Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a393a3a2f34382d3438203d3e20313532333638.roa
File:                     323630323a666163323a393a3a2f34382d3438203d3e20313532333638.roa (raw, json)
Hash identifier:          d69fSIfuOpHu8biFhl69y0rAWqK61+znDYqk4OJarC0=
Subject key identifier:   C3:95:B5:60:8D:85:3D:B2:4D:29:A9:3E:6B:01:37:CF:3A:12:D5:D6
Certificate issuer:       /CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
Certificate serial:       067A9EE1ED72D9404B12F922938F6CAF022A57A9
Authority key identifier: E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a393a3a2f34382d3438203d3e20313532333638.roa
Signing time:             Sun 29 Mar 2026 03:27:34 +0000
ROA not before:           Sun 29 Mar 2026 03:22:34 +0000
ROA not after:            Sun 28 Mar 2027 03:27:34 +0000
asID:                     152368
IP address blocks:        2602:fac2:9::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:7a:9e:e1:ed:72:d9:40:4b:12:f9:22:93:8f:6c:af:02:2a:57:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f
        Validity
            Not Before: Mar 29 03:22:34 2026 GMT
            Not After : Mar 28 03:27:34 2027 GMT
        Subject: CN=C395B5608D853DB24D29A93E6B0137CF3A12D5D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:44:b8:f4:b5:3c:d3:58:7e:50:88:13:0f:31:
                    88:b1:6f:4e:a8:4c:4d:1a:09:de:25:cd:2a:bc:12:
                    89:55:85:96:77:5a:a4:e7:ce:cf:ce:76:79:9e:43:
                    b0:a0:3d:6a:2b:66:db:a6:80:b6:fd:87:dd:c5:25:
                    be:ca:48:9e:bf:5d:87:dc:c7:a2:44:13:7a:6a:ba:
                    0d:ee:e3:ac:87:0a:cb:6d:5f:00:01:6e:ae:a1:ed:
                    35:6b:fb:ea:18:27:cb:37:3c:0b:32:22:6e:8b:d4:
                    db:b6:49:11:60:82:9a:f9:93:02:69:aa:51:44:2a:
                    ba:45:66:45:51:38:b6:07:f7:7a:68:b9:4a:33:85:
                    e5:bb:d3:5a:e1:47:f5:0b:8d:b3:54:73:ea:ca:3b:
                    ff:c7:fe:6c:9b:ce:15:9e:7f:84:91:3c:e3:79:65:
                    df:61:4a:0a:1d:15:ed:13:74:ff:d2:d6:ee:22:b5:
                    eb:82:8c:9a:c0:37:c7:81:55:48:14:81:18:90:08:
                    3c:39:6b:bc:bf:52:ed:ef:9a:56:c8:7b:c5:91:83:
                    5c:14:10:de:66:42:b4:b0:58:10:ce:4f:70:3d:9b:
                    6e:73:fc:50:10:94:2e:53:97:6a:98:7e:86:ea:ab:
                    94:4d:cc:55:7d:3a:0a:ed:e2:32:b2:bd:e1:c9:ab:
                    4d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:95:B5:60:8D:85:3D:B2:4D:29:A9:3E:6B:01:37:CF:3A:12:D5:D6
            X509v3 Authority Key Identifier:
                keyid:E2:71:AE:55:26:8B:88:C1:E9:72:A7:EE:85:B1:45:9D:8D:D2:10:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/E271AE55268B88C1E972A7EE85B1459D8DD2102C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c6babe0-c981-4c51-971c-b56bd0722eb1/ed199e1daa148cc0522eb727a4aa5cc87d3d0149c7f073452f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e52101850b65b10b358b/0/323630323a666163323a393a3a2f34382d3438203d3e20313532333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fac2:9::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:07:0f:ce:42:12:98:92:e9:e0:8c:2a:a1:d5:5f:bd:6b:86:
         76:d4:ad:26:33:e5:2f:41:7f:78:cc:32:5e:a0:c4:04:58:b9:
         9a:39:7d:72:d8:66:70:dd:3e:2a:aa:b3:db:92:4b:a3:55:2d:
         d8:39:95:06:bc:4a:1f:99:60:af:d6:97:a9:7f:7e:c9:ef:5d:
         84:55:3a:16:95:49:ef:28:5a:15:cb:bd:42:55:4f:61:ac:c0:
         5e:b2:40:3f:97:a4:9e:9e:fc:a2:7c:18:93:d5:d7:75:f8:46:
         1f:e6:06:e3:1f:a4:37:ad:00:6d:7f:37:89:16:5b:60:8c:75:
         50:58:99:f0:dc:88:d0:f9:fe:93:10:7a:5e:48:58:19:84:2b:
         4f:26:10:58:79:20:fe:57:9f:31:4c:48:cc:8d:aa:e5:0f:97:
         73:3b:00:a1:2f:03:2a:c6:74:52:1c:25:04:cd:77:76:b4:75:
         e0:02:29:3c:7e:1e:ee:b9:4d:15:e0:cf:ad:c6:6d:4e:17:f0:
         f3:1c:ea:de:36:19:33:97:89:4d:17:71:96:81:8b:26:4b:ad:
         7c:08:8f:92:99:6d:27:02:0b:a9:b1:6b:c5:1f:49:90:22:cf:
         8e:cb:5e:30:1b:96:22:30:84:45:73:5b:94:6d:a9:8b:5e:e4:
         39:ce:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:36:07 2026 by rpki-client