Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa
File:                     AS5065.roa (raw, json)
Hash identifier:          Uld9o2BeQsjQ7MV3tbJgxFKGd5YpgLZDVGEIRy33gh0=
Subject key identifier:   4E:35:D2:14:36:19:8F:EB:E8:E0:E2:CB:9E:E9:7E:62:CD:8D:EF:AB
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       7E5DCF3A02FE01AFA582D4010CFEFAAF307D55AA
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa
Signing time:             Fri 29 May 2026 12:49:38 +0000
ROA not before:           Fri 29 May 2026 12:44:38 +0000
ROA not after:            Fri 28 May 2027 12:49:38 +0000
asID:                     5065
IP address blocks:        162.213.2.0/24 maxlen: 24
                          190.92.160.0/22 maxlen: 24
                          208.76.42.0/24 maxlen: 24
                          209.200.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:52:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:5d:cf:3a:02:fe:01:af:a5:82:d4:01:0c:fe:fa:af:30:7d:55:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: May 29 12:44:38 2026 GMT
            Not After : May 28 12:49:38 2027 GMT
        Subject: CN=4E35D21436198FEBE8E0E2CB9EE97E62CD8DEFAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bf:20:c3:ce:97:08:5d:96:4a:c8:30:55:89:
                    c7:c1:5a:50:8a:84:c5:bd:7f:1c:0b:f0:88:e5:18:
                    c4:aa:04:74:2c:c2:bb:d1:4a:4d:a4:e7:4b:d4:be:
                    bc:cd:0f:c7:0a:c3:be:5b:61:71:db:b6:84:87:b0:
                    db:a0:4c:bc:7b:9b:4c:4b:a0:50:b4:e0:de:b9:82:
                    80:ea:70:ee:07:87:45:ee:c1:65:1a:62:61:e7:cd:
                    56:25:5e:4a:1d:7c:fd:de:e2:61:55:3b:3f:4c:89:
                    b3:9b:de:4f:db:db:39:fc:92:e1:f8:ed:19:db:2e:
                    b5:90:65:d5:e3:30:5a:d5:0a:31:85:c9:b7:57:f6:
                    69:7e:dc:d1:10:70:31:2c:64:94:cd:cd:5b:45:bf:
                    18:24:21:82:e7:d0:c2:53:c5:3f:0a:fc:79:3d:e8:
                    c3:43:9c:a7:82:26:35:6c:65:fd:9b:78:0a:cc:d0:
                    82:98:04:55:12:c3:9c:46:54:03:6a:d0:b3:ef:8e:
                    a8:bf:3c:4e:2d:d8:7e:ce:c1:05:2c:68:9c:8f:c8:
                    15:be:e0:6d:31:21:e2:2d:76:81:c2:f3:46:38:f8:
                    f9:05:48:c0:88:1f:fa:0b:1d:ae:4f:f2:ec:d9:ea:
                    ae:16:8c:03:56:d9:f4:91:04:55:aa:cf:ff:96:8c:
                    01:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:35:D2:14:36:19:8F:EB:E8:E0:E2:CB:9E:E9:7E:62:CD:8D:EF:AB
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS5065.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.2.0/24
                  190.92.160.0/22
                  208.76.42.0/24
                  209.200.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:85:bb:d1:04:4a:5d:12:b7:1e:0f:9d:fa:46:f2:34:4a:46:
         dd:f5:ec:51:32:19:44:32:3d:ac:d7:43:d1:7d:5a:e0:d5:b4:
         49:70:4d:b8:77:8c:9e:f4:37:9c:b9:8a:bf:45:34:ea:32:73:
         bd:83:d4:bf:f8:a6:71:f1:88:e1:07:00:54:05:85:a7:ba:03:
         7e:d2:cf:dd:1c:14:49:34:4c:4b:9f:68:4a:83:72:0b:8c:a7:
         a6:99:a8:33:d4:22:8a:d9:66:d4:8c:48:f4:c8:34:96:65:2a:
         e7:b9:01:ea:1e:0d:c4:cb:75:83:a9:8a:3d:e4:d1:c3:f7:cb:
         c3:f4:f0:1b:97:b8:82:db:45:a1:59:fd:21:20:f4:36:b6:c5:
         9b:b6:04:bc:96:5f:f7:f0:4d:66:63:78:f9:7f:13:37:09:b9:
         82:b0:04:d9:d0:bd:61:9c:da:d9:00:b2:d4:31:86:b6:f3:5e:
         69:fd:6f:55:28:ea:4d:84:cb:dc:c3:21:3f:c3:b1:7a:d2:80:
         1e:21:10:1e:1d:b3:87:e8:eb:ab:bb:b6:ce:9a:2a:62:c0:52:
         88:97:9e:d2:ff:90:a0:55:f5:fa:eb:ee:ad:f4:6e:61:02:80:
         13:e2:fb:8a:be:71:f8:bd:b4:1b:98:da:48:74:bf:9d:33:0d:
         de:ec:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:42:31 2026 by rpki-client