Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203139353231.roa
File:                     32332e3134342e3136392e302f32342d3234203d3e203139353231.roa (raw, json)
Hash identifier:          ZDILQ/c+rbfOz3daOfSLiuiAPMUbRCSfInI+JppvhKs=
Subject key identifier:   73:67:B4:6D:5A:62:EB:C3:72:4D:34:A9:F3:EA:B2:90:BC:FF:3B:B4
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       0AA9E83B4B8262B3B4FF5DD981988BA3E8BBB8A7
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203139353231.roa
Signing time:             Sun 29 Mar 2026 03:27:33 +0000
ROA not before:           Sun 29 Mar 2026 03:22:33 +0000
ROA not after:            Sun 28 Mar 2027 03:27:33 +0000
asID:                     19521
IP address blocks:        23.144.169.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:a9:e8:3b:4b:82:62:b3:b4:ff:5d:d9:81:98:8b:a3:e8:bb:b8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 29 03:22:33 2026 GMT
            Not After : Mar 28 03:27:33 2027 GMT
        Subject: CN=7367B46D5A62EBC3724D34A9F3EAB290BCFF3BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:ae:00:35:1b:ad:1b:87:9d:75:19:a9:be:
                    49:54:92:7f:94:e0:43:51:2c:1d:1e:ce:00:7c:44:
                    f7:cc:c6:2d:3e:28:cc:8e:48:cd:25:43:85:31:4c:
                    99:d5:a5:69:4e:29:57:89:07:83:41:74:03:75:97:
                    e3:fd:67:dc:ac:2d:74:0f:66:5b:46:15:fb:85:39:
                    bd:5d:5c:11:67:e8:be:07:7b:ff:dc:57:1d:74:ef:
                    92:45:dd:fa:2e:a6:58:68:72:14:ea:81:96:f8:01:
                    82:be:0f:5f:99:08:ba:b1:60:bc:cf:a6:f1:e6:12:
                    f0:4b:61:16:28:19:bc:d9:52:33:59:4f:bb:a1:d9:
                    58:a4:a0:8f:41:cb:cc:69:e6:0c:05:b6:2b:f0:d6:
                    16:4d:6a:5f:66:21:b9:86:a0:6e:64:1c:bd:b1:30:
                    75:2f:b6:c8:15:d9:ac:27:22:a1:b0:c3:fd:39:38:
                    22:80:f7:88:3d:b9:15:93:f3:61:8f:7b:4a:21:fd:
                    76:de:53:30:16:43:9d:ae:b6:97:4f:23:85:46:28:
                    87:4b:0e:f5:ba:34:d0:55:1a:39:cc:d6:b1:38:70:
                    f2:1e:d3:68:ca:80:0d:61:76:6b:eb:b8:81:33:04:
                    ff:87:5a:fd:c7:26:e6:52:f9:9a:5a:39:ec:8f:a0:
                    92:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:67:B4:6D:5A:62:EB:C3:72:4D:34:A9:F3:EA:B2:90:BC:FF:3B:B4
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203139353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:35:f3:d8:ca:2e:09:73:cf:71:3e:64:be:9b:8f:0c:36:e9:
         76:dd:99:11:1b:ae:01:3b:29:98:0d:86:16:38:6c:a8:64:41:
         ce:65:be:bb:ce:07:3f:a8:58:4e:ed:ee:5f:49:94:1a:a7:ff:
         a1:9d:b3:7b:7e:5c:6b:d1:84:79:55:c8:c3:59:a1:27:aa:c3:
         fa:3f:78:47:d2:01:b8:27:b4:b9:5f:51:93:6e:7c:9c:88:6e:
         b2:f9:ca:ab:f0:5f:12:ac:da:25:19:39:05:ad:4f:64:ed:5b:
         ac:ea:08:bb:54:89:fb:a6:41:0b:26:01:09:7c:e0:d0:85:fe:
         2b:aa:eb:32:22:fc:41:37:02:43:91:b1:a2:78:e2:5f:bb:21:
         92:66:4e:92:bc:55:b6:c4:61:49:8d:64:55:f6:b8:b4:9b:52:
         80:2a:b0:7e:73:0b:61:96:19:85:16:8c:d9:7b:4d:7e:47:2f:
         cc:d8:8c:ec:c5:b2:b3:3c:56:bf:58:83:21:99:ac:3a:89:ab:
         b2:ee:56:33:b7:e0:21:38:d2:4c:51:b5:7f:99:12:8e:a9:95:
         51:23:84:14:f0:ac:4c:56:af:14:cf:3a:eb:94:bb:b6:7b:b0:
         c5:13:9e:97:07:6a:54:00:9c:1f:b2:4b:f6:a9:5b:40:77:3f:
         8b:b6:16:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:39:28 2026 by rpki-client