Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a96cc9f-684d-3801-a955-05bd23addfaf.roa
File:                     4a96cc9f-684d-3801-a955-05bd23addfaf.roa (raw, json)
Hash identifier:          4L8icsjuRZMMBtbN1HeXTcBgQsR/MAHJ2t7KInNY/QA=
Subject key identifier:   EC:BF:8C:B2:9E:87:F1:01:0C:67:F8:EE:20:FC:3E:1A:2B:50:96:55
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584F5E62C7D5CC89BA95A9643B80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a96cc9f-684d-3801-a955-05bd23addfaf.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     27887
IP address blocks:        2001:470:37b::/48 maxlen: 48
Validation:               Failed, certificate revoked on Fri 02 Oct 2026 19:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:c7:d5:cc:89:ba:95:a9:64:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=0ab936ef-bf3f-4f6d-943b-03fecbfd8bd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0d:f4:c3:62:0d:3b:8c:29:27:ee:98:15:21:
                    94:1b:ef:a5:39:0c:9d:48:cb:72:29:dd:39:cb:c1:
                    77:b7:2c:46:03:f9:44:3d:ee:b3:db:bd:55:78:17:
                    6a:5f:22:22:b5:eb:8f:e0:31:7e:fb:6f:06:9b:9f:
                    d4:b9:2c:35:ef:27:e5:5f:56:2a:a4:f6:84:d2:00:
                    95:1f:01:77:1e:04:f7:c7:c4:12:b2:69:cf:50:78:
                    83:80:02:d7:f7:8d:ea:92:dc:d2:39:07:0f:30:88:
                    24:7c:f2:2c:90:a4:71:b7:a3:8f:47:ff:db:3e:f7:
                    60:3c:24:7d:05:a8:8c:e5:f1:1b:e5:0d:c1:fd:ef:
                    2e:32:81:59:9d:5d:6b:83:b2:49:8e:53:d1:51:14:
                    4a:88:ba:e5:c2:cc:f6:7a:a4:79:99:1a:cd:25:2e:
                    8a:91:fd:8c:91:a8:27:e6:be:d7:ad:f2:9d:8d:5b:
                    39:d4:79:fa:11:e8:bc:06:88:32:b5:87:d3:74:fe:
                    37:11:54:08:a6:d1:70:7a:7c:34:98:b4:99:3a:63:
                    f3:35:d2:e9:2c:2f:ec:dd:6d:6d:6f:1e:09:3e:ee:
                    1c:16:0c:87:2e:c3:0e:52:8c:dd:8e:4b:49:a0:7a:
                    3d:f3:42:ca:c6:22:78:0e:be:80:e8:cf:77:af:0b:
                    00:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BF:8C:B2:9E:87:F1:01:0C:67:F8:EE:20:FC:3E:1A:2B:50:96:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/4a96cc9f-684d-3801-a955-05bd23addfaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:37b::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:10:59:88:1e:4b:c6:fb:ee:27:00:0d:99:c8:6c:7c:57:48:
         dc:7f:00:9a:e5:30:74:f3:c9:9c:20:3e:14:2f:40:47:82:a1:
         88:5c:c8:e4:8b:7a:25:53:4c:22:17:0f:4b:96:15:d4:ac:3d:
         ed:d8:df:96:95:12:a4:84:65:84:26:1a:d0:80:77:90:61:b1:
         a7:89:8d:44:63:82:ba:42:60:ab:71:4b:f3:65:12:0b:99:9d:
         d7:01:9b:0c:5e:a4:e2:cc:80:8d:bf:5c:63:09:e3:36:b4:e5:
         75:4a:11:bc:d1:31:64:9c:e3:6f:5a:d8:a5:b6:19:ec:1c:7f:
         04:93:c2:be:21:d5:0a:52:a5:aa:1c:8f:d3:e1:c4:51:87:96:
         77:06:d1:ba:52:a1:9b:3c:dc:24:c9:55:00:cd:12:2e:ed:35:
         0d:8f:3f:d8:63:d0:b0:83:25:eb:9b:bb:fb:1e:4d:ed:e7:35:
         29:f6:6d:b1:dd:b7:a0:38:cd:2c:50:a7:75:9a:06:c2:fa:a3:
         d5:02:04:2b:74:32:25:0e:10:d7:cc:ad:ad:65:07:df:f9:8c:
         3c:99:91:41:fc:9e:7d:c4:c2:c7:ed:f2:50:ed:a9:8f:0b:ce:
         b4:b3:38:0b:96:9f:51:39:a7:f3:09:b6:4a:9c:eb:33:70:de:
         ea:8d:8b:ed
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9eYsfVzIm6lalkO4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5
Y2FhMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
MGFiOTM2ZWYtYmYzZi00ZjZkLTk0M2ItMDNmZWNiZmQ4YmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Q30w2INO4wpJ+6YFSGUG++lOQydSMtyKd05
y8F3tyxGA/lEPe6z271VeBdqXyIiteuP4DF++28Gm5/UuSw17yflX1YqpPaE0gCV
HwF3HgT3x8QSsmnPUHiDgALX943qktzSOQcPMIgkfPIskKRxt6OPR//bPvdgPCR9
BaiM5fEb5Q3B/e8uMoFZnV1rg7JJjlPRURRKiLrlwsz2eqR5mRrNJS6Kkf2Mkagn
5r7XrfKdjVs51Hn6Eei8BogytYfTdP43EVQIptFwenw0mLSZOmPzNdLpLC/s3W1t
bx4JPu4cFgyHLsMOUozdjktJoHo980LKxiJ4Dr6A6M93rwsArwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOy/jLKeh/EBDGf47iD8PhorUJZVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw
YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNGE5NmNjOWYtNjg0ZC0z
ODAxLWE5NTUtMDViZDIzYWRkZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4
OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk
OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi
MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAN7
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALUQWYgeS8b77icADZnIbHxXSNx/AJrlMHTzyZwgPhQvQEeCoYhc
yOSLeiVTTCIXD0uWFdSsPe3Y35aVEqSEZYQmGtCAd5BhsaeJjURjgrpCYKtxS/Nl
EguZndcBmwxepOLMgI2/XGMJ4za05XVKEbzRMWSc429a2KW2GewcfwSTwr4h1QpS
paocj9PhxFGHlncG0bpSoZs83CTJVQDNEi7tNQ2PP9hj0LCDJeubu/seTe3nNSn2
bbHdt6A4zSxQp3WaBsL6o9UCBCt0MiUOENfMra1lB9/5jDyZkUH8nn3Ewsft8lDt
qY8LzrSzOAuWn1E5p/MJtkqc6zNw3uqNi+0=
-----END CERTIFICATE-----
Generated at Sun Oct 4 18:10:37 2026 by rpki-client