0.0/16
                  172.102.64.0/18
                IPv6:
                  2606:4e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:71:ec:26:84:9e:25:46:57:25:01:e9:5a:fd:3d:62:3d:da:
         df:9e:e7:f5:3e:dc:7c:90:a3:e2:4f:0c:e3:44:90:49:42:68:
         6a:8c:b4:51:1d:af:09:25:98:f8:41:3c:72:8d:a5:65:9d:4f:
         e9:db:ee:67:f8:d1:c2:aa:c5:93:c2:61:9f:e7:ec:f9:58:51:
         0a:46:c5:38:27:51:15:7f:53:7c:d3:2f:38:60:d6:13:2e:00:
         f0:b7:ff:ba:c3:39:2b:25:d6:4f:6f:81:b7:c0:1e:a6:7b:e4:
         3a:ab:94:93:ae:8d:b5:f1:b0:ac:89:a0:f7:26:62:48:24:46:
         61:09:f1:6d:b3:f5:94:f5:fe:ea:8a:4f:90:df:41:37:25:83:
         70:0f:f2:ba:14:0a:7b:76:54:41:78:aa:1a:3f:2c:a1:41:c3:
         ab:9c:63:9d:17:81:f3:03:f5:31:b0:c8:85:b7:eb:25:49:ba:
         d2:c3:86:06:f4:e7:e1:db:73:42:97:0a:55:f8:2f:f8:12:f4:
         3f:d6:ba:c8:44:e0:c8:a2:61:55:92:0d:50:36:29:39:88:fb:
         e9:82:39:5d:0c:1c:51:e3:cb:d5:a6:14:8c:e2:a3:19:4c:f1:
         8f:3d:44:2a:f2:bd:e0:d4:3e:cc:a8:e0:8e:08:27:7f:8b:92:
         2c:1d:af:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:38:16 2025 by rpki-client