Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS5065.roa
File:                     AS5065.roa (raw, json)
Hash identifier:          xjY3z/sJsjikHLqxm3Jjv/HHI0sZwKIZ7MGtV03/Kuw=
Subject key identifier:   53:21:05:7B:40:97:18:4A:50:D2:48:36:C3:C6:98:AA:CA:8E:8F:C0
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       01E96D6D95ECC9E51A1FBBFC762E69BAE3AA763F
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS5065.roa
Signing time:             Sat 18 Oct 2025 06:30:39 +0000
ROA not before:           Sat 18 Oct 2025 06:25:39 +0000
ROA not after:            Sat 17 Oct 2026 06:30:39 +0000
asID:                     5065
IP address blocks:        64.202.127.0/24 maxlen: 24
                          66.225.253.0/24 maxlen: 24
                          216.246.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:19:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:e9:6d:6d:95:ec:c9:e5:1a:1f:bb:fc:76:2e:69:ba:e3:aa:76:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Oct 18 06:25:39 2025 GMT
            Not After : Oct 17 06:30:39 2026 GMT
        Subject: CN=5321057B4097184A50D24836C3C698AACA8E8FC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:35:a2:34:d5:ab:be:56:79:b6:ba:73:dc:c6:
                    0c:e7:f0:68:33:31:47:b3:ff:2b:dd:42:76:8a:e8:
                    c5:24:9e:4a:cc:7c:5e:ea:b9:03:cf:84:4e:a9:28:
                    ed:90:3a:fb:4c:50:c1:b0:9b:01:97:48:70:d7:c8:
                    0f:9e:6c:df:2f:b9:5e:91:90:c6:9e:24:61:6c:67:
                    f7:e5:d5:09:2a:21:e8:22:b4:cf:e3:59:15:24:fa:
                    b4:68:ab:19:2c:75:b6:bd:fc:02:33:ce:99:c7:b9:
                    10:fa:10:74:86:dc:9d:29:95:f5:9e:4d:72:1e:6f:
                    71:ea:50:f1:49:44:90:db:19:78:9d:8a:aa:78:c6:
                    49:9f:e5:35:62:4b:a4:fe:e0:dd:ef:b2:ee:36:3a:
                    32:3f:4c:d4:d8:b4:09:d6:b2:57:a1:9c:76:fc:8b:
                    e1:4c:3a:2e:d2:4a:c7:6d:43:ba:c0:f1:d6:3a:f5:
                    f9:47:80:f9:72:d5:aa:15:5b:6a:46:97:24:67:a6:
                    bd:df:e4:c5:0c:2f:e6:38:64:1a:1f:1e:45:40:ac:
                    fa:a0:30:6c:58:1f:c9:7e:4f:c3:78:31:02:80:e5:
                    65:30:83:d2:79:04:f6:a7:4d:18:00:35:f7:04:c4:
                    04:5a:e0:33:c4:98:6f:f9:f0:4a:f9:d8:f1:99:59:
                    b7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:21:05:7B:40:97:18:4A:50:D2:48:36:C3:C6:98:AA:CA:8E:8F:C0
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS5065.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.127.0/24
                  66.225.253.0/24
                  216.246.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:96:63:78:b9:d5:3f:8d:91:a6:77:a0:b8:b8:da:7d:d3:2a:
         d0:f9:61:a7:03:a6:75:81:e0:6f:e4:b3:db:34:e2:5a:c3:c2:
         44:37:37:c6:f2:94:ba:4e:92:39:e0:6e:96:2c:01:8d:2b:c0:
         f8:15:bd:b3:e8:36:10:6a:e4:a4:81:0d:fc:de:25:8f:e5:a5:
         c9:d5:e4:e9:94:2e:e2:6e:6e:3e:53:64:85:7a:ea:ab:c9:80:
         f8:5c:11:54:57:c9:9f:69:db:c7:1c:cc:8b:00:b1:5a:eb:47:
         b6:6a:bd:8b:f0:b0:dc:b9:92:d3:5d:a7:68:38:f6:86:63:87:
         9d:eb:0b:5b:fc:1c:34:7c:19:b1:34:b8:44:91:6c:a6:d4:05:
         ac:15:36:36:a4:ea:bf:12:1e:df:c7:d5:89:6a:19:e9:51:fd:
         5d:f8:77:61:02:16:f5:5b:3c:b4:b4:60:ef:dc:51:d5:8f:14:
         e0:7d:af:5f:4d:9b:27:81:0d:bd:40:3c:c4:4a:5b:06:41:95:
         b7:f6:1e:88:d4:b2:cf:80:aa:90:b9:15:38:a6:2c:46:75:ab:
         7b:47:65:ad:e8:3a:0d:0c:54:8c:82:60:32:ed:33:ab:90:64:
         bb:39:9a:c4:16:3e:22:49:e5:93:b6:8c:ad:dc:db:ea:ad:a0:
         da:2d:1d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:08:27 2025 by rpki-client