Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2280eb8b-536a-3d7a-9281-6d66f3693b4c.roa
File:                     2280eb8b-536a-3d7a-9281-6d66f3693b4c.roa (raw, json)
Hash identifier:          CZ25W6B9ovoeJkd4p7zoLDmM0Nxqkr7C4H6lWFu/owc=
Subject key identifier:   E9:30:1D:C3:71:13:BB:10:DC:D7:2F:86:EC:BF:47:3E:02:89:DB:7C
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584EDC921D1B4FA0A4A896877E80
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2280eb8b-536a-3d7a-9281-6d66f3693b4c.roa
Signing time:             Mon 17 Aug 2026 01:00:12 +0000
ROA not before:           Mon 17 Aug 2026 01:00:12 +0000
ROA not after:            Sun 15 Nov 2026 02:00:12 +0000
asID:                     54839
IP address blocks:        2001:470:46::/48 maxlen: 48
Validation:               Failed, certificate revoked on Thu 03 Sep 2026 19:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:92:1d:1b:4f:a0:a4:a8:96:87:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Aug 17 01:00:12 2026 GMT
            Not After : Nov 15 02:00:12 2026 GMT
        Subject: CN=5e23cfa5-23d8-454c-8089-d99f3d05dc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:40:60:34:d9:c1:83:76:c4:67:ed:9d:9d:44:
                    e9:c4:6b:96:4a:3c:2b:48:92:79:fb:12:ef:f1:71:
                    ae:ab:d6:8d:93:9f:d0:9b:9b:45:74:74:b1:aa:28:
                    e4:26:9c:ce:b9:88:f6:9c:a9:b8:ed:54:73:2f:f7:
                    7c:65:38:fd:e0:70:e8:34:89:6c:c1:0f:e8:b6:a5:
                    59:07:13:e0:51:aa:d5:95:76:cb:db:a1:f7:c3:69:
                    44:15:6f:ed:53:08:fb:15:23:2e:eb:27:e3:2a:7b:
                    46:bd:38:db:0c:ee:9c:ee:30:fc:84:b3:5b:c3:2a:
                    27:8a:fe:38:e3:81:6e:ef:a3:7c:d3:71:52:2e:44:
                    9a:d6:35:59:74:0f:1b:3a:b1:fc:36:35:e3:3d:c8:
                    15:b1:b0:3d:c8:c0:36:81:e2:ac:20:c2:31:57:b9:
                    5f:04:fa:6a:17:fc:ad:72:84:db:08:33:3e:28:2b:
                    64:a2:fc:b2:f7:95:7e:ca:5d:49:71:0a:50:4c:d2:
                    76:0d:2b:83:b3:46:eb:25:39:0e:0e:89:55:f0:00:
                    88:1c:48:92:72:6b:45:0f:0d:22:87:eb:41:e2:22:
                    46:85:83:43:32:66:fb:d2:53:62:2e:07:28:f0:7f:
                    f5:1a:76:2a:f9:a0:30:04:af:35:03:69:3e:74:85:
                    b1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:30:1D:C3:71:13:BB:10:DC:D7:2F:86:EC:BF:47:3E:02:89:DB:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/2280eb8b-536a-3d7a-9281-6d66f3693b4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:470:46::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:2c:4e:a2:c2:9e:34:d1:77:38:52:e2:8f:9e:9f:4c:3c:e4:
         c8:ab:99:24:ce:ab:7c:0e:69:fe:69:e9:d5:07:e3:c3:e4:08:
         f6:9f:5b:64:10:50:56:3f:16:02:6e:6d:72:f0:6c:64:f0:f2:
         28:05:72:e6:aa:49:ff:10:18:ef:f0:8c:ca:a6:88:f0:9e:f7:
         9b:9b:58:80:a3:f5:2e:8a:8b:43:c1:9d:30:53:0a:8c:91:76:
         74:b4:b3:3b:e3:6e:eb:f5:89:bf:bc:b7:91:96:ef:fa:cd:73:
         62:ac:fc:b7:c1:11:46:32:79:5a:31:37:90:f8:26:dd:5b:51:
         44:94:63:2d:39:65:15:9e:d6:f3:22:10:a7:10:c9:9f:6d:b1:
         07:72:68:f5:63:e9:11:3a:a1:23:71:26:22:ee:73:f2:b4:4f:
         5e:91:bf:1e:bc:24:fd:e0:8f:57:cf:fd:b8:b7:b7:93:d9:6f:
         6a:c9:e9:b5:83:b2:cc:7e:b7:e1:8b:d4:b2:dd:da:eb:ee:e3:
         8c:e7:d4:55:4a:f4:b5:9a:41:73:af:dc:c5:10:60:de:6a:6c:
         99:b7:d9:18:4e:2a:3b:ac:29:a0:92:38:93:76:4c:75:80:66:
         9d:cc:10:45:84:6f:c2:38:74:71:90:f5:46:3a:f3:fa:26:30:
         26:01:f3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 22:41:01 2026 by rpki-client