Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a34363a3a2f34382d3438203d3e203239383032.roa
File:                     323630323a666164343a34363a3a2f34382d3438203d3e203239383032.roa (raw, json)
Hash identifier:          d3LlmW2/DdxmsmbA9q8U2OqyX/oXra0X75mI9vMYCEg=
Subject key identifier:   AB:83:E3:7D:09:3A:4F:C5:95:82:34:BE:7F:8F:D5:A1:DD:FB:06:CF
Certificate issuer:       /CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
Certificate serial:       6E8815D40D1533FA8612C0A9E6459BDC570DE071
Authority key identifier: 90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a34363a3a2f34382d3438203d3e203239383032.roa
Signing time:             Tue 10 Nov 2026 10:01:44 +0000
ROA not before:           Tue 10 Nov 2026 09:56:44 +0000
ROA not after:            Tue 09 Nov 2027 10:01:44 +0000
asID:                     29802
IP address blocks:        2602:fad4:46::/48 maxlen: 48
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:88:15:d4:0d:15:33:fa:86:12:c0:a9:e6:45:9b:dc:57:0d:e0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e
        Validity
            Not Before: Nov 10 09:56:44 2026 GMT
            Not After : Nov  9 10:01:44 2027 GMT
        Subject: CN=AB83E37D093A4FC5958234BE7F8FD5A1DDFB06CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:41:e4:d8:8c:ee:b1:14:14:f2:3e:fb:20:aa:
                    51:76:e0:41:75:44:3e:38:3f:9b:dd:3b:9a:e0:ac:
                    45:a4:c5:91:55:d0:1e:16:3a:ba:5a:77:42:7a:3c:
                    a6:b0:ca:e3:f6:de:7d:65:d6:56:1a:cc:39:54:e5:
                    52:0d:08:7a:c4:1e:cb:6a:f3:a4:c9:d2:cd:58:e3:
                    50:b3:49:6a:2c:f9:13:a1:8b:36:6f:b5:de:44:59:
                    eb:47:18:ab:f3:6a:8d:5e:19:4f:73:d7:d4:82:17:
                    08:c2:8e:d2:0a:3d:0f:b7:23:81:bc:45:7e:13:b4:
                    78:97:c5:eb:65:f1:3c:47:ff:90:3d:2a:64:83:32:
                    fe:05:94:ae:96:7e:44:72:d6:c7:b5:eb:1f:1c:72:
                    bf:b5:50:ad:8a:f0:42:aa:6b:ac:69:16:ca:1e:c5:
                    02:51:25:a7:39:49:ea:7a:02:9f:31:f7:6c:38:df:
                    85:35:bc:77:4a:af:0f:a2:91:80:17:f2:8f:3e:55:
                    f0:5d:92:7e:63:76:2b:0e:df:2f:39:50:cd:cd:c5:
                    23:44:db:e3:27:fd:58:35:03:89:61:a7:b8:b5:2f:
                    2c:52:03:2a:6b:63:ee:93:53:44:57:e3:4b:cc:85:
                    42:7a:71:86:03:d1:aa:bf:a6:91:24:2e:67:4e:d3:
                    08:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:83:E3:7D:09:3A:4F:C5:95:82:34:BE:7F:8F:D5:A1:DD:FB:06:CF
            X509v3 Authority Key Identifier:
                keyid:90:75:11:83:E4:3B:A4:EA:B1:6A:F6:04:B5:04:1E:8F:FE:F3:1D:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/90751183E43BA4EAB16AF604B5041E8FFEF31DF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0743eacf-bc4f-4c8a-9140-1347b6fa6ee5/a3e135216a375540be5ef3452e6aa32a0a03eac667cb9fe64e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade889c3eae0188aff66734094d/0/323630323a666164343a34363a3a2f34382d3438203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fad4:46::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:b0:fc:9e:b1:d3:c5:2e:69:81:6d:52:00:a1:e5:11:36:51:
         ce:94:22:bb:45:ef:62:f2:81:a3:0d:9a:64:d5:04:d6:bd:1e:
         2a:48:4d:37:db:5d:12:68:56:5a:05:c5:fc:5f:dd:57:42:2f:
         d6:35:8c:90:df:8f:cf:2a:28:aa:a7:2e:75:e8:83:5f:e1:9f:
         16:ee:0c:e6:d3:a1:f4:5e:c1:78:b6:41:3c:7d:0f:e1:92:1d:
         6b:0f:e9:4f:04:50:65:db:b3:5f:75:7b:ef:11:29:8f:0c:c3:
         99:72:58:d2:30:1f:c9:85:23:73:2e:59:60:75:04:2d:88:83:
         12:94:aa:7b:bb:94:f7:8b:e0:c1:27:69:90:00:91:d2:2a:dd:
         1e:fd:ee:65:7f:41:e5:8a:65:d8:9b:f4:ed:30:bd:b6:46:e2:
         ad:35:22:9b:9b:4c:50:4d:96:14:67:17:07:59:48:32:3b:9f:
         5b:ec:c9:9c:02:66:62:30:a7:97:ac:ef:a9:26:88:b9:a9:3a:
         60:b4:3b:a9:55:44:9b:84:ec:df:c4:af:9c:70:c3:91:df:c5:
         4a:37:e9:80:06:67:ca:69:3e:ba:40:8c:95:95:cf:34:38:35:
         a2:fa:27:21:05:e4:b9:37:29:2d:4b:65:ec:b2:72:15:1a:35:
         68:a8:37:12
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIUbogV1A0VM/qGEsCp5kWb3FcN4HEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTNlMTM1MjE2YTM3NTU0MGJlNWVmMzQ1MmU2YWEzMmEw
YTAzZWFjNjY3Y2I5ZmU2NGUwHhcNMjYxMTEwMDk1NjQ0WhcNMjcxMTA5MTAwMTQ0
WjAzMTEwLwYDVQQDEyhBQjgzRTM3RDA5M0E0RkM1OTU4MjM0QkU3RjhGRDVBMURE
RkIwNkNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Hk2IzusRQU
8j77IKpRduBBdUQ+OD+b3Tua4KxFpMWRVdAeFjq6WndCejymsMrj9t59ZdZWGsw5
VOVSDQh6xB7LavOkydLNWONQs0lqLPkToYs2b7XeRFnrRxir82qNXhlPc9fUghcI
wo7SCj0PtyOBvEV+E7R4l8XrZfE8R/+QPSpkgzL+BZSuln5EctbHtesfHHK/tVCt
ivBCqmusaRbKHsUCUSWnOUnqegKfMfdsON+FNbx3Sq8PopGAF/KPPlXwXZJ+Y3Yr
Dt8vOVDNzcUjRNvjJ/1YNQOJYae4tS8sUgMqa2Puk1NEV+NLzIVCenGGA9Gqv6aR
JC5nTtMI2wIDAQABo4ICuTCCArUwHQYDVR0OBBYEFKuD430JOk/FlYI0vn+P1aHd
+wbPMB8GA1UdIwQYMBaAFJB1EYPkO6TqsWr2BLUEHo/+8x3yMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODg5YzNlYWUwMTg4YWZmNjY3MzQwOTRkLzAv
OTA3NTExODNFNDNCQTRFQUIxNkFGNjA0QjUwNDFFOEZGRUYzMURGMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjLzA3NDNlYWNmLWJjNGYtNGM4YS05MTQwLTEzNDdiNmZhNmVlNS9hM2Ux
MzUyMTZhMzc1NTQwYmU1ZWYzNDUyZTZhYTMyYTBhMDNlYWM2NjdjYjlmZTY0ZS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4OWMzZWFlMDE4OGFm
ZjY2NzM0MDk0ZC8wLzMyMzYzMDMyM2E2NjYxNjQzNDNhMzQzNjNhM2EyZjM0Mzgy
ZDM0MzgyMDNkM2UyMDMyMzkzODMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAmAvrUAEYwDQYJKoZI
hvcNAQELBQADggEBAHaw/J6x08UuaYFtUgCh5RE2Uc6UIrtF72LygaMNmmTVBNa9
HipITTfbXRJoVloFxfxf3VdCL9Y1jJDfj88qKKqnLnXog1/hnxbuDObTofRewXi2
QTx9D+GSHWsP6U8EUGXbs191e+8RKY8Mw5lyWNIwH8mFI3MuWWB1BC2IgxKUqnu7
lPeL4MEnaZAAkdIq3R797mV/QeWKZdib9O0wvbZG4q01IpubTFBNlhRnFwdZSDI7
n1vsyZwCZmIwp5es76kmiLmpOmC0O6lVRJuE7N/Er5xww5HfxUo36YAGZ8ppPrpA
jJWVzzQ4NaL6JyEF5Lk3KS1LZeyychUaNWioNxI=
-----END CERTIFICATE-----