Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/4ae6fc31-0701-3077-8d2c-8742e59cc8a8.roa
File:                     4ae6fc31-0701-3077-8d2c-8742e59cc8a8.roa (raw, json)
Hash identifier:          ZPHwYBNwSYBi6o98GpH6OTWbRJXpNwdMIvOWToetKHQ=
Subject key identifier:   8D:85:13:18:40:B4:E2:1C:97:C8:8B:52:48:56:2C:C4:32:3C:37:7F
Certificate issuer:       /CN=565e1435-ee87-4f33-bcd9-612cce56acf5
Certificate serial:       010D0C9F43285848B6260D6F111330A975B78580
Authority key identifier: 62:D6:53:BD:F9:F2:45:96:B8:5D:5D:CA:26:80:99:A2:DE:C4:A9:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/4ae6fc31-0701-3077-8d2c-8742e59cc8a8.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     398846
IP address blocks:        2605:ae40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/565e1435-ee87-4f33-bcd9-612cce56acf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/565e1435-ee87-4f33-bcd9-612cce56acf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:0d:6f:11:13:30:a9:75:b7:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=565e1435-ee87-4f33-bcd9-612cce56acf5
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=ab89302e-4162-4aa3-8636-5e4943c60245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:84:3e:a1:8a:a2:77:04:8e:4b:1b:23:d6:30:
                    c5:85:1a:36:e7:b9:f4:bd:99:90:7a:d3:78:94:de:
                    f7:ea:08:1b:48:9a:fb:01:8e:03:c6:14:a6:e6:c7:
                    15:b3:42:88:2b:4e:78:49:4a:1b:76:91:ef:51:d8:
                    7d:1f:76:e1:54:ca:cf:d3:57:d8:d1:86:aa:22:60:
                    13:3d:9c:e1:41:d8:47:fe:7d:b7:ff:f7:a6:90:25:
                    60:81:6a:b6:6a:b7:13:04:b7:5b:18:8b:91:59:1b:
                    9a:53:ad:c9:7b:fc:a7:3f:b4:d8:d7:d1:02:a4:0b:
                    de:a0:7d:fb:bc:ca:a6:45:e9:be:4e:b3:3c:69:83:
                    79:b4:fb:42:b3:00:cd:e3:d2:c7:26:1b:5b:90:bc:
                    b6:6b:53:b6:d2:a6:44:ee:3d:8b:26:25:3a:95:0a:
                    68:b6:98:57:97:92:53:aa:ea:84:a9:37:4f:cd:6b:
                    cc:4f:55:cb:bc:25:a7:c7:78:0f:12:7c:16:ba:6e:
                    bf:4a:e0:c3:4a:17:46:cd:b8:bf:22:fa:60:93:bd:
                    8f:b7:69:b1:93:7d:ff:cb:c1:85:44:14:54:e1:22:
                    2b:c8:82:14:39:fc:19:eb:9a:51:d0:51:03:62:17:
                    79:b8:4f:77:43:23:62:b9:a9:6a:58:16:dd:da:0e:
                    1e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:85:13:18:40:B4:E2:1C:97:C8:8B:52:48:56:2C:C4:32:3C:37:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/4ae6fc31-0701-3077-8d2c-8742e59cc8a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/565e1435-ee87-4f33-bcd9-612cce56acf5.crl

            X509v3 Authority Key Identifier:
                keyid:62:D6:53:BD:F9:F2:45:96:B8:5D:5D:CA:26:80:99:A2:DE:C4:A9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ae40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:06:f1:50:80:98:9e:68:92:99:fa:93:87:ec:3c:78:b2:5d:
         30:9d:5b:80:6e:2d:17:1c:8d:c6:de:64:9a:94:e5:b4:83:74:
         7e:25:9f:1d:74:60:55:bc:91:ea:32:e1:35:92:d3:5c:6b:f8:
         14:c8:cd:d7:7a:1a:f6:49:cf:89:dc:74:27:44:c1:32:7c:e7:
         58:9d:ae:e8:65:57:96:27:81:28:63:ca:0d:2b:59:de:57:e4:
         69:bf:f2:cd:7c:e5:42:77:cb:58:76:69:1e:dd:25:05:e2:9a:
         eb:6f:5f:8e:43:fe:44:61:d2:ff:2a:f5:f1:45:92:fa:e7:f8:
         e3:77:de:c4:08:5d:58:0a:04:25:01:a2:4c:8d:a5:98:cd:89:
         6a:96:a8:7f:21:8f:f4:84:ef:7d:a2:e6:bc:99:dc:40:75:4d:
         49:46:0c:57:77:4b:26:cb:24:b4:56:fe:4b:10:8d:3e:78:ae:
         53:e0:62:41:80:95:fe:ba:4f:81:9f:b3:85:33:ae:76:6c:06:
         4f:ae:2a:aa:de:b0:07:bb:a9:e4:0f:78:77:5b:b3:31:f3:ed:
         36:d3:5e:77:24:e7:f1:13:88:72:6d:21:ba:ed:0a:4b:04:d3:
         76:2d:4d:83:fa:a8:8c:de:55:9b:2c:30:8d:28:66:63:1c:dd:
         95:f5:1f:b6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEi2Jg1vERMwqXW3hYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTY1ZTE0MzUtZWU4Ny00ZjMzLWJjZDktNjEyY2NlNTZh
Y2Y1MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk
YWI4OTMwMmUtNDE2Mi00YWEzLTg2MzYtNWU0OTQzYzYwMjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoQ+oYqidwSOSxsj1jDFhRo257n0vZmQetN4
lN736ggbSJr7AY4DxhSm5scVs0KIK054SUobdpHvUdh9H3bhVMrP01fY0YaqImAT
PZzhQdhH/n23//emkCVggWq2arcTBLdbGIuRWRuaU63Je/ynP7TY19ECpAveoH37
vMqmRem+TrM8aYN5tPtCswDN49LHJhtbkLy2a1O20qZE7j2LJiU6lQpotphXl5JT
quqEqTdPzWvMT1XLvCWnx3gPEnwWum6/SuDDShdGzbi/Ivpgk72Pt2mxk33/y8GF
RBRU4SIryIIUOfwZ65pR0FEDYhd5uE93QyNiualqWBbd2g4e+wIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFI2FExhAtOIcl8iLUkhWLMQyPDd/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NjVl
MTQzNS1lZTg3LTRmMzMtYmNkOS02MTJjY2U1NmFjZjUvNGFlNmZjMzEtMDcwMS0z
MDc3LThkMmMtODc0MmU1OWNjOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTY1ZTE0MzUtZWU4Ny00ZjMzLWJj
ZDktNjEyY2NlNTZhY2Y1LzU2NWUxNDM1LWVlODctNGYzMy1iY2Q5LTYxMmNjZTU2
YWNmNS5jcmwwHwYDVR0jBBgwFoAUYtZTvfnyRZa4XV3KJoCZot7Eqc8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NjVlMTQzNS1lZTg3LTRmMzMtYmNkOS02MTJj
Y2U1NmFjZjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWuQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQB8BvFQgJieaJKZ+pOH7Dx4sl0wnVuAbi0XHI3G3mSalOW0g3R+JZ8d
dGBVvJHqMuE1ktNca/gUyM3Xehr2Sc+J3HQnRMEyfOdYna7oZVeWJ4EoY8oNK1ne
V+Rpv/LNfOVCd8tYdmke3SUF4prrb1+OQ/5EYdL/KvXxRZL65/jjd97ECF1YCgQl
AaJMjaWYzYlqlqh/IY/0hO99oua8mdxAdU1JRgxXd0smyyS0Vv5LEI0+eK5T4GJB
gJX+uk+Bn7OFM652bAZPriqq3rAHu6nkD3h3W7Mx8+020153JOfxE4hybSG67QpL
BNN2LU2D+qiM3lWbLDCNKGZjHN2V9R+2
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:18 2025 by rpki-client