Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/c3d715c4-a3ce-3ae9-bf53-7272aec5b7f8.roa
File: c3d715c4-a3ce-3ae9-bf53-7272aec5b7f8.roa (raw, json)
Hash identifier: 3mPccqZgBnAm2PYJWRIxkxJMCS1mFkgO35zy3xTTFZY=
Subject key identifier: 99:92:53:80:A9:74:58:91:43:F7:1C:97:39:7A:94:7D:BE:5C:78:AB
Certificate issuer: /CN=09a828ed-c9e2-481b-8715-41b4d5f5fa54
Certificate serial: 010D0C9F4328584CB657740A722F2A1091311F80
Authority key identifier: F4:37:B6:C3:2A:81:32:7F:7E:ED:33:F6:79:7C:DA:6C:75:71:13:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/c3d715c4-a3ce-3ae9-bf53-7272aec5b7f8.roa
Signing time: Mon 12 Jan 2026 17:21:32 +0000
ROA not before: Mon 12 Jan 2026 17:21:32 +0000
ROA not after: Sun 12 Apr 2026 16:21:32 +0000
asID: 394935
IP address blocks: 2602:f764::/40 maxlen: 40
2602:f764::/42 maxlen: 42
2602:f764:40::/42 maxlen: 42
2602:f764:80::/42 maxlen: 42
2602:f764:c0::/42 maxlen: 42
Validation: Failed, certificate revoked on Mon 09 Feb 2026 13:16:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b6:57:74:0a:72:2f:2a:10:91:31:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a828ed-c9e2-481b-8715-41b4d5f5fa54
Validity
Not Before: Jan 12 17:21:32 2026 GMT
Not After : Apr 12 16:21:32 2026 GMT
Subject: CN=1d4f2aee-2ed2-41d1-ab5f-ce83c7cab912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:32:5d:dd:fb:74:30:6f:c7:13:af:88:31:87:
96:40:7d:7f:4a:58:ab:06:92:98:a3:65:e3:20:a8:
92:6b:65:e2:1e:5b:e4:d7:d4:bf:eb:2d:ba:f4:6f:
03:49:46:83:6a:3c:16:9d:e9:d1:92:e3:af:41:7b:
c5:5f:f9:35:68:0a:be:ea:05:f2:e9:f0:4a:0e:55:
c4:72:d7:9f:01:58:9b:99:e4:7c:e1:cd:c0:bf:65:
40:2b:0d:c4:62:1d:33:0c:49:a1:2d:9e:ad:db:3f:
6a:8d:cf:ee:18:28:0b:e6:77:4a:77:83:67:a3:59:
41:29:97:93:52:11:e3:d7:e6:87:a3:62:c8:f1:22:
d3:dc:9a:95:cf:70:e7:3b:ec:78:3c:0a:3f:82:be:
3f:28:dc:a1:24:27:e9:ce:8e:d6:21:53:85:7b:3d:
08:21:3e:57:ec:73:b6:23:12:d4:26:57:72:51:21:
2b:cf:e0:cb:50:b5:a4:c4:87:b0:06:c0:c1:f8:be:
18:e7:cb:da:5c:32:2c:fb:62:00:20:29:74:c6:d4:
0c:fa:dc:0f:88:72:d4:96:b9:93:e8:ba:61:f4:25:
b6:ea:bd:bc:b2:d9:5a:2b:02:eb:09:8a:54:9b:d9:
20:3a:36:c1:70:45:e8:b4:8b:4d:ed:1d:ba:a3:97:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:92:53:80:A9:74:58:91:43:F7:1C:97:39:7A:94:7D:BE:5C:78:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/c3d715c4-a3ce-3ae9-bf53-7272aec5b7f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54/09a828ed-c9e2-481b-8715-41b4d5f5fa54.crl
X509v3 Authority Key Identifier:
keyid:F4:37:B6:C3:2A:81:32:7F:7E:ED:33:F6:79:7C:DA:6C:75:71:13:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/09a828ed-c9e2-481b-8715-41b4d5f5fa54.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f764::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:9f:de:d1:4a:b2:88:8d:00:b7:a5:c8:3a:c3:7a:bf:93:f9:
fb:13:c7:9e:41:e8:21:18:46:11:61:fb:e6:6c:ce:48:5d:31:
47:af:a9:a7:1e:9f:45:ec:f9:df:bc:7b:2a:ed:b3:c0:ee:7e:
2d:c5:dc:b5:d8:7a:d2:fe:5d:77:b9:73:ae:60:cb:3d:60:e6:
f7:87:07:93:f9:df:e3:15:73:73:08:26:88:29:f4:89:10:1c:
b8:8f:92:85:f8:59:89:52:13:f7:38:75:92:26:fe:24:9d:fe:
58:ed:f4:d5:7f:a5:b8:f7:78:87:9b:37:af:84:39:7e:21:cb:
f7:20:87:e4:96:32:14:53:f6:9d:31:b2:09:7c:56:1d:8a:4c:
dc:5a:07:0f:14:c2:7e:d6:e7:f0:e1:f9:4a:56:a5:dd:c1:67:
2e:e5:a8:71:cd:f3:80:3e:cc:bb:80:93:62:16:e3:82:5e:61:
8c:c7:05:ee:1c:aa:5b:38:49:3e:7c:48:53:38:26:1d:2f:a5:
4c:53:46:0c:c4:8c:14:ad:9f:b7:6a:9e:d4:c2:47:3f:95:3a:
02:06:56:fd:24:29:c7:e3:8c:46:05:3a:ef:13:86:1b:53:49:
34:fe:f8:f4:d7:b3:a9:dc:83:b0:77:8e:98:44:f7:0a:96:20:
79:1c:ff:da
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEy2V3QKci8qEJExH4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhODI4ZWQtYzllMi00ODFiLTg3MTUtNDFiNGQ1ZjVm
YTU0MB4XDTI2MDExMjE3MjEzMloXDTI2MDQxMjE2MjEzMlowLzEtMCsGA1UEAxMk
MWQ0ZjJhZWUtMmVkMi00MWQxLWFiNWYtY2U4M2M3Y2FiOTEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjJd3ft0MG/HE6+IMYeWQH1/SlirBpKYo2Xj
IKiSa2XiHlvk19S/6y269G8DSUaDajwWnenRkuOvQXvFX/k1aAq+6gXy6fBKDlXE
ctefAVibmeR84c3Av2VAKw3EYh0zDEmhLZ6t2z9qjc/uGCgL5ndKd4Nno1lBKZeT
UhHj1+aHo2LI8SLT3JqVz3DnO+x4PAo/gr4/KNyhJCfpzo7WIVOFez0IIT5X7HO2
IxLUJldyUSErz+DLULWkxIewBsDB+L4Y58vaXDIs+2IAICl0xtQM+twPiHLUlrmT
6Lph9CW26r28stlaKwLrCYpUm9kgOjbBcEXotItN7R26o5flVwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFJmSU4CpdFiRQ/cclzl6lH2+XHirMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wOWE4
MjhlZC1jOWUyLTQ4MWItODcxNS00MWI0ZDVmNWZhNTQvYzNkNzE1YzQtYTNjZS0z
YWU5LWJmNTMtNzI3MmFlYzViN2Y4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMDlhODI4ZWQtYzllMi00ODFiLTg3
MTUtNDFiNGQ1ZjVmYTU0LzA5YTgyOGVkLWM5ZTItNDgxYi04NzE1LTQxYjRkNWY1
ZmE1NC5jcmwwHwYDVR0jBBgwFoAU9De2wyqBMn9+7TP2eXzabHVxEzkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8wOWE4MjhlZC1jOWUyLTQ4MWItODcxNS00MWI0
ZDVmNWZhNTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL3ZAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAAp/e0UqyiI0At6XIOsN6v5P5+xPHnkHoIRhGEWH75mzOSF0xR6+p
px6fRez537x7Ku2zwO5+LcXctdh60v5dd7lzrmDLPWDm94cHk/nf4xVzcwgmiCn0
iRAcuI+ShfhZiVIT9zh1kib+JJ3+WO301X+luPd4h5s3r4Q5fiHL9yCH5JYyFFP2
nTGyCXxWHYpM3FoHDxTCftbn8OH5Slal3cFnLuWocc3zgD7Mu4CTYhbjgl5hjMcF
7hyqWzhJPnxIUzgmHS+lTFNGDMSMFK2ft2qe1MJHP5U6AgZW/SQpx+OMRgU67xOG
G1NJNP749NezqdyDsHeOmET3CpYgeRz/2g==
-----END CERTIFICATE-----
Generated at Thu Feb 26 22:49:08 2026 by rpki-client