Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5eca54c3-93bc-3b9a-b587-9d1013e7995c.roa
File:                     5eca54c3-93bc-3b9a-b587-9d1013e7995c.roa (raw, json)
Hash identifier:          VexYeU6AdWE/vukOwudW4zDE3jJ5OOFROiA7UybqoQA=
Subject key identifier:   F1:23:79:F4:10:0B:67:83:72:B6:71:DE:95:BB:72:01:05:76:A5:E3
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D275B69C8E59DAF5A83937E00
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5eca54c3-93bc-3b9a-b587-9d1013e7995c.roa
Signing time:             Fri 13 Mar 2026 10:22:17 +0000
ROA not before:           Fri 13 Mar 2026 10:22:17 +0000
ROA not after:            Thu 11 Jun 2026 10:22:17 +0000
asID:                     174
IP address blocks:        216.132.95.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Mon 23 Mar 2026 15:19:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:5b:69:c8:e5:9d:af:5a:83:93:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 13 10:22:17 2026 GMT
            Not After : Jun 11 10:22:17 2026 GMT
        Subject: CN=3494b6ba-1113-4262-a11f-2d24274bbad3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:b0:5d:03:9a:d3:e0:a2:ee:c0:8d:13:7a:
                    70:eb:82:bd:ad:d5:b2:93:31:67:68:13:33:3a:b4:
                    92:1e:aa:c6:76:4d:8f:e0:56:cf:c8:38:58:18:6b:
                    bc:96:f9:74:0b:4c:64:6e:8d:92:ee:60:d6:f5:3f:
                    5d:e3:5e:41:1a:d7:f5:d3:ac:cb:9d:43:01:10:3b:
                    f8:c7:51:2f:f2:86:b0:b8:a6:5b:f3:73:bf:7d:26:
                    d0:4e:44:ab:b4:19:e6:19:b2:ad:c3:10:44:69:e1:
                    a9:84:0d:ca:42:e3:4a:6b:6b:bc:d0:45:81:5d:1d:
                    64:56:65:20:b1:05:b5:fc:62:5d:15:39:c3:b1:d7:
                    6a:3a:52:b0:c3:62:c0:c9:ae:49:14:56:7c:30:1c:
                    40:41:0c:1c:c3:90:42:21:0f:e7:d5:5d:13:f0:e9:
                    13:cb:34:fd:0c:4a:86:36:5b:fb:c8:da:08:61:c0:
                    a7:f1:9b:70:6e:d4:19:17:2f:79:9a:43:2f:bd:af:
                    9e:da:66:f0:2d:65:a0:58:04:85:98:e1:13:aa:a5:
                    73:fa:d8:cc:6a:c4:b2:1c:c7:bd:28:a9:1f:f3:c2:
                    cc:02:f1:5e:96:ff:e0:6f:17:b2:96:15:98:07:fa:
                    88:62:19:9f:60:bf:0f:c9:f4:90:3c:eb:24:af:12:
                    bf:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:23:79:F4:10:0B:67:83:72:B6:71:DE:95:BB:72:01:05:76:A5:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5eca54c3-93bc-3b9a-b587-9d1013e7995c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:2a:53:b6:69:2f:50:45:91:41:ff:c4:42:ba:f0:8c:e8:75:
         b5:1b:ab:be:47:d2:7f:f3:b8:01:63:d5:54:f4:18:5a:cc:e1:
         21:2c:a0:a4:2c:df:62:49:9f:93:3d:9f:40:1d:a3:7a:cd:0e:
         fc:20:e1:56:6a:54:e9:2b:70:2f:0d:43:32:46:1e:c7:6e:e1:
         16:40:40:73:14:17:77:c3:93:ec:e7:44:f3:14:47:b6:22:c0:
         d8:76:6c:31:2d:ea:f0:2e:4c:84:07:f3:60:f2:89:d5:c5:b0:
         be:84:4b:f2:42:a8:da:86:4a:c1:fe:a4:a2:a0:9b:7b:13:d4:
         11:5c:26:cb:7a:ec:a6:aa:1d:5c:14:c5:e2:f5:37:42:89:f4:
         b6:87:ed:a8:a8:77:7e:1a:9c:f9:b3:21:93:ec:07:a9:d2:64:
         cc:8b:bf:09:d3:fc:ff:02:8e:66:77:d2:e1:ff:6f:e3:a8:60:
         72:fd:3f:d8:c4:4f:e4:5c:ab:90:86:72:16:1e:cd:e9:44:7c:
         73:91:58:fe:e1:e7:1b:85:24:5e:00:f1:b1:6b:d7:6c:91:6c:
         29:1f:df:6e:d8:a0:77:0a:3d:29:09:e8:84:91:25:04:1e:39:
         af:5d:14:57:cb:a6:bd:18:8b:8a:5f:87:10:f7:d0:ce:a4:ee:
         61:e2:69:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0nW2nI5Z2vWoOTfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDMxMzEwMjIxN1oXDTI2MDYxMTEwMjIxN1owLzEtMCsGA1UEAxMk
MzQ5NGI2YmEtMTExMy00MjYyLWExMWYtMmQyNDI3NGJiYWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/iwXQOa0+Ci7sCNE3pw64K9rdWykzFnaBMz
OrSSHqrGdk2P4FbPyDhYGGu8lvl0C0xkbo2S7mDW9T9d415BGtf106zLnUMBEDv4
x1Ev8oawuKZb83O/fSbQTkSrtBnmGbKtwxBEaeGphA3KQuNKa2u80EWBXR1kVmUg
sQW1/GJdFTnDsddqOlKww2LAya5JFFZ8MBxAQQwcw5BCIQ/n1V0T8OkTyzT9DEqG
Nlv7yNoIYcCn8ZtwbtQZFy95mkMvva+e2mbwLWWgWASFmOETqqVz+tjMasSyHMe9
KKkf88LMAvFelv/gbxeylhWYB/qIYhmfYL8PyfSQPOskrxK/sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPEjefQQC2eDcrZx3pW7cgEFdqXjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvNWVjYTU0YzMtOTNiYy0z
YjlhLWI1ODctOWQxMDEzZTc5OTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IRfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUqU7ZpL1BFkUH/xEK68IzodbUbq75H0n/zuAFj1VT0GFrM4SEsoKQs
32JJn5M9n0Ado3rNDvwg4VZqVOkrcC8NQzJGHsdu4RZAQHMUF3fDk+znRPMUR7Yi
wNh2bDEt6vAuTIQH82DyidXFsL6ES/JCqNqGSsH+pKKgm3sT1BFcJst67KaqHVwU
xeL1N0KJ9LaH7aiod34anPmzIZPsB6nSZMyLvwnT/P8CjmZ30uH/b+OoYHL9P9jE
T+Rcq5CGchYezelEfHORWP7h5xuFJF4A8bFr12yRbCkf327YoHcKPSkJ6ISRJQQe
Oa9dFFfLpr0Yi4pfhxD30M6k7mHiaYw=
-----END CERTIFICATE-----
Generated at Thu Apr 16 01:23:38 2026 by rpki-client