Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203530313034.roa
File:                     3136372e3235332e34372e302f32342d3234203d3e203530313034.roa (raw, json)
Hash identifier:          d+wwMYVF+4Pd87D3BGKKPMtrLKEeKII17esmgPc0g4E=
Subject key identifier:   28:5E:93:82:F3:D6:4A:65:39:68:54:43:B5:F2:C1:8D:D0:97:1F:58
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       6EFA8EFEC418E5964564789D7AD7F01296B06B32
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203530313034.roa
Signing time:             Sun 29 Mar 2026 03:27:34 +0000
ROA not before:           Sun 29 Mar 2026 03:22:34 +0000
ROA not after:            Sun 28 Mar 2027 03:27:34 +0000
asID:                     50104
IP address blocks:        167.253.47.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fa:8e:fe:c4:18:e5:96:45:64:78:9d:7a:d7:f0:12:96:b0:6b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 29 03:22:34 2026 GMT
            Not After : Mar 28 03:27:34 2027 GMT
        Subject: CN=285E9382F3D64A6539685443B5F2C18DD0971F58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:83:e6:68:f6:0c:61:de:72:6f:91:37:56:87:
                    42:88:33:06:36:9d:f3:a5:cd:ee:dd:87:5f:fe:f5:
                    8e:bf:ef:b1:48:c1:d1:52:3f:e1:73:8f:4e:af:07:
                    e6:96:57:6a:cb:9d:84:b3:cf:76:58:71:37:51:14:
                    5f:d8:86:88:ca:92:1f:52:07:6e:b7:ea:be:3a:a1:
                    a3:91:8b:3d:f1:4c:52:88:d5:46:37:00:30:58:de:
                    2a:f3:d6:31:40:25:6c:75:c8:4d:89:0e:f0:c1:c1:
                    d6:78:df:c4:29:b4:1f:82:ec:51:45:8a:05:c0:74:
                    07:86:ad:d4:1c:e3:51:4f:e3:00:c3:9c:84:4a:8e:
                    c4:1d:d5:f4:10:b6:ba:b9:22:32:58:4f:4c:d2:c2:
                    18:fa:dd:f2:7c:35:d2:9f:06:87:53:5a:25:e7:92:
                    6d:3c:a9:b5:c0:32:a3:e0:5a:d2:df:05:bb:31:36:
                    97:6f:70:ac:5e:0e:f5:50:e9:12:e3:5f:49:83:df:
                    f7:03:df:53:b6:4e:8d:a5:fb:a2:06:a6:8f:ba:ce:
                    5d:6a:34:fe:08:92:8d:78:c2:2f:49:c2:23:e3:e8:
                    13:74:dd:2e:4a:7b:ce:0a:a8:a8:fa:d4:5e:b3:b6:
                    26:85:f9:a8:f3:7a:08:ee:ea:4b:25:e9:ef:e2:c9:
                    1d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5E:93:82:F3:D6:4A:65:39:68:54:43:B5:F2:C1:8D:D0:97:1F:58
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/3136372e3235332e34372e302f32342d3234203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:53:4e:e3:40:70:46:99:3f:22:2a:c1:31:a9:15:e6:3a:71:
         39:ba:bb:5e:1a:f2:bd:ed:ba:e6:db:07:11:4f:e1:c5:18:de:
         68:7c:9c:c6:0a:33:14:f1:d0:88:bf:71:c7:e6:f5:71:66:a8:
         4e:09:93:37:1b:cb:40:3d:e7:ab:84:6f:54:d5:3b:f3:93:d2:
         92:98:0b:01:41:35:84:4c:3d:b4:bf:49:9c:2c:81:df:76:3c:
         a3:c9:3d:02:11:62:9d:1d:84:ea:8f:5d:f0:c5:8a:57:b9:4d:
         95:d5:41:6d:eb:03:a1:3d:4d:97:46:08:aa:cb:4c:24:ff:69:
         dd:70:e9:82:42:3f:4e:2b:f2:d0:48:bd:a4:5d:ce:ef:0d:38:
         6f:fb:72:f2:39:b7:b5:e0:31:ac:d4:1d:eb:02:37:48:c7:c2:
         fb:b6:3d:e0:66:90:97:0f:21:42:4f:17:70:75:f5:df:2e:2b:
         01:9c:d2:2d:b0:ba:da:ca:37:b9:5c:35:36:9d:c2:f7:8c:bf:
         01:4f:5a:68:46:a5:cc:0a:5e:fb:27:83:f5:0e:dd:ba:4a:eb:
         f2:d4:b3:b2:ac:f8:c6:6f:b9:fe:53:2d:db:02:e8:8c:e7:bf:
         a7:01:ca:74:5e:8d:4c:96:20:c8:f0:ef:1f:9e:58:61:1f:9b:
         52:31:da:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:59:52 2026 by rpki-client