Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/5083f3b8-c172-3cbe-a7d5-77c304c2a6ef.roa
File:                     5083f3b8-c172-3cbe-a7d5-77c304c2a6ef.roa (raw, json)
Hash identifier:          N4STg3xWyrLngZsJ/Bq9N9jDj89mq8bYoMHhYPj+Sdo=
Subject key identifier:   25:36:85:E2:FE:BD:CD:A3:82:31:78:D4:1C:AB:66:84:33:88:8D:03
Certificate issuer:       /CN=a2ca3b16-f470-4287-8db9-b28e0667efdb
Certificate serial:       010D0C9F4328584F4972A59FBFEBE5FE1A13FFB3
Authority key identifier: 4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/5083f3b8-c172-3cbe-a7d5-77c304c2a6ef.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     43685
IP address blocks:        162.246.40.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Wed 07 Oct 2026 11:44:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:a5:9f:bf:eb:e5:fe:1a:13:ff:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ca3b16-f470-4287-8db9-b28e0667efdb
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=61ab2a4d-0219-47b3-8d04-800209e28b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1d:53:75:68:b7:4d:92:e9:f6:38:f8:6c:aa:
                    f9:b6:31:d8:16:fe:f1:51:b9:76:d3:e5:c5:32:bf:
                    97:ed:56:3b:13:05:70:d1:e0:7d:21:b8:80:06:66:
                    2f:81:0d:de:ff:54:e1:7a:0a:52:25:95:fd:08:93:
                    a2:8f:8e:75:6e:90:c4:98:c7:d9:90:f9:9c:3c:24:
                    fd:e9:c2:92:3f:5b:41:c5:73:e4:da:e9:0c:50:8a:
                    cb:7b:7c:de:aa:2f:62:31:76:c6:38:bb:ae:a3:7d:
                    c6:d8:7a:26:a2:49:95:80:a6:08:9f:3d:7f:6c:06:
                    ed:dd:8e:fd:27:34:0b:2b:9f:cf:ff:43:7a:78:3f:
                    dd:d0:f1:de:ba:59:d3:1f:29:00:ca:0c:b7:c6:0a:
                    6d:54:1f:27:32:c6:d5:19:51:fc:09:db:e8:e2:a5:
                    44:57:0c:e2:b7:1b:e2:5a:b2:8d:f3:f4:0a:21:df:
                    d2:7e:5f:25:e1:36:e4:3b:4f:e0:07:7b:61:68:b2:
                    d8:83:85:be:78:18:58:c4:24:91:c9:c2:a3:1d:88:
                    1c:0a:15:2d:87:fc:b5:4f:c3:74:26:81:07:88:9e:
                    ae:a7:78:37:81:ef:04:e5:43:28:52:0a:66:d8:fe:
                    eb:9d:6e:38:23:e3:a0:8a:c5:6d:42:14:f9:42:5d:
                    05:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:36:85:E2:FE:BD:CD:A3:82:31:78:D4:1C:AB:66:84:33:88:8D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/5083f3b8-c172-3cbe-a7d5-77c304c2a6ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb/a2ca3b16-f470-4287-8db9-b28e0667efdb.crl

            X509v3 Authority Key Identifier:
                keyid:4A:DD:6A:82:2A:1B:35:7E:F1:5B:84:25:E5:84:55:50:F9:42:68:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a2ca3b16-f470-4287-8db9-b28e0667efdb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:1a:ec:45:b4:ab:8c:c4:92:25:06:ea:97:fa:e2:2c:3e:96:
         85:1f:b5:5d:40:65:77:c7:b7:6d:ea:c4:f8:f0:7b:48:9f:4a:
         e3:5c:df:c6:f5:bc:3a:9c:93:58:86:46:47:8f:83:9d:43:5c:
         26:9b:02:43:54:ad:90:bf:98:89:da:95:90:b0:1c:96:29:b0:
         b7:bb:04:08:3b:81:9c:b9:93:ec:cd:f8:eb:0f:04:66:57:d6:
         c0:3d:88:8b:40:6e:7b:a6:33:65:81:d7:53:9b:69:18:21:11:
         e5:2a:bc:be:6e:ca:02:47:64:c5:88:2a:e6:b0:2b:f8:3b:03:
         fc:40:c1:d1:9a:79:75:bb:2b:a8:94:7a:cb:9d:e0:07:82:31:
         f4:6e:08:c1:69:af:9a:a2:a8:c6:41:be:b0:e9:8d:b9:a7:8d:
         02:82:28:72:e9:ab:5f:92:bb:47:34:aa:67:c4:7c:a5:8f:b3:
         8e:7c:f7:91:87:c9:1c:1b:38:c1:c3:d7:c9:a3:17:18:0c:5b:
         ee:a1:31:8c:7c:dc:6f:cf:d2:44:9a:71:cc:ab:6f:6f:be:9f:
         13:4d:c8:83:94:c8:7d:80:ff:fd:08:6a:89:68:1d:03:6d:f8:
         d6:61:6a:4d:a6:a0:9e:da:4a:b3:23:99:db:d7:ee:f6:4b:9c:
         19:e6:58:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:18:54 2026 by rpki-client