Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230382e3132322e31362e302f32332d3332203d3e20333938393931.roa
File: 3230382e3132322e31362e302f32332d3332203d3e20333938393931.roa (raw, json)
Hash identifier: 076uXTAYhBMhoVBg7qkkZqNptg0zbSYSAJCVQBArqd8=
Subject key identifier: 04:2E:A5:DF:B5:8D:98:E7:76:D9:1D:9F:E3:7B:31:8B:EA:0E:7A:43
Certificate issuer: /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial: 4E398CF0FADE272EF503E446130F01D44824EBAF
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230382e3132322e31362e302f32332d3332203d3e20333938393931.roa
Signing time: Tue 10 Feb 2026 20:07:00 +0000
ROA not before: Tue 10 Feb 2026 20:02:00 +0000
ROA not after: Tue 09 Feb 2027 20:07:00 +0000
asID: 398991
IP address blocks: 208.122.16.0/23 maxlen: 32
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:39:8c:f0:fa:de:27:2e:f5:03:e4:46:13:0f:01:d4:48:24:eb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Validity
Not Before: Feb 10 20:02:00 2026 GMT
Not After : Feb 9 20:07:00 2027 GMT
Subject: CN=042EA5DFB58D98E776D91D9FE37B318BEA0E7A43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2f:b3:62:b0:de:3b:96:b6:a4:15:68:b6:5f:
4b:f3:46:19:00:be:75:95:0b:ae:7f:ca:65:c1:99:
d1:81:75:f1:e4:76:a9:74:da:9a:b9:16:77:47:1f:
56:58:c8:37:f8:c7:c3:44:5b:cf:52:53:86:56:3f:
eb:d9:b1:6e:fa:ea:1f:d3:bf:ae:56:ff:f6:62:21:
80:dd:06:d3:c8:e3:39:21:31:cd:cd:b0:62:e2:e6:
c7:f7:87:e7:3d:82:ac:12:85:ab:0f:96:60:19:3e:
50:e8:89:b4:1e:04:e9:31:7e:f7:33:33:33:f3:78:
fe:f3:43:5c:d5:5d:59:d9:d0:bd:76:cf:33:10:d3:
7a:d3:20:99:d8:d6:bf:55:2e:af:22:19:34:59:c0:
34:ee:64:e0:d6:2c:8b:bc:86:d3:68:50:ae:8e:45:
df:3e:e5:19:56:50:4a:be:e6:af:f5:bf:b9:17:b9:
6b:ed:86:d0:f4:2f:f7:6b:43:73:e9:b7:e7:0c:dd:
c0:e1:39:a1:a8:62:7e:ca:41:ed:b5:54:3f:a9:92:
bc:11:ef:07:0f:4d:d4:15:b1:a6:5b:cd:96:93:9d:
ad:de:79:99:90:60:b6:72:68:81:0c:b7:fc:6c:3c:
5a:9b:76:ae:39:ae:5c:35:b5:13:a8:46:dc:18:55:
b5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:2E:A5:DF:B5:8D:98:E7:76:D9:1D:9F:E3:7B:31:8B:EA:0E:7A:43
X509v3 Authority Key Identifier:
keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230382e3132322e31362e302f32332d3332203d3e20333938393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
208.122.16.0/23
Signature Algorithm: sha256WithRSAEncryption
84:20:dd:da:21:44:c1:4f:dc:db:6f:de:7b:6c:da:98:98:0c:
30:a9:b4:1a:02:a7:03:44:b3:67:cd:9d:f5:a7:94:2f:ee:35:
2c:02:16:58:ee:35:87:4e:d8:20:3d:05:a5:03:ac:8d:72:2b:
42:a0:dc:7c:8c:d1:23:a5:38:21:cf:ad:51:63:80:e8:28:a1:
cb:cd:24:a6:7c:a2:56:bb:df:8d:60:31:9c:4c:3f:28:5c:09:
f6:0e:b5:b9:c0:77:3f:2e:61:c5:3a:4f:98:14:0e:74:50:64:
56:14:79:a2:8a:56:fc:f7:ff:76:2e:d3:ec:63:5d:79:99:ce:
42:7f:cf:15:e4:37:5d:b9:f5:59:7b:96:28:82:92:f8:44:80:
c6:b6:da:25:e9:1e:84:ae:82:11:ca:ee:12:b9:d5:77:00:a5:
6b:3e:dc:6d:e9:f2:55:73:c0:82:4f:6c:14:aa:df:6d:05:f5:
5c:d4:b2:e2:4f:b9:5c:82:4d:e8:cb:25:69:87:a8:d3:0e:0b:
c3:d1:f7:31:52:3b:97:73:db:40:51:1d:8e:b8:1f:3d:92:fc:
4d:f1:28:1c:77:77:81:68:0a:a9:44:33:a2:02:4c:68:43:f5:
6f:8b:bc:17:aa:4e:d8:a0:7e:c8:99:59:4b:08:52:d3:12:dd:
9e:53:b2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:16:08 2026 by rpki-client