Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/4ae6fc31-0701-3077-8d2c-8742e59cc8a8.roa
File:                     4ae6fc31-0701-3077-8d2c-8742e59cc8a8.roa (raw, json)
Hash identifier:          eyYNSVabtul/TBKGWDc/iEiasEaSAFOGFu+jnjYQXZ8=
Subject key identifier:   DE:31:48:B5:F0:A7:27:39:2B:7C:2B:D5:B7:A6:FE:F6:84:35:CC:44
Certificate issuer:       /CN=565e1435-ee87-4f33-bcd9-612cce56acf5
Certificate serial:       010D0C9F43285849955F2234F157B9DFE0AF41B8
Authority key identifier: 62:D6:53:BD:F9:F2:45:96:B8:5D:5D:CA:26:80:99:A2:DE:C4:A9:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/4ae6fc31-0701-3077-8d2c-8742e59cc8a8.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     398846
IP address blocks:        2605:ae40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/565e1435-ee87-4f33-bcd9-612cce56acf5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/565e1435-ee87-4f33-bcd9-612cce56acf5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:22:34:f1:57:b9:df:e0:af:41:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=565e1435-ee87-4f33-bcd9-612cce56acf5
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=1ae5c217-44e6-4213-ae71-d550d0f0d0e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:4d:0e:9b:7b:28:29:82:04:ab:5e:26:6a:
                    e8:8f:ba:3b:fa:80:5f:a5:69:94:f3:d3:20:27:88:
                    3f:39:4f:1a:b8:bf:57:ac:89:58:60:0c:ac:cb:7b:
                    10:f7:24:9a:f7:d2:79:7c:ec:92:d9:7e:33:9c:e4:
                    56:05:47:0c:a1:55:88:a2:20:8b:01:32:18:a3:6f:
                    f9:26:05:9d:1f:ad:8b:e6:38:3b:85:75:1d:45:8d:
                    d3:5f:56:fd:dc:1a:03:ff:ad:2a:6c:9e:33:4c:4c:
                    35:06:71:5a:f3:64:ae:0d:0b:9a:71:25:95:48:34:
                    78:47:5c:b4:6d:47:a3:1a:1c:5e:cf:17:57:72:69:
                    cb:2c:60:91:9c:ed:0a:76:7c:b8:6a:c9:4e:fc:f4:
                    79:d7:f5:cf:d1:a5:ab:ea:34:13:a1:71:b8:14:d4:
                    49:a8:74:0e:12:b0:01:75:38:3d:35:ab:c5:25:9f:
                    cc:3d:54:be:d1:36:c3:5f:f2:19:8a:6f:bb:cd:15:
                    03:6a:a6:fc:99:22:b9:d7:af:de:c2:ec:16:36:70:
                    f1:aa:5a:fe:1b:60:b6:08:c6:4d:23:6e:fd:14:d2:
                    64:f1:62:2a:6a:28:96:87:23:3f:da:4c:27:d1:25:
                    dc:89:a8:4e:b6:50:87:eb:a1:06:5c:05:6b:4d:f9:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:31:48:B5:F0:A7:27:39:2B:7C:2B:D5:B7:A6:FE:F6:84:35:CC:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/4ae6fc31-0701-3077-8d2c-8742e59cc8a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5/565e1435-ee87-4f33-bcd9-612cce56acf5.crl

            X509v3 Authority Key Identifier:
                keyid:62:D6:53:BD:F9:F2:45:96:B8:5D:5D:CA:26:80:99:A2:DE:C4:A9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/565e1435-ee87-4f33-bcd9-612cce56acf5.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:ae40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:44:fd:85:f6:02:4d:03:b4:73:63:58:0a:28:a3:8d:6a:ab:
         0b:34:ed:14:89:64:65:92:11:e9:d6:1f:1c:00:c3:58:22:6d:
         60:77:d4:90:be:b0:b5:0f:38:9b:91:ff:08:1c:09:04:f9:87:
         2c:3b:96:58:ad:7c:a2:3d:48:6d:28:5f:ba:d5:ae:77:18:04:
         0f:61:43:54:db:76:83:b4:ab:1e:b7:97:6d:3c:d6:04:b9:65:
         8c:a7:f9:78:8e:6e:61:0b:cf:a7:13:7e:24:e4:8a:17:f1:f4:
         fb:b3:9e:d2:b3:96:1a:69:05:bc:ea:98:30:8c:a4:70:09:c2:
         e3:4f:24:93:c9:c9:22:a5:e5:4a:b5:80:23:e4:12:b7:17:95:
         61:25:60:c3:ef:f7:52:19:51:7d:08:8d:27:f5:ab:34:d0:35:
         27:8c:b1:f5:d4:1d:16:6c:b9:6d:e5:64:dd:35:72:49:9a:21:
         92:4b:69:ed:ab:f0:17:36:3b:3a:a0:01:5e:51:dc:8c:fa:5b:
         25:85:0c:c3:af:77:4b:31:5c:53:15:f9:e8:30:e6:46:ec:f3:
         8b:bf:ac:91:6b:99:2a:4c:44:93:05:58:a0:2e:eb:75:ab:eb:
         f4:7e:c4:a9:ec:77:69:78:95:92:8e:e6:66:1e:81:33:65:10:
         70:ae:e4:fa
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEmVXyI08Ve53+CvQbgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTY1ZTE0MzUtZWU4Ny00ZjMzLWJjZDktNjEyY2NlNTZh
Y2Y1MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk
MWFlNWMyMTctNDRlNi00MjEzLWFlNzEtZDU1MGQwZjBkMGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL1NDpt7KCmCBKteJmroj7o7+oBfpWmU89Mg
J4g/OU8auL9XrIlYYAysy3sQ9ySa99J5fOyS2X4znORWBUcMoVWIoiCLATIYo2/5
JgWdH62L5jg7hXUdRY3TX1b93BoD/60qbJ4zTEw1BnFa82SuDQuacSWVSDR4R1y0
bUejGhxezxdXcmnLLGCRnO0Kdny4aslO/PR51/XP0aWr6jQToXG4FNRJqHQOErAB
dTg9NavFJZ/MPVS+0TbDX/IZim+7zRUDaqb8mSK516/ewuwWNnDxqlr+G2C2CMZN
I279FNJk8WIqaiiWhyM/2kwn0SXciahOtlCH66EGXAVrTfloXQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFN4xSLXwpyc5K3wr1bem/vaENcxEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NjVl
MTQzNS1lZTg3LTRmMzMtYmNkOS02MTJjY2U1NmFjZjUvNGFlNmZjMzEtMDcwMS0z
MDc3LThkMmMtODc0MmU1OWNjOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTY1ZTE0MzUtZWU4Ny00ZjMzLWJj
ZDktNjEyY2NlNTZhY2Y1LzU2NWUxNDM1LWVlODctNGYzMy1iY2Q5LTYxMmNjZTU2
YWNmNS5jcmwwHwYDVR0jBBgwFoAUYtZTvfnyRZa4XV3KJoCZot7Eqc8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NjVlMTQzNS1lZTg3LTRmMzMtYmNkOS02MTJj
Y2U1NmFjZjUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgWuQDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAMRP2F9gJNA7RzY1gKKKONaqsLNO0UiWRlkhHp1h8cAMNYIm1gd9SQ
vrC1Dzibkf8IHAkE+YcsO5ZYrXyiPUhtKF+61a53GAQPYUNU23aDtKset5dtPNYE
uWWMp/l4jm5hC8+nE34k5IoX8fT7s57Ss5YaaQW86pgwjKRwCcLjTySTyckipeVK
tYAj5BK3F5VhJWDD7/dSGVF9CI0n9as00DUnjLH11B0WbLlt5WTdNXJJmiGSS2nt
q/AXNjs6oAFeUdyM+lslhQzDr3dLMVxTFfnoMOZG7POLv6yRa5kqTESTBVigLut1
q+v0fsSp7HdpeJWSjuZmHoEzZRBwruT6
-----END CERTIFICATE-----
Generated at Wed Apr 30 10:14:38 2025 by rpki-client