Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31343a3a2f34382d3438203d3e203530313034.roa
File:                     323630323a666163323a31343a3a2f34382d3438203d3e203530313034.roa (raw, json)
Hash identifier:          kttScSXGLTu1Vfff4ehHdUK0qjsbYcOGbmKVkv+FMXM=
Subject key identifier:   BF:6B:60:46:D8:CD:D4:45:9D:DE:81:13:F0:33:9F:92:57:F0:13:C5
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       4D605CFEAA0E0D19482B40D6CDF3CEF35B639C72
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31343a3a2f34382d3438203d3e203530313034.roa
Signing time:             Sun 29 Mar 2026 03:27:32 +0000
ROA not before:           Sun 29 Mar 2026 03:22:32 +0000
ROA not after:            Sun 28 Mar 2027 03:27:32 +0000
asID:                     50104
IP address blocks:        2602:fac2:14::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:60:5c:fe:aa:0e:0d:19:48:2b:40:d6:cd:f3:ce:f3:5b:63:9c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 29 03:22:32 2026 GMT
            Not After : Mar 28 03:27:32 2027 GMT
        Subject: CN=BF6B6046D8CDD4459DDE8113F0339F9257F013C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:35:7d:ef:6d:fe:ba:a0:55:3d:e0:95:79:
                    c7:37:5f:e2:86:f5:8e:ae:b3:13:15:d5:79:40:a7:
                    b6:03:9b:e2:25:91:6d:88:e3:d8:46:7a:2b:da:32:
                    9b:ba:26:a7:0d:c1:91:49:fb:1e:9a:28:0e:d6:1d:
                    6b:54:29:fc:80:29:4d:7d:2e:f3:62:ee:49:0b:86:
                    a8:25:65:e8:3b:56:30:07:46:1e:14:d5:21:8c:c6:
                    51:70:5b:33:c0:bb:0f:bd:b7:88:77:33:3a:57:56:
                    81:b0:26:4e:62:a6:9e:84:4c:6e:02:76:54:8d:dd:
                    6c:f1:5f:1f:ad:05:2e:10:a3:ee:99:e7:35:02:b1:
                    d4:08:92:33:8d:ed:81:78:20:13:64:4b:a0:4c:32:
                    a5:d2:3a:29:68:3a:f8:af:a9:d9:26:23:aa:83:f9:
                    b7:0e:d3:51:e9:c7:e6:1e:2e:5c:ec:24:3e:eb:d1:
                    92:48:0b:ab:9e:6f:f5:cb:63:da:a6:6a:72:15:7d:
                    9e:16:72:a1:88:43:70:ca:61:23:3b:d4:a9:92:24:
                    12:32:ed:d0:7a:34:51:76:57:93:3a:41:93:f2:05:
                    88:dd:2d:fd:02:cb:49:ea:85:f7:be:48:03:c3:81:
                    64:17:f2:e4:32:6a:6d:2f:12:16:63:5f:58:10:91:
                    81:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6B:60:46:D8:CD:D4:45:9D:DE:81:13:F0:33:9F:92:57:F0:13:C5
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a31343a3a2f34382d3438203d3e203530313034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:14::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:f5:a3:96:e2:76:27:20:ee:e5:6e:8e:e6:77:ef:2f:9b:47:
         5f:8d:00:83:c0:c0:27:e9:40:a0:24:a7:7f:b5:89:f5:c8:4c:
         a6:19:33:c2:89:a8:9c:ae:fa:b8:68:5d:b8:eb:1f:ab:8c:86:
         70:3d:94:0e:ce:7d:04:9a:f9:7c:6d:aa:da:3e:0e:3b:8b:44:
         3f:78:a8:4a:44:b0:bc:f7:a4:75:32:df:7e:fd:5d:0c:c9:8b:
         d9:13:8f:5e:f0:32:5d:27:d3:fb:fa:a7:fe:20:b8:fc:80:13:
         a6:5d:f9:73:78:56:4a:3a:6a:63:fc:27:26:b2:83:ef:43:aa:
         6a:48:dd:ae:2e:2a:38:d5:3e:2d:ec:68:89:11:4e:85:f9:6d:
         00:18:28:2e:fd:2c:e1:cf:1d:83:a9:bf:7f:a4:24:9a:f2:73:
         e7:f7:75:22:c4:29:1d:aa:b7:41:a5:ea:11:65:91:79:70:15:
         22:47:bb:0a:b1:4e:65:3a:32:b9:74:14:b4:dd:1a:16:51:10:
         37:22:2b:0f:c5:af:3f:0d:6b:2b:92:f6:b3:34:f6:10:57:d2:
         ee:38:02:8b:eb:d9:15:ee:94:3b:c2:6d:33:46:98:13:64:86:
         e1:c9:0f:88:1b:4b:2d:27:cf:99:9a:67:a1:9a:04:97:99:b5:
         72:1a:a8:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----