Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS15780.roa
File:                     AS15780.roa (raw, json)
Hash identifier:          onGZFiVoturieWw/KhiG1S+NAJcF9oyMmZrls55ZTPA=
Subject key identifier:   A9:95:F5:A4:93:BE:3C:B3:89:0F:93:0A:87:16:C7:B7:1C:1F:6E:6E
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       48B9E00DFA6BDD5595FCFDECB3D04B11D75746C0
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS15780.roa
Signing time:             Thu 03 Jul 2025 15:52:17 +0000
ROA not before:           Thu 03 Jul 2025 15:47:17 +0000
ROA not after:            Thu 02 Jul 2026 15:52:17 +0000
asID:                     15780
IP address blocks:        2a06:a005:dd0::/44 maxlen: 48
                          2a06:a005:de0::/44 maxlen: 48
                          2a06:a005:df0::/44 maxlen: 48
                          2a06:a005:e00::/44 maxlen: 48
                          2a06:a005:e10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Jul 2025 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:b9:e0:0d:fa:6b:dd:55:95:fc:fd:ec:b3:d0:4b:11:d7:57:46:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Jul  3 15:47:17 2025 GMT
            Not After : Jul  2 15:52:17 2026 GMT
        Subject: CN=A995F5A493BE3CB3890F930A8716C7B71C1F6E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a0:b8:ac:10:90:52:9e:60:f0:05:69:cd:8a:
                    fc:bf:b4:6d:be:e1:54:e1:f2:25:d6:0b:0d:56:f4:
                    02:f1:5f:9e:00:d2:ff:2d:f7:39:b5:14:41:11:6c:
                    60:82:95:f4:a9:29:89:fa:53:24:95:b4:e7:d9:bc:
                    42:d1:96:1b:2c:b1:2d:02:26:77:cd:0a:4a:65:df:
                    15:c2:77:ef:d8:4e:68:7f:84:c1:76:ca:1e:2c:a2:
                    33:17:3d:f4:62:ed:73:31:9e:a2:31:a3:6c:77:85:
                    86:15:28:f0:14:92:c3:6b:bf:a4:7f:af:5c:cc:13:
                    6e:6d:48:72:b8:df:59:90:d4:60:51:5d:78:47:0f:
                    e3:4d:ad:08:d2:47:34:c6:8f:95:70:ca:d9:da:96:
                    0e:37:08:d5:cc:08:1a:4b:d6:ed:78:2c:e7:46:16:
                    af:5e:b3:31:5a:0a:73:df:4d:9a:12:f1:b9:cd:e0:
                    39:19:90:a0:41:5c:d0:9f:f2:63:1f:64:f0:cf:8e:
                    0f:91:db:00:1f:e6:d9:6b:89:ac:dd:1b:d3:21:7e:
                    2f:71:80:29:dc:fe:57:e1:c0:74:b2:f9:29:bb:c4:
                    f5:84:62:4e:01:dd:0d:5f:fa:01:e8:1c:30:52:74:
                    d3:09:43:cd:8f:8e:fa:d7:86:41:2e:f6:3a:56:cc:
                    44:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:95:F5:A4:93:BE:3C:B3:89:0F:93:0A:87:16:C7:B7:1C:1F:6E:6E
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS15780.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:dd0::-2a06:a005:e1f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         b9:b6:3e:9a:42:bd:4d:e6:98:54:a9:10:21:d1:ed:3a:41:64:
         a9:29:84:15:ad:6d:8b:11:d5:b9:90:79:68:2c:99:b3:b9:a6:
         cc:0d:fc:71:5b:04:76:40:c4:6f:1a:e7:3e:c6:ed:ca:53:1f:
         35:b1:6b:66:af:47:49:0a:d8:72:50:bf:cd:28:00:71:26:93:
         95:1f:e5:ec:3f:3e:3b:b5:a7:18:4d:cb:5f:17:76:9c:e1:ff:
         e9:c1:32:51:c5:1f:96:ec:5b:1d:a9:a4:3c:76:b9:3c:92:15:
         51:e9:df:11:d5:84:58:7f:46:fd:db:b3:87:d4:21:ae:f5:2c:
         df:d4:8d:6f:22:d8:e4:a0:35:da:6f:ef:27:e8:c0:8a:eb:b0:
         f9:fb:49:5f:ca:2d:10:fc:64:6e:95:15:79:4b:72:7a:4f:1e:
         ab:90:9d:9e:a1:00:af:97:cd:ee:04:6e:87:5c:4a:b1:f2:57:
         e0:52:f7:0d:08:90:b5:68:dd:fe:ed:62:41:77:7c:cf:fb:ce:
         9e:c2:e0:e1:00:43:86:f8:01:d0:d8:c9:3d:21:22:ef:e7:93:
         6c:53:85:f3:8e:1f:84:08:4b:a8:b2:87:6d:2b:83:59:21:79:
         64:03:93:0a:91:ff:ad:93:14:e2:c3:cf:b1:1b:2e:e1:81:20:
         b1:b9:ed:23
-----BEGIN CERTIFICATE-----
MIIE8jCCA9qgAwIBAgIUSLngDfpr3VWV/P3ss9BLEddXRsAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZDE0YjZmY2YyYjJjNjliZTA4NWU5Zjk1OTg3MmRjYmU4
ZWE1NDE3NzAeFw0yNTA3MDMxNTQ3MTdaFw0yNjA3MDIxNTUyMTdaMDMxMTAvBgNV
BAMTKEE5OTVGNUE0OTNCRTNDQjM4OTBGOTMwQTg3MTZDN0I3MUMxRjZFNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRoLisEJBSnmDwBWnNivy/tG2+
4VTh8iXWCw1W9ALxX54A0v8t9zm1FEERbGCClfSpKYn6UySVtOfZvELRlhsssS0C
JnfNCkpl3xXCd+/YTmh/hMF2yh4sojMXPfRi7XMxnqIxo2x3hYYVKPAUksNrv6R/
r1zME25tSHK431mQ1GBRXXhHD+NNrQjSRzTGj5Vwytnalg43CNXMCBpL1u14LOdG
Fq9eszFaCnPfTZoS8bnN4DkZkKBBXNCf8mMfZPDPjg+R2wAf5tlriazdG9Mhfi9x
gCnc/lfhwHSy+Sm7xPWEYk4B3Q1f+gHoHDBSdNMJQ82PjvrXhkEu9jpWzEQ3AgMB
AAGjggH8MIIB+DAdBgNVHQ4EFgQUqZX1pJO+PLOJD5MKhxbHtxwfbm4wHwYDVR0j
BBgwFoAU0Utvzyssab4IXp+VmHLcvo6lQXcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvNy9EMTRCNkZDRjJC
MkM2OUJFMDg1RTlGOTU5ODcyRENCRThFQTU0MTc3LmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMFV0dnp5c3NhYjRJWHAtVm1ITGN2bzZsUVhjLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC83L0FT
MTU3ODAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLQYIKwYBBQUHAQcB
Af8EHjAcMBoEAgACMBQwEgMHBCoGoAUN0AMHBSoGoAUOADANBgkqhkiG9w0BAQsF
AAOCAQEAubY+mkK9TeaYVKkQIdHtOkFkqSmEFa1tixHVuZB5aCyZs7mmzA38cVsE
dkDEbxrnPsbtylMfNbFrZq9HSQrYclC/zSgAcSaTlR/l7D8+O7WnGE3LXxd2nOH/
6cEyUcUfluxbHamkPHa5PJIVUenfEdWEWH9G/duzh9QhrvUs39SNbyLY5KA12m/v
J+jAiuuw+ftJX8otEPxkbpUVeUtyek8eq5CdnqEAr5fN7gRuh1xKsfJX4FL3DQiQ
tWjd/u1iQXd8z/vOnsLg4QBDhvgB0NjJPSEi7+eTbFOF844fhAhLqLKHbSuDWSF5
ZAOTCpH/rZMU4sPPsRsu4YEgsbntIw==
-----END CERTIFICATE-----
Generated at Fri Jul 4 22:06:09 2025 by rpki-client