Route Origin Authorization
$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/323630373a613534303a393830303a3a2f33382d3338203d3e20333938393931.roa
File: 323630373a613534303a393830303a3a2f33382d3338203d3e20333938393931.roa (raw, json)
Hash identifier: 9E7AbM9qYRRpXsKqyEQ0p9WTb6RsizzpFmVnSEfhDJg=
Subject key identifier: EC:E4:29:2F:5E:B8:A0:37:9D:D0:30:F5:34:12:0C:4E:A1:FB:4C:BF
Certificate issuer: /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial: 3CF756FB3AB10E03343784837C24B6C11E44AE39
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access: rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/323630373a613534303a393830303a3a2f33382d3338203d3e20333938393931.roa
Signing time: Tue 10 Feb 2026 20:06:51 +0000
ROA not before: Tue 10 Feb 2026 20:01:51 +0000
ROA not after: Tue 09 Feb 2027 20:06:51 +0000
asID: 398991
IP address blocks: 2607:a540:9800::/38 maxlen: 38
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:f7:56:fb:3a:b1:0e:03:34:37:84:83:7c:24:b6:c1:1e:44:ae:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Validity
Not Before: Feb 10 20:01:51 2026 GMT
Not After : Feb 9 20:06:51 2027 GMT
Subject: CN=ECE4292F5EB8A0379DD030F534120C4EA1FB4CBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:6d:b4:45:7f:43:4b:eb:80:a6:63:ee:ea:
f9:27:78:ce:33:76:dd:69:be:13:92:ce:fd:88:22:
df:67:28:46:cd:2e:83:8b:b8:43:28:93:48:d5:df:
f3:c5:1d:64:90:21:39:63:4c:06:4b:71:38:7c:eb:
58:31:3c:10:1d:84:56:9a:f1:7b:6e:81:6a:4d:69:
3e:12:ad:8d:b2:bc:ec:64:c7:5d:fb:0c:ed:11:e1:
53:73:b8:ba:9a:aa:3e:44:9b:ce:05:2c:2b:ee:a7:
26:50:68:f1:c2:17:03:ad:fa:d8:8f:2b:fc:84:ae:
68:8e:58:2f:8e:32:09:84:0f:73:e0:18:85:ad:d9:
90:2a:01:03:2b:23:f7:65:24:4c:1f:99:2a:77:f2:
24:dc:c9:27:63:7e:ca:55:de:30:db:1d:ae:50:27:
13:c0:5d:37:1d:e1:04:e6:b4:8d:38:2b:ac:e5:dc:
4c:b8:5c:3f:ae:57:a6:74:85:83:af:e2:59:80:93:
75:35:db:70:6f:53:46:33:5a:f1:d3:1a:4f:96:a9:
39:64:97:9c:4f:39:d6:42:72:d0:f5:86:7a:64:c8:
a0:6b:2e:29:d5:0f:b9:e1:14:38:74:83:73:56:ed:
fb:5e:40:f3:6b:13:44:75:11:12:99:b5:20:b5:f5:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E4:29:2F:5E:B8:A0:37:9D:D0:30:F5:34:12:0C:4E:A1:FB:4C:BF
X509v3 Authority Key Identifier:
keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/323630373a613534303a393830303a3a2f33382d3338203d3e20333938393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2607:a540:9800::/38
Signature Algorithm: sha256WithRSAEncryption
57:ab:aa:e3:51:17:de:cd:65:b6:f3:36:92:60:5e:4c:ec:bd:
15:49:e6:6b:46:a9:ea:5c:6a:5a:0f:7f:9a:b6:bb:a0:bc:f0:
b1:dc:6e:e0:df:43:97:f6:2d:2c:81:ca:eb:cf:5a:53:f1:ae:
e7:93:0b:e6:b9:84:ff:89:23:57:47:6a:cf:a1:bc:f7:28:f0:
62:72:c1:e6:a3:45:f3:7b:31:87:5d:6b:fc:12:47:9c:16:b4:
b0:a5:12:03:e7:bf:f7:a5:45:fe:68:a0:5e:06:78:35:40:b5:
30:99:1d:39:17:c0:87:d1:7e:4e:6b:93:08:43:c7:d2:35:ed:
b1:2b:b4:e9:ad:27:b0:d4:94:62:16:38:b5:84:0a:c2:32:19:
a8:65:5c:87:c0:81:93:8b:3e:04:aa:48:ab:f9:87:f3:1e:94:
f7:0c:79:e1:5e:93:8e:bb:46:86:37:ec:d0:63:c0:9f:56:14:
67:a7:9e:26:a5:91:84:ec:70:f0:0a:8e:a2:48:59:17:55:e9:
94:f3:70:fa:bd:2f:e9:43:f1:60:ee:87:68:b7:85:ba:2e:93:
ed:8b:7a:f0:08:92:08:3a:83:35:0f:06:79:6a:d6:cf:6b:0c:
bc:59:88:6b:e1:07:74:ac:82:f0:01:c7:64:c6:d1:3c:dd:29:
1c:27:55:af
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIUPPdW+zqxDgM0N4SDfCS2wR5ErjkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzZmYzAzYzJlMTE2NzEyYzIzMjE0OTcxMGRlYTFiOTU0
OTdmMDIwMDM4MWZjMjg3NWMwHhcNMjYwMjEwMjAwMTUxWhcNMjcwMjA5MjAwNjUx
WjAzMTEwLwYDVQQDEyhFQ0U0MjkyRjVFQjhBMDM3OUREMDMwRjUzNDEyMEM0RUEx
RkI0Q0JGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0pttEV/Q0vr
gKZj7ur5J3jOM3bdab4Tks79iCLfZyhGzS6Di7hDKJNI1d/zxR1kkCE5Y0wGS3E4
fOtYMTwQHYRWmvF7boFqTWk+Eq2NsrzsZMdd+wztEeFTc7i6mqo+RJvOBSwr7qcm
UGjxwhcDrfrYjyv8hK5ojlgvjjIJhA9z4BiFrdmQKgEDKyP3ZSRMH5kqd/Ik3Mkn
Y37KVd4w2x2uUCcTwF03HeEE5rSNOCus5dxMuFw/rlemdIWDr+JZgJN1Ndtwb1NG
M1rx0xpPlqk5ZJecTznWQnLQ9YZ6ZMigay4p1Q+54RQ4dINzVu37XkDzaxNEdRES
mbUgtfXpVQIDAQABo4ICvjCCArowHQYDVR0OBBYEFOzkKS9euKA3ndAw9TQSDE6h
+0y/MB8GA1UdIwQYMBaAFOFUCMMQsG6ale0Szi7pMytywtnTMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzViYzg3Mjg5NDczYjQzYzVhNmNlZTkxOWU2ZGViMDkwLzAv
RTE1NDA4QzMxMEIwNkU5QTk1RUQxMkNFMkVFOTMzMkI3MkMyRDlEMy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3
ZTM0M2Y4L2Y3MGM5NjEzLTdkZWYtNGJjNC1iODYwLWY0ZTUzNzRkNzZhNy8zNmZj
MDNjMmUxMTY3MTJjMjMyMTQ5NzEwZGVhMWI5NTQ5N2YwMjAwMzgxZmMyODc1Yy5j
ZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS81YmM4NzI4OTQ3M2I0M2M1YTZjZWU5
MTllNmRlYjA5MC8wLzMyMzYzMDM3M2E2MTM1MzQzMDNhMzkzODMwMzAzYTNhMmYz
MzM4MmQzMzM4MjAzZDNlMjAzMzM5MzgzOTM5MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgImB6VAmDAN
BgkqhkiG9w0BAQsFAAOCAQEAV6uq41EX3s1ltvM2kmBeTOy9FUnma0ap6lxqWg9/
mra7oLzwsdxu4N9Dl/YtLIHK689aU/Gu55ML5rmE/4kjV0dqz6G89yjwYnLB5qNF
83sxh11r/BJHnBa0sKUSA+e/96VF/migXgZ4NUC1MJkdORfAh9F+TmuTCEPH0jXt
sSu06a0nsNSUYhY4tYQKwjIZqGVch8CBk4s+BKpIq/mH8x6U9wx54V6TjrtGhjfs
0GPAn1YUZ6eeJqWRhOxw8AqOokhZF1XplPNw+r0v6UPxYO6HaLeFui6T7Yt68AiS
CDqDNQ8GeWrWz2sMvFmIa+EHdKyC8AHHZMbRPN0pHCdVrw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:16:04 2026 by rpki-client