Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31333a3a2f34382d3438203d3e20323131343037.roa
File:                     323630323a666163323a31333a3a2f34382d3438203d3e20323131343037.roa (raw, json)
Hash identifier:          vTNC8Lq/0gsso1EL9lqb7QWFlMDWfL75dyFXbVaU4LU=
Subject key identifier:   77:2E:83:48:73:DF:7E:88:35:66:9A:81:BD:2A:C1:E2:E8:99:71:E9
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       2A0168372087050CE4CCCE4BCF114A24CD8A59E6
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31333a3a2f34382d3438203d3e20323131343037.roa
Signing time:             Sun 29 Mar 2026 03:27:32 +0000
ROA not before:           Sun 29 Mar 2026 03:22:32 +0000
ROA not after:            Sun 28 Mar 2027 03:27:32 +0000
asID:                     211407
IP address blocks:        2602:fac2:13::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:01:68:37:20:87:05:0c:e4:cc:ce:4b:cf:11:4a:24:cd:8a:59:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 29 03:22:32 2026 GMT
            Not After : Mar 28 03:27:32 2027 GMT
        Subject: CN=772E834873DF7E8835669A81BD2AC1E2E89971E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:2a:77:46:47:ce:66:4e:29:8c:9e:95:b7:5c:
                    03:32:51:61:54:86:05:75:09:0b:e0:c0:3d:23:47:
                    a0:d5:23:71:6f:a8:86:87:b0:6f:03:76:98:dc:51:
                    67:db:3c:9d:c8:13:2f:38:94:bf:66:20:dc:c5:1d:
                    0e:b8:7a:cd:06:fe:75:59:38:14:8d:bf:f0:4d:fd:
                    e3:d8:53:c1:92:f2:0d:56:fd:dc:4c:f7:30:fe:c5:
                    c4:8a:24:46:5b:9a:28:0b:31:ba:49:cb:3f:60:cc:
                    1d:ba:69:22:83:45:f3:8b:41:11:51:a9:dd:0b:b1:
                    f3:1a:93:c8:8a:5d:2f:1b:e5:87:49:a1:b1:a1:09:
                    77:40:5e:5f:a7:5e:da:16:38:6d:ad:2f:02:f6:53:
                    15:33:61:d5:76:1f:69:4c:51:fb:bc:1d:26:07:d8:
                    9b:9f:e8:fc:43:0a:1a:8b:47:40:83:82:40:8e:59:
                    bd:6d:5b:2d:e7:46:d5:8c:c6:36:9c:1e:05:04:63:
                    14:b4:ce:fb:2b:e5:cc:af:5f:7c:6c:e5:9c:c8:4a:
                    2b:05:7e:2e:3c:89:76:96:36:39:6f:55:36:84:1e:
                    53:01:bc:6a:de:c5:a6:03:df:bc:42:cb:5a:41:2d:
                    18:7f:bc:a0:f6:05:c3:da:83:7b:ff:d0:a9:6e:ce:
                    8b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2E:83:48:73:DF:7E:88:35:66:9A:81:BD:2A:C1:E2:E8:99:71:E9
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31333a3a2f34382d3438203d3e20323131343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:19:e1:cb:10:93:8c:6e:14:4b:58:2f:5b:17:b7:0c:c2:7a:
         d6:bf:e5:cc:68:f9:29:42:34:15:e0:7b:af:e6:02:54:c8:f4:
         c9:16:4a:53:8b:cd:b9:8f:48:fb:c2:22:cf:f1:74:4c:d7:bc:
         99:3a:05:e0:ec:bc:73:40:3d:e2:94:d4:80:0c:ef:19:1e:fb:
         d9:dc:3f:72:5a:b7:78:26:fa:59:22:64:53:2c:44:c6:27:12:
         a8:7c:ff:45:05:85:4d:66:12:76:d5:03:6e:10:1c:bc:4f:e4:
         31:99:cd:eb:26:80:24:a2:f3:6e:57:4d:a6:83:60:c1:bf:69:
         34:47:5c:ed:91:77:2a:85:0e:c5:63:6b:83:23:c2:7b:9f:d9:
         90:2f:61:fd:94:b9:50:23:83:ec:29:00:15:22:8e:c8:43:74:
         d9:89:c8:25:88:48:c4:22:69:bc:6c:31:be:01:e4:46:48:66:
         06:a3:3c:46:fe:f3:2d:98:5a:cf:f8:4e:9e:2d:4c:42:34:9e:
         38:d8:ec:1e:fd:f9:70:47:24:b8:c6:99:e1:c0:36:80:94:b4:
         c0:67:f4:74:7c:44:0c:06:be:83:25:12:d5:86:84:28:1a:cd:
         5e:36:1e:fe:da:ef:c5:eb:67:12:ca:d8:bf:87:1e:97:a8:56:
         33:ff:0d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:35:57 2026 by rpki-client