Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS5650.roa
File: AS5650.roa (raw, json)
Hash identifier: VmQJSt+K5jOAgdeMpifTvKHdv9ZK3hyB17dg5rkCInE=
Subject key identifier: 92:30:F2:DB:93:E5:08:CF:E8:55:06:83:24:E2:50:FD:3D:43:83:11
Certificate issuer: /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial: 2AF1AA6AC21FA5B3A214622795DE8E41C199A1CF
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS5650.roa
Signing time: Tue 24 Jun 2025 14:38:17 +0000
ROA not before: Tue 24 Jun 2025 14:33:17 +0000
ROA not after: Tue 23 Jun 2026 14:38:17 +0000
asID: 5650
IP address blocks: 45.52.0.0/15 maxlen: 15
45.52.185.0/24 maxlen: 24
50.32.0.0/15 maxlen: 15
50.32.0.0/17 maxlen: 17
50.32.128.0/17 maxlen: 17
50.33.0.0/18 maxlen: 18
50.33.64.0/19 maxlen: 19
50.33.96.0/20 maxlen: 20
50.33.98.0/23 maxlen: 23
50.33.112.0/20 maxlen: 20
50.33.128.0/18 maxlen: 18
50.33.192.0/18 maxlen: 18
50.36.0.0/18 maxlen: 18
50.36.64.0/18 maxlen: 18
50.36.128.0/19 maxlen: 19
50.36.160.0/19 maxlen: 19
50.36.192.0/19 maxlen: 19
50.36.224.0/19 maxlen: 19
50.37.0.0/19 maxlen: 19
50.37.32.0/19 maxlen: 19
50.38.128.0/17 maxlen: 17
50.39.0.0/19 maxlen: 19
50.39.32.0/19 maxlen: 19
50.40.0.0/16 maxlen: 16
50.41.0.0/16 maxlen: 16
50.42.0.0/19 maxlen: 19
50.42.32.0/19 maxlen: 19
50.42.64.0/18 maxlen: 18
50.42.93.0/24 maxlen: 24
50.42.128.0/18 maxlen: 18
50.42.192.0/18 maxlen: 18
50.43.128.0/17 maxlen: 17
50.44.0.0/16 maxlen: 16
50.45.0.0/17 maxlen: 17
50.48.0.0/14 maxlen: 14
50.48.0.0/15 maxlen: 15
50.50.0.0/16 maxlen: 16
50.51.0.0/16 maxlen: 16
50.52.128.0/17 maxlen: 17
50.54.0.0/17 maxlen: 17
50.55.0.0/16 maxlen: 16
50.55.32.0/19 maxlen: 19
50.55.128.0/17 maxlen: 17
50.102.0.0/15 maxlen: 15
50.104.0.0/15 maxlen: 15
50.104.0.0/17 maxlen: 17
50.104.128.0/17 maxlen: 17
50.105.0.0/18 maxlen: 18
50.105.64.0/18 maxlen: 18
50.105.128.0/17 maxlen: 17
50.106.64.0/18 maxlen: 18
50.106.128.0/18 maxlen: 18
50.106.192.0/18 maxlen: 18
50.107.0.0/20 maxlen: 20
50.107.16.0/21 maxlen: 21
50.107.32.0/20 maxlen: 20
50.107.48.0/20 maxlen: 20
50.107.64.0/18 maxlen: 18
50.107.128.0/17 maxlen: 17
50.108.0.0/18 maxlen: 18
50.108.64.0/18 maxlen: 18
50.108.128.0/17 maxlen: 17
50.109.0.0/17 maxlen: 17
50.109.128.0/18 maxlen: 18
50.109.192.0/19 maxlen: 19
50.110.0.0/16 maxlen: 16
50.111.0.0/16 maxlen: 16
50.120.0.0/18 maxlen: 18
50.120.96.0/19 maxlen: 19
50.120.128.0/17 maxlen: 17
50.120.128.0/19 maxlen: 19
50.120.160.0/19 maxlen: 19
50.120.192.0/19 maxlen: 19
50.120.224.0/19 maxlen: 19
50.121.0.0/16 maxlen: 16
50.121.0.0/17 maxlen: 17
50.121.128.0/17 maxlen: 17
50.122.0.0/16 maxlen: 16
50.122.0.0/18 maxlen: 18
50.122.64.0/19 maxlen: 19
50.122.96.0/19 maxlen: 19
50.122.128.0/17 maxlen: 17
50.123.0.0/18 maxlen: 18
50.123.128.0/18 maxlen: 18
50.123.192.0/18 maxlen: 18
50.124.0.0/18 maxlen: 18
50.124.64.0/19 maxlen: 19
50.124.96.0/19 maxlen: 19
50.124.128.0/18 maxlen: 18
50.124.192.0/19 maxlen: 19
50.124.202.0/24 maxlen: 24
50.124.224.0/19 maxlen: 19
50.126.0.0/19 maxlen: 19
50.126.32.0/19 maxlen: 19
50.126.128.0/18 maxlen: 18
50.126.192.0/18 maxlen: 18
50.127.0.0/17 maxlen: 17
50.127.128.0/18 maxlen: 18
50.127.192.0/19 maxlen: 19
50.127.224.0/19 maxlen: 19
65.37.0.0/17 maxlen: 17
65.73.0.0/16 maxlen: 16
66.133.128.0/18 maxlen: 18
66.133.171.0/24 maxlen: 24
70.100.0.0/15 maxlen: 15
74.32.0.0/12 maxlen: 12
74.36.112.0/20 maxlen: 20
74.36.136.0/21 maxlen: 21
74.37.24.0/24 maxlen: 24
74.39.33.0/24 maxlen: 24
74.39.44.0/22 maxlen: 22
74.39.188.0/24 maxlen: 24
74.40.66.0/24 maxlen: 24
74.42.128.0/20 maxlen: 20
74.43.114.0/24 maxlen: 24
74.43.219.0/24 maxlen: 24
74.44.208.0/21 maxlen: 21
74.45.1.0/24 maxlen: 24
74.45.32.0/19 maxlen: 19
74.45.99.0/24 maxlen: 24
74.45.231.0/24 maxlen: 24
74.45.243.0/24 maxlen: 24
74.45.244.0/24 maxlen: 24
74.45.245.0/24 maxlen: 24
74.46.46.0/23 maxlen: 23
74.46.252.0/22 maxlen: 22
104.169.0.0/16 maxlen: 16
104.235.0.0/16 maxlen: 16
104.240.0.0/16 maxlen: 16
170.215.0.0/16 maxlen: 16
170.215.71.0/24 maxlen: 24
170.215.75.0/24 maxlen: 24
172.76.0.0/14 maxlen: 14
173.84.0.0/14 maxlen: 14
173.84.12.0/24 maxlen: 24
173.84.14.0/24 maxlen: 24
173.85.0.0/20 maxlen: 20
173.86.76.0/22 maxlen: 22
173.86.198.0/23 maxlen: 23
173.86.225.0/24 maxlen: 24
173.87.28.0/22 maxlen: 22
173.87.176.0/20 maxlen: 20
184.8.0.0/13 maxlen: 13
184.8.228.0/22 maxlen: 22
184.9.28.0/24 maxlen: 24
184.10.176.0/20 maxlen: 20
184.12.6.0/24 maxlen: 24
184.12.136.0/22 maxlen: 22
184.16.0.0/14 maxlen: 14
192.182.0.0/17 maxlen: 17
192.182.0.0/18 maxlen: 18
192.182.64.0/18 maxlen: 18
192.182.160.0/19 maxlen: 19
192.182.192.0/19 maxlen: 19
192.182.224.0/19 maxlen: 19
192.183.0.0/18 maxlen: 18
192.183.64.0/18 maxlen: 18
192.183.128.0/19 maxlen: 19
192.183.224.0/19 maxlen: 19
209.177.112.0/20 maxlen: 20
216.67.192.0/19 maxlen: 19
2001:1960::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/06af24e7-1c13-4430-bd79-db05f6dc0643.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 30 Jun 2025 05:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:f1:aa:6a:c2:1f:a5:b3:a2:14:62:27:95:de:8e:41:c1:99:a1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Validity
Not Before: Jun 24 14:33:17 2025 GMT
Not After : Jun 23 14:38:17 2026 GMT
Subject: CN=9230F2DB93E508CFE855068324E250FD3D438311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:13:4d:30:a3:8e:34:cd:04:c3:eb:02:c8:
fe:81:67:7a:c6:05:ea:90:b0:a1:ce:5b:d9:59:f9:
68:05:fa:68:5a:d0:78:65:3d:80:0d:5f:ee:f2:5a:
09:6b:8b:7c:01:8b:42:81:ca:95:38:95:a5:a1:e6:
32:33:5a:72:c9:01:8b:db:a2:ac:b8:3f:a9:d3:70:
52:32:86:e6:a4:c6:60:de:e3:27:7e:b4:27:34:60:
52:86:86:af:97:33:60:ea:29:ea:ad:2f:09:cf:f2:
2a:aa:a0:f3:78:02:ff:4d:41:c5:c4:ab:f7:87:aa:
ea:aa:58:c5:60:63:38:f4:5f:1e:53:69:97:a4:2d:
8f:fd:eb:2e:40:2c:85:11:62:a9:30:b5:11:3f:b8:
76:b0:c0:f7:dc:36:16:d4:e8:87:9b:4a:9e:60:a3:
5d:0f:e1:f1:94:1c:69:f1:8d:74:1f:f7:83:7f:59:
0e:d9:c0:23:50:9b:16:c0:ba:56:81:ef:03:ec:0b:
10:03:dc:59:9e:aa:e4:80:69:01:b0:9a:42:74:27:
65:99:fa:63:14:4d:85:a3:db:7b:45:41:5e:e7:ab:
eb:72:05:51:8d:b1:7d:68:cb:57:d6:d5:8c:85:0a:
74:b2:6a:83:ef:47:6d:c4:77:c0:41:8b:05:8e:83:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:30:F2:DB:93:E5:08:CF:E8:55:06:83:24:E2:50:FD:3D:43:83:11
X509v3 Authority Key Identifier:
keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS5650.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.52.0.0/15
50.32.0.0/15
50.36.0.0-50.37.63.255
50.38.128.0-50.39.63.255
50.40.0.0-50.42.255.255
50.43.128.0-50.45.127.255
50.48.0.0/14
50.52.128.0/17
50.54.0.0/17
50.55.0.0/16
50.102.0.0-50.105.255.255
50.106.64.0-50.107.23.255
50.107.32.0-50.109.223.255
50.110.0.0/15
50.120.0.0/18
50.120.96.0-50.123.63.255
50.123.128.0-50.124.255.255
50.126.0.0/18
50.126.128.0-50.127.255.255
65.37.0.0/17
65.73.0.0/16
66.133.128.0/18
70.100.0.0/15
74.32.0.0/12
104.169.0.0/16
104.235.0.0/16
104.240.0.0/16
170.215.0.0/16
172.76.0.0/14
173.84.0.0/14
184.8.0.0-184.19.255.255
192.182.0.0/17
192.182.160.0-192.183.159.255
192.183.224.0/19
209.177.112.0/20
216.67.192.0/19
IPv6:
2001:1960::/32
Signature Algorithm: sha256WithRSAEncryption
b2:51:47:ca:44:49:2e:4f:e4:5a:c6:04:bb:a2:b0:f2:36:f4:
de:5b:40:68:2f:d5:bb:52:9b:17:0a:f5:be:2d:24:1f:3c:e6:
db:b4:d7:f6:bb:3f:37:dd:a0:39:4e:f4:a0:0d:7e:2f:05:fb:
a9:da:b9:72:5e:db:04:52:45:67:24:31:08:89:f6:f6:35:30:
76:f4:02:2f:5e:a3:7e:16:34:a7:99:3a:d3:ea:28:ce:30:d3:
46:1b:03:6d:cb:b1:50:f0:fe:b3:7a:b7:91:c3:45:6e:ee:da:
ed:43:7a:9c:87:ce:21:2b:68:dd:5c:a8:b5:40:88:82:e4:cb:
4d:9f:e9:c4:83:fb:cf:98:2b:d9:07:6b:62:3e:eb:5f:80:85:
84:71:a8:15:7c:4c:5f:bd:a9:77:d7:79:ae:7c:9b:13:8d:31:
86:37:d7:d3:74:b8:32:17:86:2b:36:11:c8:c1:b0:d7:50:70:
43:ab:33:74:ba:ae:97:bb:6d:30:4f:7d:fc:d9:47:5d:62:74:
64:0f:a9:b8:4b:d3:98:72:9f:ba:df:3e:35:e0:dd:e8:61:70:
82:d0:8d:81:05:33:ec:da:0c:52:a2:48:24:bd:39:20:86:5d:
4b:c5:17:04:1c:f7:6e:88:45:9d:cd:40:4f:e3:f3:7b:35:3e:
2f:d8:10:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 12:33:58 2025 by rpki-client