Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e20313532333638.roa
File:                     3136372e3235332e34372e302f32342d3234203d3e20313532333638.roa (raw, json)
Hash identifier:          l9YUOkcChWmS65jkIl9PT9Q7rEB74v2ld7Xvnj6wn5Y=
Subject key identifier:   70:4A:F6:89:10:49:D3:64:1E:21:D3:B7:4E:B6:23:BE:86:8F:54:5D
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       7BC09156D3B3FB8C4EBF049F68F426D054CD9B46
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e20313532333638.roa
Signing time:             Sun 29 Mar 2026 03:27:33 +0000
ROA not before:           Sun 29 Mar 2026 03:22:33 +0000
ROA not after:            Sun 28 Mar 2027 03:27:33 +0000
asID:                     152368
IP address blocks:        167.253.47.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c0:91:56:d3:b3:fb:8c:4e:bf:04:9f:68:f4:26:d0:54:cd:9b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 29 03:22:33 2026 GMT
            Not After : Mar 28 03:27:33 2027 GMT
        Subject: CN=704AF6891049D3641E21D3B74EB623BE868F545D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:c8:32:9a:97:37:07:8f:fc:5d:90:5b:8f:
                    f4:2e:1f:89:37:84:39:ed:40:cb:d1:11:dc:a3:6a:
                    24:b8:cd:bd:8f:bd:90:2b:4f:32:e0:26:ef:bd:47:
                    c5:2d:26:0f:93:6e:80:8d:65:39:96:47:e8:e3:fd:
                    8f:e5:06:14:05:54:58:e0:84:3a:ca:2c:2d:8a:f1:
                    32:e9:4d:9f:86:24:45:f9:57:02:8b:93:0f:8e:61:
                    0a:ef:ad:01:c2:e4:ad:bc:75:6e:29:24:48:18:ba:
                    8e:be:18:be:98:81:23:a3:52:e5:14:2e:34:47:d0:
                    df:51:0f:76:f2:41:82:dd:c4:a6:79:ec:37:e9:ac:
                    d1:97:42:c1:a6:f7:a5:b7:ac:dc:df:d3:43:6c:f6:
                    5c:b7:ac:2e:9b:bf:2a:d4:1f:32:b6:37:85:91:b5:
                    45:a0:3b:b5:15:b5:c9:d4:5a:a1:60:96:a0:3c:f6:
                    b4:6b:89:f3:59:86:e3:29:2e:9e:d2:0c:93:f6:ca:
                    9f:d7:d0:86:c4:ef:46:c5:08:54:62:f7:6a:66:7d:
                    73:30:99:e4:b3:d6:d9:ff:3b:89:8f:86:99:f6:ab:
                    44:66:7d:4d:f9:6c:46:c8:5c:9a:7f:96:10:34:ca:
                    05:f1:35:79:59:43:1d:c3:90:5f:0f:4c:84:d9:f2:
                    99:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4A:F6:89:10:49:D3:64:1E:21:D3:B7:4E:B6:23:BE:86:8F:54:5D
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:8c:e3:78:fb:17:e9:e6:4c:8d:81:3b:83:97:4f:a3:62:b4:
         c7:07:74:f7:cc:7f:bd:93:17:a7:f5:a3:20:5e:72:69:88:fd:
         8f:ef:70:f3:bf:6a:2c:2e:38:01:93:52:3d:6d:f7:89:5f:93:
         86:4f:ee:99:cd:59:cc:10:8d:41:f8:d1:46:9d:11:4b:29:77:
         eb:8b:f2:8f:ca:3c:eb:ec:87:49:23:df:6f:b6:e2:82:4d:1b:
         87:e0:e4:d3:8d:a1:e9:d8:cf:c2:f8:ee:49:a7:80:d3:60:4c:
         64:d4:24:d3:c5:c0:ff:8d:fd:22:fa:f6:2a:7e:86:13:e4:48:
         0b:88:82:10:7d:45:dd:65:e6:ec:33:3b:2c:a8:a9:98:d3:9b:
         8b:b0:54:c6:7e:76:06:bb:92:ee:b9:2e:8a:69:c4:07:5c:a4:
         0c:d2:ce:e7:45:81:0d:43:64:8e:4f:d7:b6:87:3c:a6:86:15:
         e1:a2:92:16:a9:70:13:16:b5:02:c2:54:9a:da:fa:cd:ae:d9:
         f1:95:fe:6f:f3:69:1b:fa:87:b3:f7:6a:92:1a:24:23:4d:f8:
         13:0f:f8:aa:ad:20:14:69:c8:6d:e0:41:7b:67:34:9b:c8:9e:
         34:27:c5:90:8a:31:03:c4:aa:65:09:95:56:c4:2a:fc:f0:e2:
         1b:15:1c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:29:01 2026 by rpki-client