Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3acf301c-9ec5-387a-aab4-0c7bec71a379.roa
File:                     3acf301c-9ec5-387a-aab4-0c7bec71a379.roa (raw, json)
Hash identifier:          dT9KRS7hNApy0uzyivKeJO4oz/ayba6NcOotz+Kcf6s=
Subject key identifier:   F1:69:31:22:BD:8C:A7:8D:1F:C3:6E:F6:DD:18:9B:D3:3A:A4:3B:2B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F3FAD6A460AD64A9C672C5080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3acf301c-9ec5-387a-aab4-0c7bec71a379.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     701
IP address blocks:        192.48.96.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Tue 22 Sep 2026 11:03:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:6a:46:0a:d6:4a:9c:67:2c:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=ad9d2251-b3cb-4844-8ba4-f594102a0584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8b:11:01:dd:66:4a:ed:6e:e1:2a:95:99:2b:
                    18:85:ef:e8:74:af:36:67:c0:63:a3:14:39:f7:f2:
                    ef:5e:c5:b2:b0:74:a0:99:98:85:bd:4e:a2:07:9e:
                    dc:90:4a:fd:b6:c5:23:27:15:2c:97:05:59:a4:c1:
                    74:65:de:18:63:70:87:67:18:42:76:00:f4:62:9b:
                    90:dd:2d:83:0a:3d:ee:8c:af:0d:10:c1:48:91:70:
                    00:68:3f:22:dc:26:c0:3d:09:26:cf:af:22:bb:60:
                    18:6b:ef:11:7d:07:e3:15:60:35:53:82:8d:91:ad:
                    16:97:bb:8c:c3:d7:a0:9f:8b:83:e8:21:eb:12:bd:
                    a6:af:f7:53:f6:e6:f5:8b:8a:a2:da:8f:89:ac:42:
                    0d:25:04:86:5a:3b:4d:fc:33:39:03:47:a7:13:15:
                    1e:ee:02:c8:23:2d:d1:da:fb:80:24:32:2c:6a:b9:
                    91:29:7b:55:74:73:3b:ea:bb:61:a0:90:2c:a0:62:
                    a6:45:70:fd:31:e2:3e:34:0a:f3:69:b2:bc:1b:3b:
                    db:9f:d7:81:de:50:f9:9b:36:df:4c:12:43:dd:af:
                    c7:32:f2:62:bd:d1:ac:a4:04:f0:89:7c:a8:25:0c:
                    37:43:34:26:6e:e1:be:6b:8e:18:46:90:94:7d:d5:
                    04:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:69:31:22:BD:8C:A7:8D:1F:C3:6E:F6:DD:18:9B:D3:3A:A4:3B:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3acf301c-9ec5-387a-aab4-0c7bec71a379.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.48.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a7:ac:bb:67:e6:17:ba:34:88:97:63:71:cd:e6:f8:a1:33:
         af:0a:64:1a:e7:85:4e:05:51:b3:af:73:61:37:bf:bc:00:f1:
         60:e2:29:70:17:da:cf:0a:33:ae:96:95:b2:f4:55:49:d6:a6:
         57:fc:f8:d6:ef:fb:65:e4:60:d6:d5:cf:4d:10:5b:48:25:76:
         83:7a:07:88:ca:25:46:96:a9:03:3a:c8:e8:7a:d5:2d:72:0d:
         52:45:3c:65:e1:93:f5:6b:41:7c:90:3e:62:11:52:c3:a0:9f:
         81:09:26:94:70:d1:b1:35:4e:47:b3:aa:39:2d:90:c4:93:76:
         8c:e1:fe:5b:37:84:92:ba:4d:6d:a0:5b:a8:6c:03:9e:9b:96:
         99:b1:6f:17:67:46:e8:d7:e2:03:fc:13:86:8a:bc:4c:e8:65:
         02:a0:5d:ba:ca:51:3d:99:26:26:c7:66:7a:4d:80:b2:12:cd:
         ab:63:60:c3:9c:89:f9:b7:49:d4:68:ec:72:4b:36:4e:20:5c:
         41:1b:d9:c0:25:a9:c8:66:df:42:c4:63:4a:d3:72:50:ae:87:
         dc:4e:23:1b:e3:c8:ec:cd:51:00:8f:1e:1e:48:18:36:10:16:
         74:46:19:33:ba:cf:79:f1:55:2a:71:09:24:9a:9c:ff:a2:89:
         d5:b2:f4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 16:40:41 2026 by rpki-client