Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/59199354-83a2-31c2-b2f2-92489c24d9ac.roa
File:                     59199354-83a2-31c2-b2f2-92489c24d9ac.roa (raw, json)
Hash identifier:          /nMO3biu4EiXHaYM9SlGI8qQF7COsrgAGqKsdZw7A6Y=
Subject key identifier:   11:5A:E5:EB:35:79:D5:3A:9E:EB:44:77:24:93:D8:38:98:CE:6D:CA
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F4989AE2EC083BFE217AB4080
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/59199354-83a2-31c2-b2f2-92489c24d9ac.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     834
IP address blocks:        216.183.253.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Fri 25 Sep 2026 15:51:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:89:ae:2e:c0:83:bf:e2:17:ab:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=595f0264-db92-43c6-8d5f-4b9cff93ff47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:68:4c:de:f1:f0:e7:fa:93:0a:21:9d:31:60:
                    61:e4:6c:84:a9:5e:46:11:49:f3:14:8c:18:6d:ce:
                    0b:75:7c:ec:f9:ba:9d:9e:36:a6:40:15:b9:54:92:
                    6e:79:ed:c1:e5:c6:4e:e8:00:38:65:76:ec:01:28:
                    69:42:1c:5c:43:b4:07:7e:a2:4e:10:24:40:90:10:
                    86:95:98:02:ee:0c:88:38:93:97:37:09:21:cf:42:
                    9a:1c:32:7e:19:24:fc:37:79:9e:a6:3a:c9:47:80:
                    2c:ff:41:15:11:7a:63:9e:c9:c3:55:10:be:9d:18:
                    29:2c:5d:90:57:df:3c:95:a6:f7:62:7e:44:b9:c5:
                    24:6b:e1:9a:3d:79:71:95:5c:6c:ef:92:80:7f:07:
                    8b:dd:8c:81:d0:ad:4f:ed:ea:8e:20:f3:ea:22:e7:
                    f7:f3:b8:5d:b4:45:ff:59:6e:8f:af:ae:35:84:10:
                    20:31:0c:65:90:d7:69:c6:26:ae:39:39:54:45:c7:
                    0b:2f:35:d4:d9:8e:93:02:e0:26:37:96:4a:29:28:
                    9b:d6:86:31:40:85:3c:bc:6e:8f:b4:72:03:47:c5:
                    14:d8:be:ed:5a:81:5e:40:e9:fd:0f:84:f7:38:d8:
                    8c:09:b1:50:13:8e:ae:a2:b4:16:86:01:fd:60:62:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5A:E5:EB:35:79:D5:3A:9E:EB:44:77:24:93:D8:38:98:CE:6D:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/59199354-83a2-31c2-b2f2-92489c24d9ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.183.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:9c:4e:8e:51:75:39:2b:10:75:c3:57:ae:58:34:ac:18:19:
         33:81:f0:59:10:13:78:16:f1:e0:46:51:f3:a7:6e:5c:f3:5b:
         0b:71:23:4e:77:52:9f:de:19:f8:99:95:4f:69:fa:62:7c:08:
         19:7c:22:87:63:58:07:36:57:38:85:da:ab:fb:cd:b4:fb:7b:
         b6:6b:d5:a2:ba:7e:e6:1e:47:7e:2c:e4:fc:86:47:6e:55:6f:
         dc:aa:26:a8:64:95:3c:55:4c:b5:3a:01:ff:39:0a:7e:85:bd:
         45:7f:f3:26:b7:8b:de:15:56:92:ab:c8:c1:3f:ce:b9:56:2b:
         f6:f8:38:9d:1d:15:e9:33:4d:7a:32:f6:a1:ae:bc:6d:7b:ac:
         e4:22:c6:83:15:91:79:56:3c:71:a8:25:e5:42:59:93:42:77:
         4b:84:f1:47:6d:ee:fc:83:42:a6:39:a0:b4:0d:4c:68:e9:c8:
         8c:67:1b:9f:9c:87:16:b8:08:05:32:e6:d2:21:4e:62:2c:18:
         b7:ac:aa:6a:a1:ba:42:94:32:bb:45:d9:95:e0:29:f5:80:91:
         57:cd:dd:0c:4e:a3:a3:f6:c1:0c:dd:97:6a:ea:ed:d5:38:d4:
         d8:c7:a2:0a:22:ae:28:21:d2:61:64:b8:2a:a4:5a:eb:3e:34:
         73:82:eb:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jia4uwIO/4herQIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
NTk1ZjAyNjQtZGI5Mi00M2M2LThkNWYtNGI5Y2ZmOTNmZjQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWhM3vHw5/qTCiGdMWBh5GyEqV5GEUnzFIwY
bc4LdXzs+bqdnjamQBW5VJJuee3B5cZO6AA4ZXbsAShpQhxcQ7QHfqJOECRAkBCG
lZgC7gyIOJOXNwkhz0KaHDJ+GST8N3mepjrJR4As/0EVEXpjnsnDVRC+nRgpLF2Q
V988lab3Yn5EucUka+GaPXlxlVxs75KAfweL3YyB0K1P7eqOIPPqIuf387hdtEX/
WW6Pr641hBAgMQxlkNdpxiauOTlURccLLzXU2Y6TAuAmN5ZKKSib1oYxQIU8vG6P
tHIDR8UU2L7tWoFeQOn9D4T3ONiMCbFQE46uorQWhgH9YGIguQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBFa5es1edU6nutEdyST2DiYzm3KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvNTkxOTkzNTQtODNhMi0z
MWMyLWIyZjItOTI0ODljMjRkOWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Lf9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWcTo5RdTkrEHXDV65YNKwYGTOB8FkQE3gW8eBGUfOnblzzWwtxI053
Up/eGfiZlU9p+mJ8CBl8IodjWAc2VziF2qv7zbT7e7Zr1aK6fuYeR34s5PyGR25V
b9yqJqhklTxVTLU6Af85Cn6FvUV/8ya3i94VVpKryME/zrlWK/b4OJ0dFekzTXoy
9qGuvG17rOQixoMVkXlWPHGoJeVCWZNCd0uE8Udt7vyDQqY5oLQNTGjpyIxnG5+c
hxa4CAUy5tIhTmIsGLesqmqhukKUMrtF2ZXgKfWAkVfN3QxOo6P2wQzdl2rq7dU4
1NjHogoirigh0mFkuCqkWus+NHOC6xc=
-----END CERTIFICATE-----
Generated at Sun Oct 4 22:18:38 2026 by rpki-client