Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e20383334.roa
File:                     37342e3132302e31392e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          i+5b18GGUj3K+hwstZgzVRrVsZMGPmw72OJL/4hWjPE=
Subject key identifier:   85:1C:6B:6A:46:E2:91:E8:3D:C3:13:1D:E5:32:8E:F6:82:5D:DF:50
Certificate issuer:       /CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
Certificate serial:       419B4B4E5F3C8647F97180BCCA16D6D6EF4A0087
Authority key identifier: 7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e20383334.roa
Signing time:             Fri 17 Oct 2025 00:20:21 +0000
ROA not before:           Fri 17 Oct 2025 00:15:21 +0000
ROA not after:            Fri 16 Oct 2026 00:20:21 +0000
asID:                     834
IP address blocks:        74.120.19.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Sun 19 Oct 2025 12:52:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9b:4b:4e:5f:3c:86:47:f9:71:80:bc:ca:16:d6:d6:ef:4a:00:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850
        Validity
            Not Before: Oct 17 00:15:21 2025 GMT
            Not After : Oct 16 00:20:21 2026 GMT
        Subject: CN=851C6B6A46E291E83DC3131DE5328EF6825DDF50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9b:17:29:62:8c:49:a5:79:15:6f:b1:d7:eb:
                    ef:44:5a:4f:3c:9b:73:cf:36:56:0c:05:ee:a4:a1:
                    7b:99:ea:e0:b6:6a:b1:20:5d:79:3a:cf:99:1b:fa:
                    89:d9:65:81:1d:18:aa:5c:97:7f:f3:ff:de:f2:e4:
                    f6:d9:d3:1b:f8:76:35:05:3b:59:31:bb:00:c8:36:
                    30:ad:b9:aa:53:53:91:da:7c:db:85:82:a0:80:12:
                    9e:27:f5:11:fd:c7:c0:b4:c6:36:e0:30:42:57:16:
                    00:db:c8:51:ec:c2:07:09:62:9e:e4:4f:fd:ae:52:
                    4b:2d:27:b4:e5:dd:00:34:40:bd:de:d0:3f:0a:d0:
                    e6:af:b0:5a:41:ec:a6:ff:6b:d2:da:9c:bf:d5:bf:
                    6c:8b:52:66:fa:cf:9f:bb:da:5b:7e:e0:26:26:b3:
                    13:f2:a9:16:82:68:6f:94:d0:5b:e4:18:48:96:5c:
                    59:eb:bc:13:bb:b1:51:4b:ea:c2:01:97:38:cc:43:
                    85:4a:d8:5a:b7:1a:95:06:ea:80:91:68:6f:7f:cd:
                    c2:04:a4:38:49:61:32:11:13:a6:18:9a:9d:44:4f:
                    6c:6e:b0:da:91:70:25:ce:05:6a:9f:90:d3:6b:54:
                    0a:1d:28:86:a6:2e:19:b8:cd:32:b9:eb:d9:d8:02:
                    b9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1C:6B:6A:46:E2:91:E8:3D:C3:13:1D:E5:32:8E:F6:82:5D:DF:50
            X509v3 Authority Key Identifier:
                keyid:7E:6C:88:29:51:53:89:7E:BB:C1:19:07:16:BE:CE:84:A5:F7:E8:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/7E6C88295153897EBBC1190716BECE84A5F7E8B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f21bd9-2913-4d23-b9d1-20deb9b4fc7f/d66720c2c530537486911d1a42ea87c252f6dbc7d7bc211850.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6308f165beb4f0e8ec75f84faa31f17/0/37342e3132302e31392e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:7a:06:be:71:bd:ed:47:41:9d:2f:01:65:4f:bb:f6:ef:82:
         17:6b:ee:17:a7:03:36:78:2e:b1:f4:ed:1d:35:72:dc:9c:e0:
         bd:10:2a:66:30:1e:ed:1b:74:cf:af:a8:b3:3c:24:b4:a8:37:
         3e:5b:17:c3:68:14:1f:df:21:db:30:1d:35:89:3d:71:ee:f8:
         06:b6:88:c3:6c:ba:6b:61:2d:cf:78:88:a3:a5:ba:a4:7b:12:
         b4:23:0f:4d:cf:37:36:4b:00:f0:d8:3b:0a:76:72:03:c8:11:
         33:37:cb:6e:f8:83:e6:cb:b4:28:ae:f8:84:d3:5d:97:ef:89:
         95:e0:fa:94:33:38:02:69:03:dc:be:35:8f:a5:a1:53:24:32:
         c9:1d:66:66:af:ee:a4:65:14:93:a6:76:16:0b:db:af:ec:64:
         82:7f:cf:32:d0:17:82:80:b1:d7:c6:f1:5b:63:94:56:8b:01:
         e3:bc:3e:1d:da:bd:c7:de:52:70:ea:51:1b:71:19:41:ec:47:
         92:ab:12:dd:92:35:e1:f5:7b:c7:9c:c2:91:3c:31:30:59:cb:
         ec:eb:ef:8e:82:68:b3:3e:f4:ba:bb:3a:9c:46:cd:fc:be:07:
         8e:d7:6c:be:da:cc:04:cd:7c:3a:52:c2:34:cd:25:c9:0c:73:
         20:c1:50:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:24 2025 by rpki-client