Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15287.roa
File:                     AS15287.roa (raw, json)
Hash identifier:          9D4y6ZW3o6vQk5PDUH0DKWuNNZc7HeFxA01qPXJ+O/I=
Subject key identifier:   2D:5E:E7:A6:E9:C7:78:FF:F1:93:FA:56:84:FF:85:2D:89:C8:2B:40
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       6A4D6D7FC41D5A43BFFE94E8FC28A50361DCB34C
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15287.roa
Signing time:             Sat 06 Apr 2024 02:54:56 +0000
ROA not before:           Sat 06 Apr 2024 02:49:56 +0000
ROA not after:            Sat 05 Apr 2025 02:54:56 +0000
asID:                     15287
IP address blocks:        157.254.34.0/23 maxlen: 23
                          157.254.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 04:20:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4d:6d:7f:c4:1d:5a:43:bf:fe:94:e8:fc:28:a5:03:61:dc:b3:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr  6 02:49:56 2024 GMT
            Not After : Apr  5 02:54:56 2025 GMT
        Subject: CN=2D5EE7A6E9C778FFF193FA5684FF852D89C82B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8b:10:5c:96:ae:0e:41:0b:6e:95:8b:35:ae:
                    df:7c:57:1b:b1:94:13:59:5d:02:bf:26:a8:18:c7:
                    44:77:34:33:c7:3e:d8:79:f3:81:b1:3c:44:1d:42:
                    f1:7a:86:bb:93:07:c2:88:27:bc:a7:58:0b:3e:35:
                    5c:28:cf:ee:54:27:54:d5:54:da:b3:8d:79:4a:12:
                    96:ea:f6:1d:0f:88:8e:78:9b:e4:ed:7d:2b:a2:1d:
                    5a:70:46:e1:7a:cf:33:66:65:44:3e:4f:cd:66:45:
                    b8:1a:da:37:5d:b6:7b:f1:fd:a6:7c:b9:24:a4:50:
                    bb:b1:31:2c:00:31:05:98:ca:b7:ae:fc:e4:82:f8:
                    cc:71:e6:7d:2c:22:05:1e:11:63:88:32:54:5a:e1:
                    c4:39:13:a9:77:85:7e:0c:ba:ed:29:0c:86:2c:fe:
                    dc:76:f5:1c:fd:16:ef:a2:46:8a:d2:91:85:b6:71:
                    69:46:e8:89:e8:af:f1:21:6e:24:e7:de:c7:8c:00:
                    de:30:48:54:9d:2e:cb:6f:14:9d:16:bc:f1:98:a1:
                    01:11:98:17:65:dc:60:e1:ea:d4:ad:59:62:07:8c:
                    a3:29:61:6b:1c:40:c3:2e:e3:8b:ea:ed:b4:21:88:
                    e0:0a:58:78:eb:c4:c2:5d:43:c0:37:d0:e1:7b:44:
                    a6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5E:E7:A6:E9:C7:78:FF:F1:93:FA:56:84:FF:85:2D:89:C8:2B:40
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.34.0/23
                  157.254.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:06:0d:54:eb:15:fc:31:62:07:8f:19:90:1d:10:2b:66:f8:
         22:a0:45:f2:06:d2:3c:b7:cf:a0:20:e9:68:43:73:96:0b:02:
         4e:f4:af:b8:12:69:25:25:c9:2f:5c:50:74:18:64:bf:57:c5:
         c8:12:91:45:58:0d:7c:bd:24:a8:b0:63:66:69:c8:15:a8:2c:
         bb:43:c6:81:95:29:b3:3e:0c:70:cb:69:ab:95:48:79:a0:06:
         22:5c:d3:93:3a:ac:dc:09:fe:5a:c6:40:98:01:f3:47:df:38:
         5b:04:a8:3b:69:7b:de:8b:d8:0b:0b:ea:5c:18:8d:0b:32:d7:
         0e:18:81:3c:34:3b:1b:bb:73:34:aa:7e:93:46:ea:e4:44:c1:
         44:40:57:20:1e:07:0c:14:0b:b3:ab:f8:dd:5c:dc:f9:19:b6:
         28:6c:92:a1:97:d8:1e:8c:8c:96:f8:36:14:ad:e8:91:3b:fc:
         22:a5:44:4e:38:cc:61:83:7f:59:4c:11:4e:02:47:71:20:1b:
         c5:53:4f:82:ce:6b:dc:5b:1c:51:98:69:7a:ae:45:cf:8d:09:
         92:49:9f:c7:ae:4e:00:be:be:68:d7:4b:17:79:3b:bd:ad:d6:
         33:67:fe:12:3c:39:68:2d:58:a5:3e:2d:f2:34:ce:c5:65:6e:
         34:fd:6d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:43:16 2024 by rpki-client on console-fra.rpki-client.org