Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a3132333a3a2f34382d3438203d3e20343030383137.roa
File:                     323630323a3239363a3132333a3a2f34382d3438203d3e20343030383137.roa (raw, json)
Hash identifier:          Xa9loMgZvrAGbPPjnEXsZ2f/3SwGfw7IYqpxWMbxuJ8=
Subject key identifier:   C2:2B:ED:EF:BC:43:74:5B:51:70:C6:C1:29:F9:A5:91:D7:76:08:20
Certificate issuer:       /CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
Certificate serial:       9BAC147711C64CA2D5CCC1A44D340140DE98B6
Authority key identifier: 18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a3132333a3a2f34382d3438203d3e20343030383137.roa
Signing time:             Mon 10 Aug 2026 11:23:58 +0000
ROA not before:           Mon 10 Aug 2026 11:18:58 +0000
ROA not after:            Mon 09 Aug 2027 11:23:58 +0000
asID:                     400817
IP address blocks:        2602:296:123::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            9b:ac:14:77:11:c6:4c:a2:d5:cc:c1:a4:4d:34:01:40:de:98:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192
        Validity
            Not Before: Aug 10 11:18:58 2026 GMT
            Not After : Aug  9 11:23:58 2027 GMT
        Subject: CN=C22BEDEFBC43745B5170C6C129F9A591D7760820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ba:97:25:26:65:db:1d:d2:e0:bf:35:52:c1:
                    07:5c:55:0a:a3:7d:99:21:71:53:0f:4d:1d:35:f2:
                    56:3c:e4:a2:d4:22:7a:1c:57:d0:1c:60:e6:a3:8c:
                    f1:23:c7:fd:eb:df:aa:c8:0b:ac:d6:fd:f3:ca:86:
                    c3:af:aa:7c:6c:c1:60:12:b6:94:65:8b:d5:c8:a5:
                    be:d2:56:62:e9:1f:86:52:71:53:f7:b8:f8:da:71:
                    ee:eb:bd:57:42:0b:1d:e2:e7:45:1b:82:df:06:0c:
                    90:2e:85:7f:71:82:ff:e6:e0:c4:ae:a4:7f:4a:d4:
                    e2:8e:34:b4:73:8b:27:4a:2f:f9:69:66:5e:3e:f5:
                    51:fa:5a:8d:6c:a3:16:76:49:a7:db:c6:b4:67:da:
                    82:67:b0:21:3a:c4:53:b4:cb:30:79:f5:1d:40:71:
                    0d:b0:41:85:57:fc:30:29:e6:26:4d:5a:15:e9:90:
                    f7:bc:b3:40:85:d5:e8:cf:90:51:27:93:52:26:11:
                    88:c3:c3:92:f8:18:ca:e5:7e:ce:91:4d:59:f6:20:
                    43:75:a8:2d:e2:16:f4:d2:8f:17:c9:36:0d:8f:f2:
                    3e:cc:e7:e7:b7:88:85:b4:08:3e:24:8a:dd:b4:fd:
                    28:7e:d9:19:36:36:54:59:50:8a:6e:42:2e:c4:9f:
                    e2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2B:ED:EF:BC:43:74:5B:51:70:C6:C1:29:F9:A5:91:D7:76:08:20
            X509v3 Authority Key Identifier:
                keyid:18:1D:49:68:B5:50:98:19:52:C3:18:30:1A:B2:D4:C1:0F:7F:34:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/181D4968B550981952C318301AB2D4C10F7F34DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aa9ade5e-6ff6-4ae5-8d5e-5db3c9de94dc/90b69286d112f5d8ed34cf2af50de576dcb94d189a2ac9e192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186e4f35a005144/0/323630323a3239363a3132333a3a2f34382d3438203d3e20343030383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:296:123::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:47:6a:e0:cb:94:4a:56:32:a4:68:7a:72:55:0e:43:8d:03:
         b8:2e:a7:26:0d:b3:72:e0:1c:92:e9:6d:44:5d:3a:84:90:7c:
         be:5b:6e:44:da:e1:64:0c:9b:e1:a1:3e:6f:02:ea:4e:de:88:
         2d:0d:33:5b:c6:52:d9:93:c5:4b:a5:39:27:0e:1d:2f:4c:15:
         f5:81:a0:88:ad:c1:4d:c7:e8:81:46:b8:e9:76:7c:4c:97:a7:
         40:3c:e8:39:86:65:c5:0b:95:b1:2a:6f:1d:f2:95:cb:f8:7a:
         28:d7:67:2e:87:34:18:cb:83:e0:8b:dd:7f:e5:de:d7:ab:cd:
         f0:01:e8:08:35:8f:70:74:8b:a3:8f:78:cd:91:b8:27:7c:0e:
         2d:8f:d6:22:d5:b2:0f:49:72:db:73:f6:fd:09:3b:84:e6:fc:
         3d:6f:12:03:e9:52:5b:22:74:ae:2f:10:5c:dc:c0:49:d4:e6:
         0d:68:9d:dd:a2:1b:aa:95:f5:da:9e:c6:d5:d2:ca:52:ab:96:
         15:4e:a0:a8:91:03:d8:40:b9:33:12:18:07:8b:eb:f0:34:7f:
         e6:25:6f:a0:91:a4:62:cd:2a:8c:86:9b:09:5a:69:59:d6:99:
         c0:84:c7:73:8a:f6:c2:f2:4b:57:41:33:ea:85:f3:be:0a:58:
         36:f8:ae:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----