Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/4ae6fc31-0701-3077-8d2c-8742e59cc8a8.roa
File:                     4ae6fc31-0701-3077-8d2c-8742e59cc8a8.roa (raw, json)
Hash identifier:          3cWNDzFCPIxDf1tNOY9LmFVAywB0kULzfSh+S/DJpiM=
Subject key identifier:   53:53:BC:D6:1B:4F:5A:D8:E1:2E:FD:7D:5D:A0:C5:22:96:52:62:60
Certificate issuer:       /CN=565e1435-ee87-4f33-bcd9-612cce56acf5
Certificate serial:       010D0C9F4328584A74B5DD98896D9222BE2476C0
Authority key identifier: 62:D6:53:BD:F9:F2:45:96:B8:5D:5D:CA:26:80:99:A2:DE:C4:A9:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/4ae6fc31-0701-3077-8d2c-8742e59cc8a8.roa
Signing time:             Wed 09 Jul 2025 01:00:49 +0000
ROA not before:           Wed 09 Jul 2025 01:00:49 +0000
ROA not after:            Tue 07 Oct 2025 01:00:49 +0000
asID:                     398846
IP address blocks:        2605:ae40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/565e1435-ee87-4f33-bcd9-612cce56acf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/565e1435-ee87-4f33-bcd9-612cce56acf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:74:b5:dd:98:89:6d:92:22:be:24:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=565e1435-ee87-4f33-bcd9-612cce56acf5
        Validity
            Not Before: Jul  9 01:00:49 2025 GMT
            Not After : Oct  7 01:00:49 2025 GMT
        Subject: CN=e8c9884a-a34d-4feb-ba83-342c46ae173b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:df:b1:11:38:7c:a8:4a:e0:35:77:07:61:c0:
                    3a:0b:71:5e:e0:60:92:da:42:2e:53:d2:0b:63:19:
                    9c:c9:69:80:b3:bd:36:88:59:9a:2d:e8:03:1b:35:
                    89:a5:d4:66:13:91:29:79:a9:4e:95:76:46:c9:98:
                    20:8b:8a:96:98:c6:05:31:03:3f:ee:a2:9d:58:e2:
                    59:da:05:07:0f:ad:98:3a:38:79:99:ae:f0:cb:72:
                    b8:60:f4:c6:2a:6f:a9:b9:dc:64:e4:ca:e3:e9:96:
                    6b:20:f6:bc:2b:db:20:0d:86:ba:62:1e:1a:e1:0c:
                    1e:99:97:3d:14:e0:cf:b8:db:1e:ec:74:9f:98:23:
                    ef:81:3a:99:48:ca:6d:e6:37:87:c6:29:94:27:82:
                    df:f4:af:aa:9c:d9:4a:89:e8:7e:9d:f2:de:1e:8d:
                    bf:70:e7:45:b1:32:f4:9c:28:0b:39:5c:67:5a:ec:
                    ff:4e:dc:8f:4b:5e:73:79:16:8d:b3:ae:ab:a4:90:
                    ec:d9:ad:72:7b:1e:25:2d:e3:d5:e6:a7:ee:63:f4:
                    b5:f6:9a:58:43:a0:31:8a:43:86:bc:d4:68:79:c0:
                    d5:8e:9d:93:9e:5c:df:d8:56:1a:5c:cc:1f:1b:14:
                    e6:42:33:22:49:b9:16:38:85:a3:56:ef:cd:36:a6:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:53:BC:D6:1B:4F:5A:D8:E1:2E:FD:7D:5D:A0:C5:22:96:52:62:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/4ae6fc31-0701-3077-8d2c-8742e59cc8a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/565e1435-ee87-4f33-bcd9-612cce56acf5.crl

            X509v3 Authority Key Identifier:
                keyid:62:D6:53:BD:F9:F2:45:96:B8:5D:5D:CA:26:80:99:A2:DE:C4:A9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ae40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:2b:9d:10:75:f6:02:cb:ab:f1:d4:f3:59:9e:8c:15:39:0e:
         8f:db:65:08:bf:73:0f:2b:c9:b7:df:54:d6:99:fe:98:b6:24:
         f7:de:2a:4b:5c:05:bb:32:ae:68:cc:d6:c1:d6:97:9d:4d:3f:
         e9:32:0c:ef:0d:cb:20:f3:07:15:22:96:36:7f:a4:5d:90:ad:
         11:ef:32:46:f7:0d:c2:69:8f:5e:5b:3a:76:91:a4:34:69:f2:
         7c:a7:4c:0d:5d:e3:1f:6c:fc:cd:0f:f8:ae:9c:dd:f4:ee:45:
         17:ec:26:24:fc:9e:89:a6:7b:c7:13:3a:9c:d6:69:57:a6:49:
         57:84:a4:bd:45:9b:29:35:03:3a:29:d7:5c:8a:b8:42:e9:6b:
         22:90:04:cb:02:11:5f:1c:52:34:71:8e:29:ee:db:40:eb:e1:
         91:fb:a7:26:75:f3:ca:ff:53:11:2f:48:4b:17:b9:ef:2e:eb:
         a9:e6:69:3c:ab:5e:6f:5b:33:e9:18:3b:cf:10:30:5a:0c:fe:
         30:98:0d:48:a0:6b:08:04:72:e5:89:be:54:0d:6b:70:bc:29:
         e2:c8:9e:d4:48:b9:b5:b6:70:c0:9e:46:40:b0:33:55:79:f6:
         dd:7d:81:db:92:34:cb:11:18:37:18:be:30:34:0d:fb:81:d4:
         c3:51:3d:3d
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEp0td2YiW2SIr4kdsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTY1ZTE0MzUtZWU4Ny00ZjMzLWJjZDktNjEyY2NlNTZh
Y2Y1MB4XDTI1MDcwOTAxMDA0OVoXDTI1MTAwNzAxMDA0OVowLzEtMCsGA1UEAxMk
ZThjOTg4NGEtYTM0ZC00ZmViLWJhODMtMzQyYzQ2YWUxNzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4t+xETh8qErgNXcHYcA6C3Fe4GCS2kIuU9IL
YxmcyWmAs702iFmaLegDGzWJpdRmE5EpealOlXZGyZggi4qWmMYFMQM/7qKdWOJZ
2gUHD62YOjh5ma7wy3K4YPTGKm+pudxk5Mrj6ZZrIPa8K9sgDYa6Yh4a4QwemZc9
FODPuNse7HSfmCPvgTqZSMpt5jeHximUJ4Lf9K+qnNlKieh+nfLeHo2/cOdFsTL0
nCgLOVxnWuz/TtyPS15zeRaNs66rpJDs2a1yex4lLePV5qfuY/S19ppYQ6AxikOG
vNRoecDVjp2Tnlzf2FYaXMwfGxTmQjMiSbkWOIWjVu/NNqZaswIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFNTvNYbT1rY4S79fV2gxSKWUmJgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NjVl
MTQzNS1lZTg3LTRmMzMtYmNkOS02MTJjY2U1NmFjZjUvNGFlNmZjMzEtMDcwMS0z
MDc3LThkMmMtODc0MmU1OWNjOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTY1ZTE0MzUtZWU4Ny00ZjMzLWJj
ZDktNjEyY2NlNTZhY2Y1LzU2NWUxNDM1LWVlODctNGYzMy1iY2Q5LTYxMmNjZTU2
YWNmNS5jcmwwHwYDVR0jBBgwFoAUYtZTvfnyRZa4XV3KJoCZot7Eqc8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NjVlMTQzNS1lZTg3LTRmMzMtYmNkOS02MTJj
Y2U1NmFjZjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWuQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBEK50QdfYCy6vx1PNZnowVOQ6P22UIv3MPK8m331TWmf6YtiT33ipL
XAW7Mq5ozNbB1pedTT/pMgzvDcsg8wcVIpY2f6RdkK0R7zJG9w3CaY9eWzp2kaQ0
afJ8p0wNXeMfbPzND/iunN307kUX7CYk/J6JpnvHEzqc1mlXpklXhKS9RZspNQM6
KddcirhC6WsikATLAhFfHFI0cY4p7ttA6+GR+6cmdfPK/1MRL0hLF7nvLuup5mk8
q15vWzPpGDvPEDBaDP4wmA1IoGsIBHLlib5UDWtwvCniyJ7USLm1tnDAnkZAsDNV
efbdfYHbkjTLERg3GL4wNA37gdTDUT09
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:58:33 2025 by rpki-client