Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31313a3a2f34382d3438203d3e20313532333638.roa
File:                     323630323a666163323a31313a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier:          YHUY0701lhYkiXVUW4c3NvQ+afDI35hMyEwX9tYaKwI=
Subject key identifier:   63:FB:C2:73:37:80:48:83:E0:C5:1A:A0:81:AB:63:C1:10:7F:26:FA
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       6E5EDF51973A0E11C41DB62B72C06A0DF45A43CB
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31313a3a2f34382d3438203d3e20313532333638.roa
Signing time:             Sun 29 Mar 2026 03:27:34 +0000
ROA not before:           Sun 29 Mar 2026 03:22:34 +0000
ROA not after:            Sun 28 Mar 2027 03:27:34 +0000
asID:                     152368
IP address blocks:        2602:fac2:11::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:5e:df:51:97:3a:0e:11:c4:1d:b6:2b:72:c0:6a:0d:f4:5a:43:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 29 03:22:34 2026 GMT
            Not After : Mar 28 03:27:34 2027 GMT
        Subject: CN=63FBC27337804883E0C51AA081AB63C1107F26FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ce:5d:0a:dc:e6:99:df:bb:a2:08:6c:18:2d:
                    b2:7d:ce:c7:57:a4:a2:db:5b:c6:57:24:6c:0d:88:
                    8c:8f:1e:5e:4a:63:ce:db:c6:22:cc:9f:3c:65:4f:
                    0f:fb:ed:f0:46:23:1e:cc:3a:c9:b1:41:1e:44:40:
                    64:96:9c:8b:b5:42:dd:1b:ea:39:c1:20:f3:8a:05:
                    bc:15:18:a4:77:d1:56:9a:c9:c4:ab:d0:98:1b:03:
                    95:10:8d:51:8b:16:68:d3:2c:19:e2:1c:30:16:2e:
                    fe:57:96:b2:11:52:ec:a0:af:22:f4:ed:e0:30:7d:
                    7d:d6:91:bf:72:8b:e1:8a:ad:a7:78:c0:63:70:13:
                    fb:66:0b:31:12:8f:27:12:86:da:12:39:1b:7a:6e:
                    09:05:66:21:65:06:86:b8:b3:40:94:7a:43:20:51:
                    8f:e0:54:27:e8:c4:66:5c:d2:39:79:99:d3:3e:99:
                    49:0f:26:1b:8d:b7:38:25:03:d7:37:96:41:87:6d:
                    f9:dd:5e:72:91:b6:fb:f8:8b:be:b9:ea:b0:c7:13:
                    ff:b3:ee:2a:0c:ef:94:d3:40:92:39:20:cb:ac:66:
                    07:be:77:51:a8:3b:58:64:d9:e5:81:c2:f8:ac:34:
                    e8:2c:1f:86:75:46:9c:a2:f3:71:93:45:a5:24:3f:
                    c2:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FB:C2:73:37:80:48:83:E0:C5:1A:A0:81:AB:63:C1:10:7F:26:FA
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31313a3a2f34382d3438203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:03:7b:23:96:e1:03:17:87:00:96:72:2f:eb:5a:01:84:ac:
         7b:b0:59:24:5e:22:a0:20:b0:f5:35:62:af:33:b3:3b:ed:7f:
         7b:30:a4:ae:db:11:66:ce:d1:86:ab:5f:30:ef:84:9c:22:6a:
         94:bc:39:c5:d7:e3:f3:fe:7f:68:9a:e3:d4:72:03:c9:82:03:
         f5:38:fe:a6:5f:a8:ef:b7:85:9e:bc:27:2b:14:7b:77:92:cf:
         30:03:ee:91:5b:0f:9e:6e:6f:b1:ab:ec:e3:3f:81:20:81:93:
         a4:69:bd:5f:3d:93:a6:e1:47:2b:f3:6d:69:8f:de:e0:36:b6:
         f4:cb:14:14:d6:b6:ad:1e:c0:42:24:72:60:43:fe:35:00:90:
         57:e2:e4:bc:5f:e4:9f:5a:9b:48:0b:73:1a:f2:59:22:1d:42:
         07:35:42:a7:9f:9c:49:86:4d:21:86:9d:5e:5d:1d:35:f7:f3:
         f2:90:74:11:81:94:14:6a:77:27:a1:fd:d8:b3:c7:18:83:94:
         29:bd:af:67:02:e5:6f:10:be:a4:9a:4e:fc:f7:a3:7c:b4:d2:
         ff:5c:77:da:6a:83:b3:11:f6:9c:b1:10:06:fc:20:8c:35:75:
         15:be:ad:c9:45:bd:f9:ea:d2:f1:1f:46:22:7f:6c:2d:c3:d9:
         ba:e4:9c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----