Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ab930527-45bb-3f02-b459-de08a6046444.roa
File:                     ab930527-45bb-3f02-b459-de08a6046444.roa (raw, json)
Hash identifier:          9KQqaOrjIsSyApl4xM+NcCneO3Wd3jRNook/XjE2SeY=
Subject key identifier:   FE:D6:88:78:9E:E0:33:7D:40:F6:3D:E3:0A:04:B0:F2:57:15:0D:EA
Certificate issuer:       /CN=733b3827-4b45-47ba-8c40-32cde98dd068
Certificate serial:       010D0C9F4328584F635E4E8625CAB9DEFBF0CD00
Authority key identifier: DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ab930527-45bb-3f02-b459-de08a6046444.roa
Signing time:             Sun 04 Oct 2026 07:50:30 +0000
ROA not before:           Sun 04 Oct 2026 07:50:30 +0000
ROA not after:            Sat 02 Jan 2027 08:50:30 +0000
asID:                     18779
IP address blocks:        45.38.36.0/24 maxlen: 24
Validation:               Failed, certificate revoked on Wed 07 Oct 2026 06:48:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:63:5e:4e:86:25:ca:b9:de:fb:f0:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=733b3827-4b45-47ba-8c40-32cde98dd068
        Validity
            Not Before: Oct  4 07:50:30 2026 GMT
            Not After : Jan  2 08:50:30 2027 GMT
        Subject: CN=1e4976fb-edd0-41ec-bb11-72df8e56cf69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:db:92:48:31:3d:5e:3e:83:a3:c7:45:37:a2:
                    10:93:c5:58:5a:72:08:44:3b:00:69:f3:f4:9c:f7:
                    96:c3:b4:4c:f5:21:0b:9b:ee:9f:5d:b6:6a:71:20:
                    d0:3b:de:10:4e:2b:a3:ab:69:a9:59:6d:5d:23:37:
                    1b:d3:25:bc:98:ad:bf:65:4b:fe:14:1f:4a:c0:c2:
                    52:25:aa:8e:55:44:64:8f:86:b7:bf:ba:87:18:28:
                    ff:e8:18:12:fb:67:b9:0d:99:34:71:45:b4:f8:e7:
                    3c:1d:85:b2:37:b3:9a:41:1e:c1:7d:c1:05:69:8f:
                    89:a2:4e:f8:e2:56:b4:ab:59:a6:4a:aa:92:6b:80:
                    1e:f4:be:02:5d:93:a7:67:ab:da:70:8a:b4:20:38:
                    99:76:3b:c8:e6:89:1f:fc:a6:b6:fe:f9:e8:7a:e6:
                    f7:9e:94:55:c9:0c:0d:88:57:95:ff:d4:0a:0f:8b:
                    49:73:51:62:f5:6d:e9:de:88:f2:01:5e:0c:53:41:
                    7f:42:9b:7b:d8:e8:15:14:cc:bd:a0:83:d5:a7:ff:
                    97:56:44:7b:f8:b7:e7:2c:4f:42:89:b1:61:05:cb:
                    b5:03:4a:c1:7a:26:2e:8a:da:8c:af:46:25:43:1c:
                    8a:a2:58:d5:58:50:9f:db:e1:3b:9a:bb:b9:ad:d8:
                    37:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D6:88:78:9E:E0:33:7D:40:F6:3D:E3:0A:04:B0:F2:57:15:0D:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/ab930527-45bb-3f02-b459-de08a6046444.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068/733b3827-4b45-47ba-8c40-32cde98dd068.crl

            X509v3 Authority Key Identifier:
                keyid:DD:31:67:EA:9D:9E:96:36:F8:E7:12:98:F3:E0:CE:E8:42:78:9A:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/733b3827-4b45-47ba-8c40-32cde98dd068.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.38.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:51:cd:de:4e:ed:56:9c:89:49:a3:65:83:38:34:da:37:d6:
         e7:3f:18:7f:f8:f3:04:69:da:1f:67:ff:b9:ef:18:ad:05:27:
         76:01:e2:f8:57:53:36:a0:35:f9:d8:e5:9c:27:b1:f1:45:9b:
         47:b9:d6:27:71:bb:ed:53:9e:04:27:67:f8:ae:7f:d0:71:d9:
         70:57:d9:93:5a:8a:1a:cd:f0:b4:de:f0:b9:4f:88:4a:0c:42:
         48:15:11:3e:e9:46:00:17:62:b9:10:b2:b4:66:35:08:66:34:
         f0:6e:cd:2e:92:94:14:9d:fa:eb:76:96:44:35:1b:a6:bd:a8:
         d4:ef:d4:7e:1f:0b:d9:d2:e1:6c:30:2d:5e:eb:d2:09:7e:3c:
         84:29:a3:07:6f:9b:d0:ac:34:b9:4b:71:ec:1a:8d:2e:4f:d2:
         f2:23:78:96:09:ee:64:61:16:d1:e5:a7:d1:da:a3:cc:1d:b8:
         55:05:d7:e0:75:17:3b:e5:d0:5c:75:1b:b7:66:e0:c4:4c:69:
         61:74:37:09:34:ad:07:52:e4:e9:3c:db:fe:62:de:39:b9:81:
         98:04:11:ac:c0:6a:b6:a9:3b:60:cc:d5:32:4a:17:08:ef:68:
         c6:d0:bb:c5:42:6f:73:fb:64:af:f9:84:a0:f1:6d:e9:d2:fd:
         97:41:45:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:02:21 2026 by rpki-client