Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/a1329374-ec17-30bb-bff1-58455f7e7ecb.roa
File:                     a1329374-ec17-30bb-bff1-58455f7e7ecb.roa (raw, json)
Hash identifier:          poM1IxWsRYs7xICUwWilSnmJSRc7KYyqqrpok3T3QX8=
Subject key identifier:   06:29:B4:A7:95:99:A1:D5:00:99:AC:2F:42:F9:A8:76:0E:B7:27:B0
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584EA776F4EB2A13C8C04E23E240
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/a1329374-ec17-30bb-bff1-58455f7e7ecb.roa
Signing time:             Wed 29 Jul 2026 00:28:11 +0000
ROA not before:           Wed 29 Jul 2026 00:28:11 +0000
ROA not after:            Tue 27 Oct 2026 00:28:11 +0000
asID:                     174
IP address blocks:        107.166.100.0/22 maxlen: 24
Validation:               Failed, certificate revoked on Mon 24 Aug 2026 21:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:76:f4:eb:2a:13:c8:c0:4e:23:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Jul 29 00:28:11 2026 GMT
            Not After : Oct 27 00:28:11 2026 GMT
        Subject: CN=d36af9cc-69cd-4680-88b6-6ab0b5458936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:a7:a6:90:b0:41:4f:ae:45:4e:0a:fb:c1:
                    f2:68:71:b1:0c:90:07:a7:a0:5d:21:8f:f4:5b:60:
                    e0:33:22:88:2c:5d:97:a3:ec:aa:72:f6:99:5e:ed:
                    51:92:c1:b7:e5:dd:0f:19:0b:2e:94:4a:6d:53:28:
                    5e:cc:a0:4d:dc:b1:dd:92:64:06:d2:f0:0b:e2:a9:
                    e2:a3:d3:50:8d:eb:ed:30:4c:9c:e2:9d:cd:3c:f3:
                    f7:68:80:55:98:14:26:ba:a2:28:89:cf:44:6f:3f:
                    88:24:5e:20:49:2b:2d:1d:57:31:f8:33:fe:59:99:
                    8b:d4:57:5c:78:e2:0e:dc:92:37:47:12:5f:33:f9:
                    e8:c6:b7:fd:4a:fa:03:43:64:20:73:8d:18:fa:79:
                    e7:3d:a1:89:02:0a:a1:99:bf:e8:b4:ae:68:a6:43:
                    b1:31:fb:3d:36:18:6c:ad:9e:7d:4d:0a:d7:fe:b6:
                    cb:75:26:7d:9f:28:25:fa:7c:06:d1:36:e1:44:64:
                    b3:c1:e8:fa:6e:18:a8:94:0d:23:8d:74:8a:ba:7b:
                    18:d5:42:cf:93:a9:3c:14:e4:bf:21:fe:b8:3a:04:
                    6c:ca:ad:7f:37:02:36:72:23:78:02:68:fd:aa:ea:
                    f1:37:dc:48:08:2f:b9:aa:af:37:cc:fe:53:6d:e6:
                    5c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:29:B4:A7:95:99:A1:D5:00:99:AC:2F:42:F9:A8:76:0E:B7:27:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/a1329374-ec17-30bb-bff1-58455f7e7ecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.166.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:1b:93:cf:da:59:72:f3:54:d0:18:de:76:f9:6f:7b:10:74:
         a3:d1:5b:77:93:5c:13:d4:90:f6:22:1b:ef:18:e0:d5:c5:8e:
         cf:d3:99:85:17:62:b9:c4:6a:fe:18:35:59:5f:b1:24:40:5c:
         e2:47:9a:c4:88:ff:b0:da:bf:73:d1:60:1b:fd:ba:bb:67:bb:
         d0:21:fc:ae:24:e6:d5:33:4e:00:68:75:1c:24:33:c8:bb:6e:
         e2:ea:57:be:36:b0:31:58:ad:1c:f3:33:c4:47:1a:a0:2d:c2:
         19:a5:d6:3d:23:4c:75:39:8a:cb:3f:10:29:93:57:2e:a0:b4:
         9b:62:de:ce:fb:d7:8c:04:68:f8:d8:50:db:08:1c:5c:41:0a:
         d2:83:55:0d:d8:0e:4e:07:1a:6a:03:38:bf:25:0b:6f:00:2f:
         5f:12:d6:a5:c4:9a:b4:08:37:5f:1c:b9:bd:3a:3c:9d:88:0e:
         fe:6e:c3:ed:1d:52:1e:92:99:d4:fd:66:e0:8f:3c:f1:a5:64:
         2a:82:7e:a4:e5:d4:ed:d1:7f:09:74:d5:65:0b:fd:4f:20:b9:
         09:b8:ce:c1:c5:53:9f:de:8c:d5:64:bd:da:c0:77:74:2a:2c:
         42:48:8d:d8:7b:0a:d6:60:3e:da:d7:03:33:73:35:ca:bf:09:
         ab:53:b1:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ndvTrKhPIwE4j4kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi
MDRkMB4XDTI2MDcyOTAwMjgxMVoXDTI2MTAyNzAwMjgxMVowLzEtMCsGA1UEAxMk
ZDM2YWY5Y2MtNjljZC00NjgwLTg4YjYtNmFiMGI1NDU4OTM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO6nppCwQU+uRU4K+8HyaHGxDJAHp6BdIY/0
W2DgMyKILF2Xo+yqcvaZXu1RksG35d0PGQsulEptUyhezKBN3LHdkmQG0vAL4qni
o9NQjevtMEyc4p3NPPP3aIBVmBQmuqIoic9Ebz+IJF4gSSstHVcx+DP+WZmL1Fdc
eOIO3JI3RxJfM/noxrf9SvoDQ2Qgc40Y+nnnPaGJAgqhmb/otK5opkOxMfs9Nhhs
rZ59TQrX/rbLdSZ9nygl+nwG0TbhRGSzwej6bhiolA0jjXSKunsY1ULPk6k8FOS/
If64OgRsyq1/NwI2ciN4Amj9qurxN9xICC+5qq83zP5TbeZcswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAYptKeVmaHVAJmsL0L5qHYOtyewMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3
YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvYTEzMjkzNzQtZWMxNy0z
MGJiLWJmZjEtNTg0NTVmN2U3ZWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi
ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw
YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2
N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa6ZkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABwbk8/aWXLzVNAY3nb5b3sQdKPRW3eTXBPUkPYiG+8Y4NXFjs/TmYUX
YrnEav4YNVlfsSRAXOJHmsSI/7Dav3PRYBv9urtnu9Ah/K4k5tUzTgBodRwkM8i7
buLqV742sDFYrRzzM8RHGqAtwhml1j0jTHU5iss/ECmTVy6gtJti3s7714wEaPjY
UNsIHFxBCtKDVQ3YDk4HGmoDOL8lC28AL18S1qXEmrQIN18cub06PJ2IDv5uw+0d
Uh6SmdT9ZuCPPPGlZCqCfqTl1O3Rfwl01WUL/U8guQm4zsHFU5/ejNVkvdrAd3Qq
LEJIjdh7CtZgPtrXAzNzNcq/CatTsQA=
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:29:49 2026 by rpki-client