Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15287.roa
File:                     AS15287.roa (raw, json)
Hash identifier:          Couep2+f0oX/0XyzVeFpqprUdiXogMhoEoNcPvCT39g=
Subject key identifier:   77:91:E7:87:28:02:9B:63:4B:4E:96:C8:B1:7A:76:7E:29:EF:F3:65
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3CD2278234AB7E8DFBDA600F386F0B6F5BF0B112
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15287.roa
Signing time:             Wed 26 Mar 2025 15:04:29 +0000
ROA not before:           Wed 26 Mar 2025 14:59:29 +0000
ROA not after:            Wed 25 Mar 2026 15:04:29 +0000
asID:                     15287
IP address blocks:        157.254.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:12:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:d2:27:82:34:ab:7e:8d:fb:da:60:0f:38:6f:0b:6f:5b:f0:b1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 26 14:59:29 2025 GMT
            Not After : Mar 25 15:04:29 2026 GMT
        Subject: CN=7791E78728029B634B4E96C8B17A767E29EFF365
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:53:09:97:6b:1f:6b:14:6d:d0:08:9b:74:a1:
                    fe:1d:f1:f3:53:b7:5d:15:1e:e3:97:95:19:04:2f:
                    3d:0e:a0:26:94:73:3e:5d:7a:12:0b:86:5b:97:12:
                    a7:ce:ae:c2:81:f1:7d:16:bd:bb:fe:f2:1c:d8:6c:
                    32:db:cf:54:b6:8d:15:75:9d:39:56:c4:bf:f2:29:
                    42:fc:c9:7c:39:4c:71:67:03:7c:e1:b2:48:f6:e5:
                    92:03:b7:fe:08:3b:cc:91:b5:b4:dd:57:39:10:96:
                    01:a6:c6:8d:f2:e3:07:f9:49:91:9c:6c:6a:d1:ec:
                    42:f2:ec:12:e4:5f:a1:31:68:43:e3:89:67:f3:0c:
                    06:5a:b7:73:c0:11:d0:b2:c4:a3:56:93:8b:7b:e4:
                    bb:b7:2a:75:7c:f8:6a:74:66:a5:16:bf:0c:61:33:
                    40:17:b0:f5:0b:da:38:f4:fa:f4:24:71:78:66:a8:
                    1d:6d:3b:84:82:a1:3a:b6:51:1e:cd:fe:ab:ff:2e:
                    39:1c:13:01:e3:96:7f:97:27:36:86:19:56:4d:cb:
                    63:f5:14:e6:0e:c5:b0:42:30:d1:0c:a7:2c:48:a2:
                    8c:7c:58:91:f6:82:68:cd:11:8b:99:76:04:e0:d2:
                    6e:e5:11:87:de:47:c0:fb:bc:aa:fd:54:90:f5:93:
                    c9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:91:E7:87:28:02:9B:63:4B:4E:96:C8:B1:7A:76:7E:29:EF:F3:65
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:a7:9e:c9:9c:af:cd:e1:c9:25:66:7a:e1:ee:93:e0:25:08:
         16:8b:3e:b9:7b:cb:13:ff:41:6e:f8:69:d6:e7:5b:61:5a:fc:
         d4:90:d6:1a:9b:7a:54:c2:c0:55:69:cf:30:f6:31:80:45:28:
         e0:f1:e9:3a:fe:45:3c:ff:4b:64:e6:65:2a:71:ae:a2:d9:64:
         40:57:8b:ae:52:f9:2d:90:4b:8e:89:87:1c:15:37:53:91:f3:
         7c:a0:f1:67:1e:a3:f0:66:37:02:de:70:24:08:2e:ab:e8:9f:
         0d:5c:28:0b:2c:63:b5:95:e9:da:26:34:41:bb:70:04:52:06:
         63:34:f0:9c:b3:c3:d2:91:bb:73:de:cc:6a:03:ce:bd:aa:0a:
         76:cb:1c:fe:0a:03:30:bb:04:24:eb:89:be:9c:54:a1:a6:70:
         6b:66:3e:d8:38:76:de:38:78:e2:d7:04:08:c0:4f:04:c5:1f:
         94:87:79:4a:96:be:3b:2e:e1:96:e2:98:ae:59:f5:51:10:de:
         da:a8:b1:55:a3:06:fb:26:95:8d:cb:6a:94:93:13:4f:80:6f:
         17:5d:2b:88:95:28:df:85:87:f2:f3:79:f8:1d:aa:4f:b2:ee:
         47:59:df:87:50:c2:19:2a:ce:3a:5b:24:be:6f:f1:94:e7:f8:
         8a:a6:fd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:41 2025 by rpki-client