Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15287.roa
File:                     AS15287.roa (raw, json)
Hash identifier:          oiLPpN7UA2pDASKvRNujQd/vj1PBVjYB4YgVC/R3WS8=
Subject key identifier:   1B:E7:CA:DB:F7:22:E9:70:E7:DD:02:DB:0C:F3:A9:0A:98:14:18:E1
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7BCF2925F3085518146DB0A114674BD6D5E8B2DF
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15287.roa
Signing time:             Sat 09 Nov 2024 10:52:15 +0000
ROA not before:           Sat 09 Nov 2024 10:47:15 +0000
ROA not after:            Sat 08 Nov 2025 10:52:15 +0000
asID:                     15287
IP address blocks:        157.254.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 05:45:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:cf:29:25:f3:08:55:18:14:6d:b0:a1:14:67:4b:d6:d5:e8:b2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Nov  9 10:47:15 2024 GMT
            Not After : Nov  8 10:52:15 2025 GMT
        Subject: CN=1BE7CADBF722E970E7DD02DB0CF3A90A981418E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e0:38:08:2b:42:3b:38:13:e2:b2:5c:c4:1d:
                    a5:d0:2c:ae:f5:1e:35:8f:01:8c:f2:b0:5e:49:e1:
                    08:e1:72:2a:fa:eb:b6:a0:81:f3:45:b5:27:23:7a:
                    2a:97:63:cc:43:01:ff:04:84:ce:ab:0c:66:de:04:
                    13:9d:11:45:76:60:9e:b1:6c:4c:8a:80:87:1b:82:
                    ed:a8:f0:c1:a9:9d:7b:66:f5:f8:41:05:92:a8:bc:
                    f6:15:7b:e5:fa:5d:48:f1:6a:08:d5:e1:2c:20:b7:
                    fa:57:f4:59:9b:e1:a2:8a:26:77:a5:83:a2:09:09:
                    47:47:a6:91:c9:f3:55:ba:50:2b:86:d5:41:5d:fd:
                    d6:d6:ee:7a:c2:8e:79:2c:17:e6:c1:c0:d0:a6:c8:
                    99:03:2b:88:bf:f5:ec:d6:19:3d:0c:12:55:3b:32:
                    5c:c1:18:ce:01:4a:c6:ab:5b:b1:97:cb:b8:65:91:
                    1a:ae:81:1f:70:4c:64:51:ad:1c:db:5a:9c:18:30:
                    bf:96:98:85:7e:96:c4:c3:43:6a:bc:ed:d6:32:9d:
                    ae:b8:a9:ee:05:6b:9b:56:83:12:6c:8d:40:b3:f2:
                    26:e4:e4:82:01:8c:1e:5a:3d:52:bd:7d:1a:cb:f9:
                    fa:63:36:40:61:10:a1:6f:3b:de:e6:d1:be:ba:17:
                    29:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E7:CA:DB:F7:22:E9:70:E7:DD:02:DB:0C:F3:A9:0A:98:14:18:E1
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:c9:0a:e2:e8:c3:2f:a8:af:49:ad:c9:12:b7:4f:4b:24:39:
         4d:9d:2f:9b:90:62:c7:fa:08:9c:ec:7b:f5:19:b5:80:f1:5e:
         26:a6:c4:0b:97:3c:98:d5:2e:9e:f4:19:dc:7c:ed:1e:68:5c:
         e8:9a:55:b8:44:69:b8:a1:d1:17:b3:d7:3a:42:9f:9c:51:d9:
         de:2d:16:3d:f6:24:9f:fa:69:8b:79:36:ad:05:a3:80:9d:8a:
         fe:2c:52:aa:5a:b0:8e:f5:e5:10:ae:6d:cb:a3:97:08:6c:3e:
         75:51:c9:6f:0d:e5:ac:ba:c2:75:f5:1a:2c:7a:be:0b:21:db:
         f9:36:2b:da:d1:15:fc:c5:4c:86:7d:20:14:af:93:c4:24:c5:
         19:3c:1a:c9:08:57:e5:d7:ab:d7:e8:01:a8:ca:1c:f3:38:7b:
         53:9f:64:98:3a:3e:75:90:93:fb:d3:26:f6:df:89:7c:6d:f2:
         b3:88:b6:e6:9c:cf:06:3c:bc:48:0e:78:80:b3:82:50:2a:ea:
         61:f8:66:e0:73:a4:2c:ba:7d:2b:56:8f:b8:da:44:3a:39:b1:
         bf:d0:07:af:9f:75:ef:3c:0d:b8:71:9a:75:c3:50:b6:f4:bf:
         59:37:58:79:1e:08:64:ab:5d:d6:8c:90:4c:fc:7d:b7:73:d5:
         5e:5b:32:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:02:14 2024 by rpki-client on console-ams.rpki-client.org