Route Origin Authorization
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/172c7094-50a9-3fd8-9365-0c5418a9bba1.roa
File: 172c7094-50a9-3fd8-9365-0c5418a9bba1.roa (raw, json)
Hash identifier: Fv0JDbJ7zky0LLJZ6B+tjakGOLO5BCrww08E5+doTHY=
Subject key identifier: 68:46:EC:07:37:B2:9F:FF:3A:BD:16:7D:75:55:D5:CD:BE:94:DF:9D
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584F4973492AC910B9B39E2B5B00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/172c7094-50a9-3fd8-9365-0c5418a9bba1.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 44559
IP address blocks: 23.230.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Oct 2026 07:57:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:49:2a:c9:10:b9:b3:9e:2b:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=5d391372-16cb-4539-95b5-8dde900e752d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:28:26:a7:87:11:cb:15:18:63:b8:e3:f0:
60:7e:2b:ad:97:a9:6f:d5:33:73:91:bf:78:67:fc:
80:d0:c4:83:a8:c7:67:43:c6:ee:73:3a:5b:4c:91:
03:fd:42:25:c3:d1:38:51:27:69:06:59:14:07:3b:
6a:e7:1f:3d:ba:60:5f:4a:f3:08:93:20:61:be:35:
df:69:9f:35:bd:1a:17:50:28:ee:11:a8:18:33:f9:
8d:b3:10:75:65:15:c8:f9:7f:0a:c7:07:e5:b0:b1:
d0:28:b1:ea:7a:77:85:7c:ab:e5:68:be:07:de:26:
36:0e:86:32:07:2b:96:38:15:93:1e:37:73:4b:a8:
9d:39:9b:b3:3b:a7:52:e4:b1:84:42:98:97:99:12:
26:ed:76:7b:97:86:1e:f9:b5:b5:dd:f4:1f:06:af:
74:e9:8a:6f:e2:da:dd:e5:85:69:bc:f3:54:25:4a:
7f:34:95:da:22:b0:cf:04:0d:6a:93:e0:c5:a0:6d:
26:88:73:c6:ce:d6:e8:b0:3c:92:73:43:28:02:ee:
21:39:c2:5b:65:99:26:ef:f8:18:c1:4e:d7:16:13:
84:db:5a:ad:64:0a:1c:32:ff:d9:b2:5d:25:0c:80:
48:8b:27:0c:7b:db:0c:37:58:bb:06:4f:ba:ee:99:
b8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:46:EC:07:37:B2:9F:FF:3A:BD:16:7D:75:55:D5:CD:BE:94:DF:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/172c7094-50a9-3fd8-9365-0c5418a9bba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.230.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:0e:54:c8:a9:3a:ae:7c:cb:40:40:5a:5f:f1:22:53:ea:84:
ce:bd:9c:51:d0:8a:9f:21:5f:eb:6a:da:8b:6a:d0:74:6d:5e:
63:ed:83:34:0e:cf:2d:76:0d:ca:2e:b5:ca:0b:99:d3:a3:7c:
bc:cc:44:89:af:7a:5e:82:3d:34:05:ec:20:5f:8e:a1:9d:d4:
0b:37:bd:f5:fb:42:2d:a5:ab:68:e7:a9:5f:ac:57:6b:df:d0:
b3:51:cd:bf:3e:6a:b1:05:9d:a3:c0:d0:3d:ca:67:10:84:34:
8a:da:a8:23:b5:68:c0:f8:bd:f8:1f:06:a0:07:c1:c2:a2:97:
fc:8b:73:1f:66:00:c0:31:5e:14:77:90:9d:bb:07:00:8e:98:
6e:bd:3b:a3:50:d1:6a:53:7d:17:27:55:4a:57:10:ba:18:b7:
ae:2d:48:31:10:83:21:97:8f:a8:8c:01:63:39:98:e6:40:5e:
68:24:bd:e0:4c:7a:bc:3c:c8:e6:46:ff:43:c1:1a:41:a9:73:
e6:95:1e:4c:a4:0f:f1:f4:cd:0c:86:d3:fa:f6:9a:e7:b9:35:
9a:1b:24:05:45:29:0f:81:03:eb:b8:cb:87:6f:8f:87:50:83:
61:49:af:36:7c:a7:3f:24:b6:9c:c2:83:fd:db:50:16:ae:f7:
de:e6:07:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc0kqyRC5s54rWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NWQzOTEzNzItMTZjYi00NTM5LTk1YjUtOGRkZTkwMGU3NTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV8oJqeHEcsVGGO44/Bgfiutl6lv1TNzkb94
Z/yA0MSDqMdnQ8buczpbTJED/UIlw9E4USdpBlkUBztq5x89umBfSvMIkyBhvjXf
aZ81vRoXUCjuEagYM/mNsxB1ZRXI+X8KxwflsLHQKLHqeneFfKvlaL4H3iY2DoYy
ByuWOBWTHjdzS6idOZuzO6dS5LGEQpiXmRIm7XZ7l4Ye+bW13fQfBq906Ypv4trd
5YVpvPNUJUp/NJXaIrDPBA1qk+DFoG0miHPGztbosDySc0MoAu4hOcJbZZkm7/gY
wU7XFhOE21qtZAocMv/Zsl0lDIBIiycMe9sMN1i7Bk+67pm4XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGhG7Ac3sp//Or0WfXVV1c2+lN+dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMTcyYzcwOTQtNTBhOS0z
ZmQ4LTkzNjUtMGM1NDE4YTliYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+ZYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIIOVMipOq58y0BAWl/xIlPqhM69nFHQip8hX+tq2otq0HRtXmPtgzQO
zy12DcoutcoLmdOjfLzMRImvel6CPTQF7CBfjqGd1As3vfX7Qi2lq2jnqV+sV2vf
0LNRzb8+arEFnaPA0D3KZxCENIraqCO1aMD4vfgfBqAHwcKil/yLcx9mAMAxXhR3
kJ27BwCOmG69O6NQ0WpTfRcnVUpXELoYt64tSDEQgyGXj6iMAWM5mOZAXmgkveBM
erw8yOZG/0PBGkGpc+aVHkykD/H0zQyG0/r2mue5NZobJAVFKQ+BA+u4y4dvj4dQ
g2FJrzZ8pz8ktpzCg/3bUBau997mBwM=
-----END CERTIFICATE-----
Generated at Sat Oct 10 18:34:36 2026 by rpki-client