Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a34343a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666164343a34343a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          oV1UGmCtB8EmPuSCqrJV/0l67d4nmvsnAHe8KpUM8VM=
Subject key identifier:   30:4B:C6:6B:83:D3:F0:E1:63:E1:6D:3D:1E:A7:58:E0:44:FF:11:B5
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       4FC5261F2859E0E61242201158DC170071E5F537
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a34343a3a2f34382d3438203d3e203239383032.roa
Signing time:             Tue 10 Nov 2026 10:01:37 +0000
ROA not before:           Tue 10 Nov 2026 09:56:37 +0000
ROA not after:            Tue 09 Nov 2027 10:01:37 +0000
asID:                     29802
IP address blocks:        2602:fad4:44::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:c5:26:1f:28:59:e0:e6:12:42:20:11:58:dc:17:00:71:e5:f5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Nov 10 09:56:37 2026 GMT
            Not After : Nov  9 10:01:37 2027 GMT
        Subject: CN=304BC66B83D3F0E163E16D3D1EA758E044FF11B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:79:cc:1a:6a:85:00:77:43:ea:a4:50:c0:ca:
                    d6:44:12:6f:40:ff:0a:92:74:4a:2c:8f:3e:a7:13:
                    f6:6a:e9:78:ee:22:c9:eb:25:c6:5e:42:0a:a7:71:
                    c7:a7:f2:4a:ab:b6:b8:0c:3d:93:cd:9d:f6:b0:bd:
                    c0:7e:a9:62:b7:fb:3b:f9:0d:b0:69:c0:2a:ac:41:
                    8c:12:24:1d:b0:85:83:30:74:6a:dc:be:34:bd:98:
                    4e:3d:2e:1a:10:cc:24:41:4e:f2:97:a2:01:a0:71:
                    eb:67:14:f8:25:25:32:1b:9d:6e:3c:3c:f2:95:55:
                    af:bd:7a:9a:fa:95:e9:dc:ad:43:94:88:44:25:48:
                    0e:b6:37:10:61:03:d8:0d:a9:b5:7b:d1:6b:e2:8d:
                    d8:0b:8e:7b:93:46:47:72:a1:76:09:23:fd:14:a0:
                    3e:1e:30:fc:a8:8d:a8:aa:79:d9:9a:3e:33:9c:bb:
                    a0:18:5c:93:8d:4a:f8:d4:65:3c:a2:da:f7:a7:5b:
                    cc:f1:e9:02:42:2c:59:12:77:d3:0d:a0:1c:89:9b:
                    b1:2b:7a:9d:48:c3:de:02:4e:4e:9d:e1:26:4e:5f:
                    68:f7:93:a1:65:1b:69:58:fa:c3:dc:56:17:e4:72:
                    0e:76:0c:d5:2e:b9:c6:42:3c:7d:4e:06:00:bf:43:
                    9b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4B:C6:6B:83:D3:F0:E1:63:E1:6D:3D:1E:A7:58:E0:44:FF:11:B5
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a34343a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:44::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:40:66:b1:7d:8c:52:ad:d6:29:c5:63:b3:1f:64:a7:17:dc:
         40:03:fd:17:47:fe:37:8f:d1:ca:c5:c4:44:0f:a4:0d:6f:62:
         9a:52:bf:7d:37:3f:75:91:b7:22:4e:b2:8e:a0:4b:06:bb:17:
         c9:aa:d4:83:ae:c8:ad:ae:1f:2c:f6:61:f6:bf:c5:6e:7a:6b:
         4d:2d:4e:0b:18:03:41:06:9a:06:8a:a8:c2:3e:c9:c7:68:83:
         c2:e6:9d:85:cb:09:05:48:3e:11:fe:2c:9d:bd:39:0f:dd:a3:
         9b:ff:30:46:cf:63:c7:6c:d1:62:d8:dd:f1:94:33:e5:8b:65:
         52:67:e9:cd:26:7c:d7:d2:39:a4:d8:ac:43:f9:7c:7e:65:50:
         2d:3b:91:ac:7c:eb:59:13:75:9d:27:49:77:bb:0c:39:8f:93:
         34:d4:64:16:1b:0c:38:de:12:f5:4b:aa:3d:50:f6:a1:f8:49:
         4b:18:88:05:3c:1b:60:be:80:e7:86:cd:0e:e7:c8:27:55:3d:
         f3:77:52:d4:90:62:d3:ec:6a:ab:f7:6e:46:f5:07:79:1d:fb:
         d0:3c:47:71:c9:57:47:1a:75:9a:e4:34:27:91:6d:b6:54:26:
         ce:52:01:59:7c:3b:6c:37:2f:22:4d:b9:33:09:51:c0:d1:75:
         31:b5:b2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----