Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31e64b2a-14b7-3e4f-9961-cddffb1d216d.roa
File:                     31e64b2a-14b7-3e4f-9961-cddffb1d216d.roa (raw, json)
Hash identifier:          /ksqqiygInOtXUaE1z19sg2sxratCHISDMPnjN4bpsc=
Subject key identifier:   69:53:11:76:4D:47:FC:8E:77:F7:50:02:EE:F9:E3:51:75:91:03:D1
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584CE877177FAE5FBBB63E1CF440
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31e64b2a-14b7-3e4f-9961-cddffb1d216d.roa
Signing time:             Wed 18 Feb 2026 21:42:08 +0000
ROA not before:           Wed 18 Feb 2026 21:42:08 +0000
ROA not after:            Tue 19 May 2026 20:42:08 +0000
asID:                     212238
IP address blocks:        75.153.85.0/24 maxlen: 24
                          75.153.116.0/22 maxlen: 22
                          75.154.124.0/22 maxlen: 22
Validation:               Failed, certificate revoked on Thu 19 Feb 2026 20:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:77:17:7f:ae:5f:bb:b6:3e:1c:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb 18 21:42:08 2026 GMT
            Not After : May 19 20:42:08 2026 GMT
        Subject: CN=53445e94-b741-478a-820e-94542d9f03db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:9c:ee:2e:38:c1:35:a5:b8:4c:43:78:12:6d:
                    36:a3:19:67:9b:1b:d3:dc:27:12:96:14:93:b8:44:
                    9e:ac:f3:2e:8a:23:96:5e:d8:79:79:15:d0:b7:47:
                    0b:e9:48:70:65:bb:04:10:12:f2:f2:d0:23:ea:7d:
                    9b:06:82:4f:d0:5c:1e:a3:5a:02:ca:aa:ca:52:44:
                    3a:cf:f2:b6:2e:6e:cb:3b:4a:72:8b:62:52:6b:aa:
                    0f:6b:5d:03:6a:ce:ef:3e:b3:c9:0c:a4:07:7d:71:
                    c5:c5:77:74:ca:76:02:67:e7:bb:d7:b2:67:a1:28:
                    3f:2a:4b:ee:63:db:01:4d:bf:a5:5c:02:be:83:30:
                    97:03:89:db:5d:34:4c:ad:89:49:ae:90:b1:d2:6c:
                    b9:74:01:da:77:2a:6a:66:7f:cc:b4:6b:5f:0f:c5:
                    ec:47:cc:22:fd:73:67:d9:e3:3a:e1:2c:7d:82:a1:
                    ed:7e:32:49:a6:cb:52:24:06:1d:8b:77:9e:50:a9:
                    69:ec:4c:94:45:fd:f4:0d:53:46:42:24:62:b9:ce:
                    95:65:2e:2d:e7:d2:d5:36:35:18:e5:05:e6:ee:51:
                    79:07:f9:9b:a7:98:72:0e:89:3a:06:8d:9e:e0:5b:
                    08:1e:a7:4a:bb:49:09:b3:fb:55:6b:87:42:b6:1a:
                    00:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:53:11:76:4D:47:FC:8E:77:F7:50:02:EE:F9:E3:51:75:91:03:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/31e64b2a-14b7-3e4f-9961-cddffb1d216d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.153.85.0/24
                  75.153.116.0/22
                  75.154.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:36:c0:ac:2a:d3:c1:30:78:37:48:94:ee:ed:1b:fd:5b:d3:
         2f:e3:1d:ff:7b:93:e9:d6:67:e4:6b:7d:07:2e:20:29:79:c5:
         a9:21:04:91:26:d7:ed:ef:52:43:f2:52:38:74:04:c0:63:29:
         09:88:94:88:6e:5c:84:04:9e:9f:36:b1:bd:39:29:65:a3:e4:
         65:2c:b6:ef:68:78:b0:db:cb:25:39:11:e7:dd:35:e9:fb:7a:
         73:5b:42:1e:f3:75:69:cb:11:6d:32:0b:72:91:85:e8:f2:7e:
         2a:11:af:9f:90:e0:bb:d5:0e:b2:b2:d1:a7:59:80:b3:e8:35:
         fc:2c:bc:5f:dd:23:1b:04:b6:a7:97:26:25:1b:3f:f1:83:8c:
         32:21:59:9a:39:c9:8b:94:e5:7f:b5:91:b7:70:aa:73:c7:7f:
         7b:1d:e6:91:e1:6d:fe:1f:40:b8:c4:23:39:58:11:84:b3:e8:
         91:40:29:68:88:0b:a4:60:b2:7d:77:d7:1a:0e:ee:c3:74:7d:
         ef:fe:d5:97:2d:d2:38:a4:99:00:0a:55:41:4f:dc:8f:a6:0a:
         4b:e3:88:0e:a4:dc:91:48:12:fc:37:78:c4:41:6f:bb:f4:c0:
         8b:80:06:dc:02:d8:a5:95:99:73:d3:57:66:93:ca:78:25:b2:
         e5:a4:1a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:05:51 2026 by rpki-client