Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203530313034.roa
File:                     32332e3134342e3136392e302f32342d3234203d3e203530313034.roa (raw, json)
Hash identifier:          jQ013nV7tY9uzgJnugx4KzCUoxjYSemYAPSmjI9DN3Q=
Subject key identifier:   D8:46:ED:C6:D0:96:59:B1:5F:FD:E9:8E:FD:62:4A:78:51:A2:B5:53
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       5C58906EAC296EF04C6F187E835E4FE343EE302D
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203530313034.roa
Signing time:             Sun 29 Mar 2026 03:27:33 +0000
ROA not before:           Sun 29 Mar 2026 03:22:33 +0000
ROA not after:            Sun 28 Mar 2027 03:27:33 +0000
asID:                     50104
IP address blocks:        23.144.169.0/24 maxlen: 24
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:58:90:6e:ac:29:6e:f0:4c:6f:18:7e:83:5e:4f:e3:43:ee:30:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 29 03:22:33 2026 GMT
            Not After : Mar 28 03:27:33 2027 GMT
        Subject: CN=D846EDC6D09659B15FFDE98EFD624A7851A2B553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:23:1a:ae:0a:02:bb:5a:45:ee:30:f0:9a:e9:
                    64:c0:35:39:59:fa:b5:69:09:b8:f3:04:86:b4:fe:
                    7b:46:34:f4:44:fe:c1:8b:27:dc:fd:a0:f4:0e:dc:
                    69:b0:75:75:2f:8d:12:b4:1c:e8:cd:c0:1e:a4:96:
                    63:d7:73:3b:06:03:99:cb:59:19:b0:ca:9d:3d:c2:
                    13:13:bb:7e:86:76:b7:d9:82:59:ff:0e:7c:40:f3:
                    97:fa:6a:c2:77:c4:ed:43:21:39:0b:fe:34:61:aa:
                    5f:4d:79:4a:e4:18:2f:ad:f7:de:f0:81:fa:35:e3:
                    3b:c3:f8:96:57:0a:fe:28:81:29:67:61:e1:60:4e:
                    6b:17:3f:b7:d9:50:74:a6:83:5a:54:13:4b:53:64:
                    82:51:8c:ed:10:2b:85:9b:cb:0c:53:c0:e3:7a:c2:
                    e7:a8:59:f5:80:80:1c:6f:f7:6c:cc:9f:95:97:6d:
                    b1:89:21:81:74:2f:de:b1:3b:63:69:90:f1:b1:50:
                    36:25:9c:d5:5f:65:1e:9c:f0:89:cf:e3:b8:77:ee:
                    6d:3e:0b:07:bf:38:ce:f2:87:ef:47:d3:97:c8:ce:
                    de:50:8d:bb:de:63:b2:1a:90:83:ef:07:57:d8:b7:
                    db:c4:7d:e6:90:61:f9:81:01:00:73:8b:f2:13:b1:
                    16:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:46:ED:C6:D0:96:59:B1:5F:FD:E9:8E:FD:62:4A:78:51:A2:B5:53
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/32332e3134342e3136392e302f32342d3234203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:bd:4d:d9:41:7f:20:7f:f5:c7:b9:c2:5d:cd:8a:c0:2b:86:
         ae:f0:4e:86:c9:24:fc:8b:3e:85:98:46:0a:02:d0:0f:c9:06:
         9e:b6:24:8d:aa:24:f1:b3:47:7d:18:c8:ce:ba:10:bf:d9:78:
         32:dc:62:83:62:d2:e2:dc:97:37:5f:18:6e:f2:f1:7b:72:89:
         58:c0:c0:ac:ac:b5:4b:56:73:01:73:2d:1c:33:ea:d9:34:6a:
         0f:3c:10:a0:d1:36:13:f2:da:46:d7:57:27:16:59:67:99:c9:
         6d:3a:19:c5:71:f8:b0:0a:33:32:46:91:05:a1:fc:c1:9a:7f:
         e5:9d:33:f3:a9:86:ea:ac:6f:19:23:08:71:5a:45:8b:9e:61:
         27:1f:5e:f9:19:10:16:62:28:a5:64:f6:a4:bc:5c:b1:41:d9:
         36:92:51:cd:ee:a5:28:da:50:c2:f3:b7:ce:87:70:c6:4d:87:
         37:ba:c7:6c:8e:c5:29:73:78:f1:a3:80:99:aa:d4:ef:e5:0f:
         e2:d6:e0:a9:8a:ef:a3:ac:27:9d:c2:4b:87:4e:38:87:4d:f9:
         95:5d:14:82:bf:a3:98:5a:75:c3:bc:95:db:0d:bd:c0:a9:c4:
         cc:ba:50:7f:6b:2f:7f:1a:80:28:34:e2:81:39:0a:a2:00:d1:
         ef:69:a9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:00:35 2026 by rpki-client