Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/323630323a666236373a31623a3a2f34382d3438203d3e203230343733.roa
File:                     323630323a666236373a31623a3a2f34382d3438203d3e203230343733.roa (raw, json)
Hash identifier:          fF9WU9nTtLOVLiigsCjUFdMviAXdcArXU1VlpqCn0BU=
Subject key identifier:   B3:29:8A:E5:90:96:24:9E:1A:5B:9B:78:52:21:12:BB:65:B9:2B:19
Certificate issuer:       /CN=79d88309d0c38c1df0c23daa63c621f26b82729dbba8572628
Certificate serial:       465FB85D4376CD5B8643FFB57D5F193E2E372C8E
Authority key identifier: 12:03:77:C4:F4:45:AF:03:58:B3:D5:C8:B6:F1:E7:91:8D:F8:65:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632/79d88309d0c38c1df0c23daa63c621f26b82729dbba8572628.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/323630323a666236373a31623a3a2f34382d3438203d3e203230343733.roa
Signing time:             Thu 19 Feb 2026 01:17:14 +0000
ROA not before:           Thu 19 Feb 2026 01:12:14 +0000
ROA not after:            Thu 18 Feb 2027 01:17:14 +0000
asID:                     20473
IP address blocks:        2602:fb67:1b::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5f:b8:5d:43:76:cd:5b:86:43:ff:b5:7d:5f:19:3e:2e:37:2c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d88309d0c38c1df0c23daa63c621f26b82729dbba8572628
        Validity
            Not Before: Feb 19 01:12:14 2026 GMT
            Not After : Feb 18 01:17:14 2027 GMT
        Subject: CN=B3298AE59096249E1A5B9B78522112BB65B92B19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e0:df:10:38:5c:bd:44:aa:f3:33:0e:8c:1b:
                    d9:e4:62:cb:1f:6a:2f:3d:b0:b7:e1:77:ff:f1:ff:
                    4e:e9:9e:65:ed:c6:4a:88:5d:e0:77:ce:de:2a:81:
                    bc:8b:30:f6:69:55:94:7e:7e:76:be:32:0e:c3:42:
                    c7:3f:14:f0:99:cb:65:b7:6e:4c:ae:47:26:ea:0f:
                    08:e5:c2:1c:ec:f3:fd:52:cb:4a:39:6c:ce:90:3b:
                    c3:f3:b4:4e:84:a1:85:f3:f4:22:38:c6:be:37:60:
                    c3:9d:fa:21:48:87:ef:8d:b2:13:09:a3:48:dd:1e:
                    e5:db:8e:a9:5b:f6:ea:5e:98:6a:3f:18:a9:28:b8:
                    ac:0b:da:80:d4:f7:97:7e:7c:c8:fd:4b:93:0a:60:
                    e4:96:57:2d:4c:f3:36:5d:45:45:af:2d:1f:65:8f:
                    1d:ce:a2:97:ca:50:a5:d3:9e:1c:68:e4:a9:58:54:
                    b6:69:4f:21:be:bb:ee:d4:7a:58:5b:7f:a2:83:7c:
                    ba:4b:1c:05:43:f5:19:0f:de:9d:d4:1a:b0:d7:2e:
                    0f:8b:82:eb:04:75:ab:c5:4a:42:28:3a:d1:57:da:
                    54:a2:4d:4f:0b:86:a0:23:e0:71:68:ea:fc:61:54:
                    42:14:7c:50:e3:30:2d:99:c4:64:04:06:3b:96:8f:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:29:8A:E5:90:96:24:9E:1A:5B:9B:78:52:21:12:BB:65:B9:2B:19
            X509v3 Authority Key Identifier:
                keyid:12:03:77:C4:F4:45:AF:03:58:B3:D5:C8:B6:F1:E7:91:8D:F8:65:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/120377C4F445AF0358B3D5C8B6F1E7918DF865C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4538806d-1647-4e36-8f5c-ae55c7431632/79d88309d0c38c1df0c23daa63c621f26b82729dbba8572628.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/955bf72735874e48af40acc6610a1941/0/323630323a666236373a31623a3a2f34382d3438203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fb67:1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:d6:99:6d:63:b5:e0:69:d5:fe:61:8f:9a:28:a1:05:1e:42:
         bd:f8:e2:af:65:4f:9d:28:79:34:8c:ed:ba:8b:b4:58:4e:c9:
         8a:78:84:26:67:53:6f:6d:4d:ab:87:a9:4c:02:3f:f9:4d:7c:
         77:98:ef:75:44:c7:8b:bd:95:b5:2e:14:df:16:02:96:ed:42:
         f4:f4:79:03:34:47:02:e1:88:4d:93:eb:5a:c1:67:b6:99:39:
         f7:4d:41:ad:37:34:d2:92:95:f2:4c:37:28:d8:e4:83:04:5c:
         11:d9:f4:db:5f:7f:c7:f0:fb:d2:4d:95:5b:bc:02:b7:9c:f5:
         8e:3b:30:81:b2:fc:23:cd:d0:1c:a0:cb:ed:ff:11:fe:f1:61:
         ca:ee:73:2a:29:41:3f:a3:47:64:b1:9f:69:ec:c8:da:e2:60:
         d0:8a:82:ae:da:d8:72:9a:1f:d9:60:cc:47:99:b3:f9:e5:5a:
         5e:ed:ca:4c:57:a9:e7:ce:30:25:ac:23:90:4e:60:2d:89:ff:
         77:a6:1d:b4:ed:13:e9:65:4b:1b:ee:6a:6b:42:3b:cb:a1:db:
         f8:06:12:b8:ff:a0:36:62:42:ae:8b:8f:c4:5c:78:9b:67:79:
         d7:62:e8:92:d4:63:ee:54:38:a6:9f:06:c8:70:98:65:ed:11:
         9a:04:b8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----