Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6908b04b-ef55-3011-b617-e39b6b77834f.roa
File:                     6908b04b-ef55-3011-b617-e39b6b77834f.roa (raw, json)
Hash identifier:          nbIYrZ9jQJzs7/jGL0E/i84PURJeSeOdkDM49nP5KPU=
Subject key identifier:   BF:AF:15:AE:9C:22:D8:C9:92:BC:D7:FD:2A:A0:3A:7C:F5:B8:1E:F1
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F1AAE019FD3709AB0BCF72000
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6908b04b-ef55-3011-b617-e39b6b77834f.roa
Signing time:             Tue 08 Sep 2026 06:57:04 +0000
ROA not before:           Tue 08 Sep 2026 06:57:04 +0000
ROA not after:            Mon 07 Dec 2026 07:57:04 +0000
asID:                     6461
IP address blocks:        50.3.128.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 22 Sep 2026 16:52:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1a:ae:01:9f:d3:70:9a:b0:bc:f7:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  8 06:57:04 2026 GMT
            Not After : Dec  7 07:57:04 2026 GMT
        Subject: CN=69eb7ddf-de26-4c4e-854a-0355d9576460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:92:d0:c1:5f:d7:98:49:3c:7b:8a:e1:80:6c:
                    d8:d4:20:1e:04:df:0e:a1:14:a4:27:5c:ed:5c:b8:
                    ed:00:e4:50:c7:18:07:f8:bb:f1:71:9f:f1:4a:6c:
                    f6:f3:43:2f:86:db:1e:2c:da:8d:18:ef:76:25:b8:
                    24:7c:0f:ea:c8:67:52:f9:f0:e8:40:6d:68:88:4e:
                    b2:d7:67:2a:61:b7:a3:99:c4:9f:aa:80:7f:c8:b5:
                    0c:8c:b5:81:f4:ac:a1:ad:12:37:da:13:21:23:b7:
                    d5:9c:f6:e1:25:a3:19:bd:9d:c2:91:3f:15:14:73:
                    da:59:d8:b1:ba:26:4c:2b:ed:d3:93:96:b2:d6:c9:
                    65:bb:9c:1e:5a:56:3e:eb:c8:3e:49:ea:6d:6a:ee:
                    9b:f4:bf:64:d8:8b:76:2e:4e:67:cb:cf:7e:c5:3f:
                    df:de:10:9a:cd:84:06:40:f1:57:de:90:81:e2:b8:
                    42:99:3b:b9:b2:75:63:2a:74:e7:c8:55:e8:af:85:
                    e6:6c:a6:fb:60:75:f9:6b:e9:93:20:bc:65:75:b2:
                    65:26:db:0f:a4:1a:39:5d:1f:34:06:86:dc:bc:2e:
                    9a:5d:41:c3:19:42:5a:ea:be:4d:d4:1a:6d:77:a4:
                    68:27:cb:7d:27:c8:53:4d:9b:6e:5b:d8:f4:ad:4b:
                    30:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AF:15:AE:9C:22:D8:C9:92:BC:D7:FD:2A:A0:3A:7C:F5:B8:1E:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6908b04b-ef55-3011-b617-e39b6b77834f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.3.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:1d:64:e1:6b:5b:b2:5a:29:16:7c:5f:cc:09:6d:d8:1a:26:
         ae:7c:f3:34:44:48:bf:e5:3c:5b:83:75:e8:79:7e:c0:f0:5a:
         f6:ce:1f:5c:22:f0:df:c2:91:2a:88:fa:38:90:34:17:69:69:
         a4:1b:6d:0d:1b:a7:b6:79:06:85:81:7f:24:46:9e:35:25:d2:
         6d:2d:b6:10:6b:a9:31:c6:31:69:e8:a5:a3:c9:c0:1b:44:8b:
         91:ba:9c:a5:3a:a6:08:6e:74:23:55:5b:60:96:36:e2:2c:db:
         8d:d9:1b:4d:07:c0:24:0b:0c:ed:c6:a8:b9:0c:26:8d:fc:40:
         0c:d1:03:c4:f6:80:8b:9a:67:18:29:8f:3a:bb:78:0f:3a:92:
         bc:8a:e9:c2:bf:a6:4c:c4:91:07:2d:5d:bc:6b:a0:19:52:73:
         6b:fe:0c:cd:b0:68:88:30:dd:56:2c:a0:c8:69:9b:6f:b0:c8:
         9a:0e:0e:a0:59:5a:56:8d:ac:0a:3b:5f:4f:c1:d3:bd:2e:c4:
         6d:18:22:af:e7:73:d9:46:dd:c5:e4:ba:00:65:b1:6b:a7:bd:
         b9:3d:32:b5:90:5e:3d:24:55:f1:7a:93:5d:5e:7e:df:ab:e4:
         33:03:2f:cd:e1:91:00:a8:65:fb:87:8a:b0:e4:ed:00:9d:80:
         64:dd:c9:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8argGf03CasLz3IAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI2MDkwODA2NTcwNFoXDTI2MTIwNzA3NTcwNFowLzEtMCsGA1UEAxMk
NjllYjdkZGYtZGUyNi00YzRlLTg1NGEtMDM1NWQ5NTc2NDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pLQwV/XmEk8e4rhgGzY1CAeBN8OoRSkJ1zt
XLjtAORQxxgH+LvxcZ/xSmz280MvhtseLNqNGO92JbgkfA/qyGdS+fDoQG1oiE6y
12cqYbejmcSfqoB/yLUMjLWB9KyhrRI32hMhI7fVnPbhJaMZvZ3CkT8VFHPaWdix
uiZMK+3Tk5ay1sllu5weWlY+68g+Septau6b9L9k2It2Lk5ny89+xT/f3hCazYQG
QPFX3pCB4rhCmTu5snVjKnTnyFXor4XmbKb7YHX5a+mTILxldbJlJtsPpBo5XR80
BobcvC6aXUHDGUJa6r5N1Bptd6RoJ8t9J8hTTZtuW9j0rUsw4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL+vFa6cItjJkrzX/SqgOnz1uB7xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNjkwOGIwNGItZWY1NS0z
MDExLWI2MTctZTM5YjZiNzc4MzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAMgOAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF4dZOFrW7JaKRZ8X8wJbdgaJq588zRESL/lPFuDdeh5fsDwWvbOH1wi
8N/CkSqI+jiQNBdpaaQbbQ0bp7Z5BoWBfyRGnjUl0m0tthBrqTHGMWnopaPJwBtE
i5G6nKU6pghudCNVW2CWNuIs243ZG00HwCQLDO3GqLkMJo38QAzRA8T2gIuaZxgp
jzq7eA86kryK6cK/pkzEkQctXbxroBlSc2v+DM2waIgw3VYsoMhpm2+wyJoODqBZ
WlaNrAo7X0/B070uxG0YIq/nc9lG3cXkugBlsWunvbk9MrWQXj0kVfF6k11eft+r
5DMDL83hkQCoZfuHirDk7QCdgGTdya4=
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:07:14 2026 by rpki-client