Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230382e3132322e31382e302f32332d3332203d3e20333938393931.roa
File:                     3230382e3132322e31382e302f32332d3332203d3e20333938393931.roa (raw, json)
Hash identifier:          hSBSqIF6EFDXX9JtKzSZsYvM3lb82HOBH1+G6FNoidI=
Subject key identifier:   6C:57:66:47:CC:10:98:01:53:DD:B4:5C:09:61:2C:F6:A8:02:8A:51
Certificate issuer:       /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial:       47DCE0CD4BE100687EAAEC06D47FBFBBA7B7679C
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230382e3132322e31382e302f32332d3332203d3e20333938393931.roa
Signing time:             Fri 13 Feb 2026 13:42:00 +0000
ROA not before:           Fri 13 Feb 2026 13:37:00 +0000
ROA not after:            Fri 12 Feb 2027 13:42:00 +0000
asID:                     398991
IP address blocks:        208.122.18.0/23 maxlen: 32
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:dc:e0:cd:4b:e1:00:68:7e:aa:ec:06:d4:7f:bf:bb:a7:b7:67:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
        Validity
            Not Before: Feb 13 13:37:00 2026 GMT
            Not After : Feb 12 13:42:00 2027 GMT
        Subject: CN=6C576647CC10980153DDB45C09612CF6A8028A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cf:b3:fe:4c:d9:81:78:61:25:c9:27:f6:ae:
                    5c:6f:3e:ca:e5:8a:e5:31:c2:44:30:c6:41:29:c8:
                    ee:98:70:59:ad:8b:b9:99:ef:49:74:5e:ac:c5:52:
                    fb:06:84:b9:c6:4c:34:bf:78:05:28:f0:c1:69:5e:
                    03:4a:44:1b:69:bf:fc:38:02:35:9a:5e:c1:90:d7:
                    91:e6:56:73:f4:6a:b4:8d:eb:27:e0:32:7d:87:ad:
                    a6:78:fd:73:23:10:73:52:08:c4:5d:95:2e:9c:5c:
                    aa:ac:a9:bb:a4:bb:b2:71:e8:3f:49:5f:da:ad:e2:
                    b9:71:6b:89:4a:05:21:da:35:a3:0d:1f:5b:dd:71:
                    ea:5d:63:df:ce:3f:77:24:f8:5b:46:a4:4b:b9:c6:
                    f4:a1:df:4c:52:b0:ab:ea:5c:75:a3:ac:1e:07:b8:
                    76:05:ac:dd:0a:27:73:cf:e0:10:26:07:a2:ff:9c:
                    7e:5a:5b:73:28:75:0e:1b:a0:a7:1f:f9:40:9b:ad:
                    98:63:54:37:74:ef:7e:c6:e9:1b:06:00:b3:48:1d:
                    c1:be:b1:2d:73:64:5b:76:b3:39:f4:4d:b8:86:e7:
                    a4:71:20:65:00:36:ed:d0:09:0c:1d:ad:6f:eb:9e:
                    40:7c:76:e3:66:59:ee:87:31:a5:92:1a:b6:bf:f2:
                    4c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:57:66:47:CC:10:98:01:53:DD:B4:5C:09:61:2C:F6:A8:02:8A:51
            X509v3 Authority Key Identifier:
                keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230382e3132322e31382e302f32332d3332203d3e20333938393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.122.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:c5:ef:3a:51:74:86:f1:25:9d:28:22:4a:41:eb:38:00:13:
         71:0a:8d:f2:be:ec:81:ff:15:0a:e2:15:e5:fd:11:81:b8:4d:
         82:de:da:35:0e:bc:c7:e7:5e:dd:aa:af:5e:da:18:61:0a:49:
         4a:cd:58:0a:48:03:c2:d4:63:98:5a:b7:b3:7c:a1:21:dd:22:
         91:3f:c1:8e:07:aa:c5:a0:8f:de:75:49:53:e0:7f:3c:e5:77:
         b5:c1:6c:11:d3:0c:68:3f:99:1c:c0:eb:4c:2e:b4:89:55:d8:
         41:51:0a:fb:55:97:2b:32:cf:9f:e8:35:ed:50:f2:56:3d:9c:
         ca:87:cb:57:58:2a:92:16:90:f4:46:14:99:62:84:33:6e:77:
         61:8f:2e:34:69:d7:30:55:cb:57:1e:7d:0f:3e:a6:83:b6:49:
         cd:a6:18:ec:61:ad:22:ae:c7:4e:39:72:44:86:c6:b9:32:fc:
         b3:52:62:b5:f1:c5:84:22:f2:03:70:14:f3:a2:83:83:f5:33:
         86:34:84:5c:7a:24:d7:d0:73:28:47:79:7b:b2:41:58:a1:34:
         b2:e6:1c:21:82:eb:db:71:48:5f:00:ff:1b:64:b0:95:f4:23:
         a4:b4:66:4f:c1:b0:15:a7:43:bd:c2:7c:7b:a4:f4:ac:65:93:
         e1:de:f1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----