Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fac5f39d-5a82-3ed9-ac68-ffd30264c4d5.roa
File:                     fac5f39d-5a82-3ed9-ac68-ffd30264c4d5.roa (raw, json)
Hash identifier:          QjYg2/b6xtgkLL32oOnAjDiH0g+QyiZgT2FzjBG9cwM=
Subject key identifier:   A0:0C:41:6C:1B:D4:D8:33:00:4E:E7:CA:71:0A:51:13:09:F3:8D:AA
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584FB6311F3999E29EB98643C880
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fac5f39d-5a82-3ed9-ac68-ffd30264c4d5.roa
Signing time:             Mon 02 Nov 2026 23:51:33 +0000
ROA not before:           Mon 02 Nov 2026 23:51:33 +0000
ROA not after:            Sun 31 Jan 2027 23:51:33 +0000
asID:                     9009
IP address blocks:        74.91.63.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Thu 05 Nov 2026 17:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b6:31:1f:39:99:e2:9e:b9:86:43:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Nov  2 23:51:33 2026 GMT
            Not After : Jan 31 23:51:33 2027 GMT
        Subject: CN=a4333761-8c81-413a-b7cc-0d75689c9b13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9b:2c:2c:17:8c:5f:4c:5f:9e:19:f4:30:78:
                    94:db:b7:9c:8c:d1:5b:f7:33:7d:61:d6:6e:e0:e0:
                    47:97:6d:92:3c:e4:a9:72:e9:dc:a1:ab:3e:1f:2a:
                    ec:7a:03:0d:49:42:b9:06:76:42:06:95:34:1c:09:
                    76:e4:e9:9a:16:73:df:1e:07:e6:8e:9c:f5:23:ca:
                    2b:f3:94:ba:02:49:14:c7:5a:5b:b3:75:3d:1c:d9:
                    c3:4c:b2:bc:fa:c7:c4:d5:8c:05:56:a4:21:4c:04:
                    95:11:5b:b0:f0:e9:9f:ea:87:36:4c:7a:81:c2:ea:
                    3d:ab:bc:f7:e3:27:ad:71:10:d4:39:3a:83:7e:2e:
                    c0:eb:6e:6d:13:05:18:2c:de:3e:3d:97:d9:98:60:
                    07:c6:71:22:45:2f:aa:ea:74:0d:4d:bc:eb:c8:33:
                    92:fc:81:ad:5f:db:6c:fd:94:58:a4:88:bc:45:48:
                    77:34:8c:79:68:30:b7:16:17:bd:63:26:8f:cf:48:
                    40:69:d9:50:21:10:67:bc:a9:97:d0:76:20:e7:4b:
                    13:d2:b9:37:59:01:01:1b:db:ae:41:c5:03:62:39:
                    91:ae:49:7c:ed:a1:d1:76:f5:df:ac:51:7c:40:1e:
                    e5:64:f9:ac:0c:cc:9f:41:84:4c:ee:9a:21:2e:a6:
                    55:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0C:41:6C:1B:D4:D8:33:00:4E:E7:CA:71:0A:51:13:09:F3:8D:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/fac5f39d-5a82-3ed9-ac68-ffd30264c4d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.91.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:3e:09:17:70:76:bf:53:48:e3:92:a5:14:48:5b:17:10:60:
         81:a5:be:cc:e2:95:f5:48:f9:da:bd:8b:15:2f:f1:70:45:96:
         88:1e:e7:6f:f4:80:98:af:00:54:7f:4c:50:61:c4:d2:39:70:
         bc:d4:db:18:47:fb:48:27:b1:cb:98:51:ce:54:ed:a5:d0:63:
         9e:af:ba:81:92:24:a3:63:b6:cc:0a:d0:ca:5a:e7:e8:ac:d9:
         d5:94:59:4e:7d:c6:6f:65:2a:3e:1d:96:9b:c8:c3:93:bc:7d:
         0a:86:dc:69:a1:9a:5e:22:2e:92:a8:a1:ac:2a:28:9b:5d:ff:
         d3:f3:e4:18:da:d0:26:a7:21:96:cc:22:3b:ea:90:a5:6c:53:
         87:5b:e7:ef:6f:9a:71:9f:24:15:1e:d2:8a:02:76:8e:21:de:
         1a:1e:80:4e:ce:21:da:8d:6e:ae:cd:ad:f7:fe:5f:3e:04:db:
         14:e2:b9:0f:9b:93:fb:88:ec:98:ca:b1:73:64:17:7e:f7:08:
         4b:3f:6c:db:8a:37:51:07:e1:c8:cd:9d:2d:a0:59:df:3b:22:
         bd:b7:5b:29:7e:4c:1a:78:92:75:95:f4:ca:d3:a2:b3:c1:48:
         7e:d3:64:a6:4c:5f:ca:34:dc:8c:af:6f:a0:1d:f5:2e:e2:a1:
         55:e2:28:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+2MR85meKeuYZDyIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM1OThjMTktOWQ4ZS00NjUwLWFiY2UtYzM0YzUxNDY1
OTFmMB4XDTI2MTEwMjIzNTEzM1oXDTI3MDEzMTIzNTEzM1owLzEtMCsGA1UEAxMk
YTQzMzM3NjEtOGM4MS00MTNhLWI3Y2MtMGQ3NTY4OWM5YjEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZssLBeMX0xfnhn0MHiU27ecjNFb9zN9YdZu
4OBHl22SPOSpcuncoas+HyrsegMNSUK5BnZCBpU0HAl25OmaFnPfHgfmjpz1I8or
85S6AkkUx1pbs3U9HNnDTLK8+sfE1YwFVqQhTASVEVuw8Omf6oc2THqBwuo9q7z3
4yetcRDUOTqDfi7A625tEwUYLN4+PZfZmGAHxnEiRS+q6nQNTbzryDOS/IGtX9ts
/ZRYpIi8RUh3NIx5aDC3Fhe9YyaPz0hAadlQIRBnvKmX0HYg50sT0rk3WQEBG9uu
QcUDYjmRrkl87aHRdvXfrFF8QB7lZPmsDMyfQYRM7pohLqZVbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKAMQWwb1NgzAE7nynEKURMJ842qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5
OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRjNTE0NjU5MWYvZmFjNWYzOWQtNWE4Mi0z
ZWQ5LWFjNjgtZmZkMzAyNjRjNGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZGM1OThjMTktOWQ4ZS00NjUwLWFi
Y2UtYzM0YzUxNDY1OTFmL2RjNTk4YzE5LTlkOGUtNDY1MC1hYmNlLWMzNGM1MTQ2
NTkxZi5jcmwwHwYDVR0jBBgwFoAUZJxII/ggNcM5/fDGWr3QRs2B+owwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kYzU5OGMxOS05ZDhlLTQ2NTAtYWJjZS1jMzRj
NTE0NjU5MWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASls/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALo+CRdwdr9TSOOSpRRIWxcQYIGlvszilfVI+dq9ixUv8XBFloge52/0
gJivAFR/TFBhxNI5cLzU2xhH+0gnscuYUc5U7aXQY56vuoGSJKNjtswK0Mpa5+is
2dWUWU59xm9lKj4dlpvIw5O8fQqG3Gmhml4iLpKooawqKJtd/9Pz5Bja0CanIZbM
IjvqkKVsU4db5+9vmnGfJBUe0ooCdo4h3hoegE7OIdqNbq7Nrff+Xz4E2xTiuQ+b
k/uI7JjKsXNkF373CEs/bNuKN1EH4cjNnS2gWd87Ir23Wyl+TBp4knWV9MrTorPB
SH7TZKZMX8o03Iyvb6Ad9S7ioVXiKEQ=
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:32:53 2026 by rpki-client