Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/b7f48ec6-92e6-3b7c-a415-c3972c2a8792.roa
File:                     b7f48ec6-92e6-3b7c-a415-c3972c2a8792.roa (raw, json)
Hash identifier:          PkfQWCxEBdhpiijRMZD5ktX6QKxzUqhtPkPRLBvTpdE=
Subject key identifier:   BC:A4:D5:EF:07:54:19:0A:31:B4:AF:46:81:6F:08:8F:DD:51:8B:75
Certificate issuer:       /CN=090cf75b-f998-45e2-a8ea-c4d882201d24
Certificate serial:       010D0C9F4328584E2F046027993B183DA0BC2A00
Authority key identifier: 14:9C:C7:07:9A:90:D7:69:1D:47:04:E9:AD:6D:E7:D7:CE:2C:7D:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/b7f48ec6-92e6-3b7c-a415-c3972c2a8792.roa
Signing time:             Mon 15 Jun 2026 21:00:12 +0000
ROA not before:           Mon 15 Jun 2026 21:00:12 +0000
ROA not after:            Sun 13 Sep 2026 21:00:12 +0000
asID:                     213465
IP address blocks:        23.136.44.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2f:04:60:27:99:3b:18:3d:a0:bc:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=090cf75b-f998-45e2-a8ea-c4d882201d24
        Validity
            Not Before: Jun 15 21:00:12 2026 GMT
            Not After : Sep 13 21:00:12 2026 GMT
        Subject: CN=29614bd0-ddc5-466e-9c25-18868712b06e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6e:3f:83:57:00:49:ba:2f:60:e3:b8:ba:0d:
                    6f:35:d3:bd:9e:bf:8a:71:d6:8d:fd:89:eb:65:7c:
                    c5:dc:2e:9b:b4:d8:c1:8a:ad:b2:aa:93:f8:71:34:
                    ed:53:5e:0e:d5:2d:95:ea:5b:78:88:51:76:d6:aa:
                    1b:4b:d4:25:be:68:5f:7d:ac:cf:72:2e:d7:ac:92:
                    05:5c:91:4a:fd:05:e4:02:58:0d:5f:58:c8:72:62:
                    90:c8:f0:fb:66:6a:9d:e1:95:6c:c5:3b:f4:ee:8c:
                    4c:ed:a9:93:d2:3a:24:b5:fc:86:83:61:6d:98:ee:
                    45:e1:db:6c:68:b9:fb:b2:3f:66:e1:61:5e:37:dc:
                    03:13:55:8a:a1:69:99:46:24:8a:33:df:d6:dc:5f:
                    64:e6:9c:69:73:90:8b:28:91:fc:f0:92:55:b2:26:
                    61:45:e7:90:48:bd:07:bf:47:9d:cc:54:42:32:bb:
                    4d:34:ba:46:c0:57:16:03:60:24:fc:45:7a:1f:89:
                    35:27:b5:24:b2:12:ad:6e:d5:3c:25:05:95:24:c0:
                    9e:b5:84:8e:84:02:f3:9e:05:c1:25:c0:a4:1c:64:
                    4c:60:7d:12:d4:10:5f:38:89:4c:51:3b:a7:3f:d8:
                    60:05:4f:19:12:c1:f7:81:67:c0:c3:d3:35:b3:a3:
                    69:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A4:D5:EF:07:54:19:0A:31:B4:AF:46:81:6F:08:8F:DD:51:8B:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/b7f48ec6-92e6-3b7c-a415-c3972c2a8792.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24/090cf75b-f998-45e2-a8ea-c4d882201d24.crl

            X509v3 Authority Key Identifier:
                keyid:14:9C:C7:07:9A:90:D7:69:1D:47:04:E9:AD:6D:E7:D7:CE:2C:7D:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/090cf75b-f998-45e2-a8ea-c4d882201d24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:54:46:d9:a5:ac:1e:ac:57:7b:19:e1:ab:0c:12:19:09:a5:
         60:2e:31:03:5b:1b:82:5e:28:67:d4:33:25:f3:8a:85:b4:ad:
         0b:e1:d9:6f:dd:a1:2a:0d:36:67:0f:f0:6b:f9:63:ac:1e:6f:
         9d:5b:83:ba:23:51:14:f4:21:5b:33:ea:c6:b2:26:3a:55:49:
         e7:19:76:35:ac:de:f5:74:26:8c:a5:0f:89:fb:a3:6b:ac:b3:
         b8:b3:38:83:87:d2:8f:a1:03:cb:5a:67:4a:53:25:9b:4d:a4:
         e5:dc:45:e1:b5:c1:50:42:3e:fa:a3:85:a0:79:4a:16:1d:df:
         4c:5f:db:e9:2b:19:cc:cd:20:1f:e6:e2:0b:e6:b7:54:49:b2:
         2e:cf:8d:16:07:e1:c8:94:e0:00:83:96:9b:eb:3c:ca:7b:e3:
         f6:47:6d:35:5f:02:f3:1d:f6:e1:6c:e2:56:f8:a9:6d:ad:d3:
         4c:98:2f:9b:2d:39:75:c4:26:8f:39:13:8d:ef:8c:35:5e:18:
         18:95:95:9b:38:0c:41:50:24:16:0b:2c:67:9f:3f:4d:d8:18:
         c5:ca:e2:da:ea:d7:f1:4d:91:c0:08:ac:cc:18:52:60:7c:99:
         6e:8f:e7:52:a6:58:29:55:a5:10:30:7f:37:c9:57:30:6e:73:
         aa:31:47:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:41:57 2026 by rpki-client