Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9515.roa
File:                     AS9515.roa (raw, json)
Hash identifier:          oYqsZ54FGARVE6K/ZOYkZYZaJuyB2lWOMPNf4zqXRP8=
Subject key identifier:   4B:80:F6:0F:8D:60:3C:3B:A6:94:6B:D5:C9:54:47:9B:B1:F7:A7:8A
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       3E4F0BB4C0258CAB4EE4DE50E06A66B4309C0659
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9515.roa
Signing time:             Mon 24 Aug 2026 14:24:44 +0000
ROA not before:           Mon 24 Aug 2026 14:19:44 +0000
ROA not after:            Mon 23 Aug 2027 14:24:44 +0000
asID:                     9515
IP address blocks:        157.254.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 25 Aug 2026 17:53:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:4f:0b:b4:c0:25:8c:ab:4e:e4:de:50:e0:6a:66:b4:30:9c:06:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Aug 24 14:19:44 2026 GMT
            Not After : Aug 23 14:24:44 2027 GMT
        Subject: CN=4B80F60F8D603C3BA6946BD5C954479BB1F7A78A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:82:a7:15:f6:f2:83:ae:0e:52:18:a1:d3:
                    d4:08:98:46:8a:b3:20:3c:76:84:5d:6b:5a:99:7e:
                    50:76:16:60:80:61:10:43:4b:75:6c:f3:92:a6:49:
                    02:aa:aa:75:cc:02:d5:ad:39:ee:b4:56:c1:cc:f3:
                    8a:bd:43:74:a9:d5:64:3e:6c:63:a8:32:cd:e3:d9:
                    2f:4e:d5:65:ca:6b:61:64:37:03:71:f0:57:c3:15:
                    08:5b:7b:58:44:c3:44:5d:fc:c2:b0:57:0f:5c:82:
                    7b:fa:bf:4a:b5:f9:db:d3:b7:88:ea:ae:2a:8b:5a:
                    9e:eb:28:66:0f:73:1d:67:8c:6f:14:1f:d7:50:83:
                    56:07:5a:f3:6c:b1:5f:1d:11:99:42:bb:4d:30:82:
                    1d:eb:33:38:3f:c6:4b:fe:0b:36:4f:bf:ce:e2:ac:
                    f8:f2:10:93:e1:01:28:00:51:d9:60:25:1d:ca:0d:
                    cb:56:55:52:21:eb:ec:e9:db:1e:b1:89:d4:c8:fc:
                    67:e5:b6:cf:9a:55:55:53:e3:a0:1c:02:ba:15:bb:
                    f1:bf:a8:a2:b8:83:1d:13:59:6f:b8:d5:db:29:b7:
                    81:32:c1:4c:9d:fd:dd:dd:e8:2b:6c:d9:56:ac:16:
                    96:7c:62:59:f9:84:7a:5d:a7:d9:2b:ec:9d:91:b0:
                    11:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:80:F6:0F:8D:60:3C:3B:A6:94:6B:D5:C9:54:47:9B:B1:F7:A7:8A
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS9515.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:85:71:4a:48:f4:0f:7c:17:28:ea:6d:89:6d:db:e5:23:a2:
         70:91:de:d5:88:aa:69:50:06:49:4f:c4:dc:21:bc:b5:87:b9:
         3d:58:db:65:f2:00:72:ab:00:58:a5:eb:5a:78:3f:d9:86:f6:
         27:e4:ee:23:23:0a:96:05:4d:24:ec:c3:b3:8f:b8:2b:be:f1:
         66:fe:78:5a:3f:c6:f6:87:3b:8e:bd:0f:91:50:67:c8:fd:0e:
         08:ad:72:70:d9:60:ed:93:a3:02:07:73:99:a1:04:b4:0c:69:
         07:41:78:49:45:36:ab:19:ca:3f:1d:89:ee:b6:2e:dd:73:bf:
         fa:1b:46:f8:34:4f:2b:ed:2a:64:59:fe:8b:f1:a6:c3:82:aa:
         ea:60:d5:9b:f6:e8:6f:e2:6f:70:99:86:b8:fc:49:d0:68:93:
         b6:65:0a:ca:0a:25:55:43:6f:c5:92:9b:18:36:87:bb:c0:ab:
         af:77:b6:83:3b:59:fe:70:4d:f4:21:bb:a1:d6:d4:a4:5a:0b:
         17:14:14:ee:68:d8:0d:c1:f2:a9:65:12:18:9d:6b:87:3b:ea:
         fa:6a:29:c8:ec:b3:c4:6d:b9:bb:27:35:dd:29:3b:55:4b:0b:
         d9:c1:8b:a4:c8:d2:22:f4:e5:52:70:3d:d0:a8:43:bd:bb:ee:
         d2:15:21:04
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUPk8LtMAljKtO5N5Q4GpmtDCcBlkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwODI0MTQxOTQ0WhcNMjcwODIzMTQyNDQ0
WjAzMTEwLwYDVQQDEyg0QjgwRjYwRjhENjAzQzNCQTY5NDZCRDVDOTU0NDc5QkIx
RjdBNzhBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulWCpxX28oOu
DlIYodPUCJhGirMgPHaEXWtamX5QdhZggGEQQ0t1bPOSpkkCqqp1zALVrTnutFbB
zPOKvUN0qdVkPmxjqDLN49kvTtVlymthZDcDcfBXwxUIW3tYRMNEXfzCsFcPXIJ7
+r9Ktfnb07eI6q4qi1qe6yhmD3MdZ4xvFB/XUINWB1rzbLFfHRGZQrtNMIId6zM4
P8ZL/gs2T7/O4qz48hCT4QEoAFHZYCUdyg3LVlVSIevs6dsesYnUyPxn5bbPmlVV
U+OgHAK6Fbvxv6iiuIMdE1lvuNXbKbeBMsFMnf3d3egrbNlWrBaWfGJZ+YR6XafZ
K+ydkbARmwIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFEuA9g+NYDw7ppRr1clUR5ux
96eKMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzk1MTUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACd/t4wDQYJKoZIhvcNAQELBQADggEB
AL6FcUpI9A98FyjqbYlt2+UjonCR3tWIqmlQBklPxNwhvLWHuT1Y22XyAHKrAFil
61p4P9mG9ifk7iMjCpYFTSTsw7OPuCu+8Wb+eFo/xvaHO469D5FQZ8j9DgitcnDZ
YO2TowIHc5mhBLQMaQdBeElFNqsZyj8die62Lt1zv/obRvg0TyvtKmRZ/ovxpsOC
qupg1Zv26G/ib3CZhrj8SdBok7ZlCsoKJVVDb8WSmxg2h7vAq693toM7Wf5wTfQh
u6HW1KRaCxcUFO5o2A3B8qllEhida4c76vpqKcjss8RtubsnNd0pO1VLC9nBi6TI
0iL05VJwPdCoQ7277tIVIQQ=
-----END CERTIFICATE-----
Generated at Mon Aug 24 19:56:57 2026 by rpki-client