Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15287.roa
File:                     AS15287.roa (raw, json)
Hash identifier:          YLklucIo5e2aGZjQB7+G4AonnEpCRd8Gf596LnkE/JA=
Subject key identifier:   77:65:40:20:23:50:69:84:09:9B:DC:D0:72:CE:25:C8:30:1F:83:D8
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       493BD7D1F4F2CCF686C30CAEFEFDD8DB34806ACB
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15287.roa
Signing time:             Sun 10 May 2026 12:36:00 +0000
ROA not before:           Sun 10 May 2026 12:31:00 +0000
ROA not after:            Sun 09 May 2027 12:36:00 +0000
asID:                     15287
IP address blocks:        157.254.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 14:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:3b:d7:d1:f4:f2:cc:f6:86:c3:0c:ae:fe:fd:d8:db:34:80:6a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: May 10 12:31:00 2026 GMT
            Not After : May  9 12:36:00 2027 GMT
        Subject: CN=7765402023506984099BDCD072CE25C8301F83D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:0b:a9:98:4b:3e:ae:d5:6c:20:28:02:ba:
                    15:43:3f:b1:82:5b:45:36:7a:c6:d8:3e:53:01:52:
                    7f:51:ae:e5:06:a3:78:39:b6:a9:fe:9c:9e:61:dd:
                    89:16:c7:90:d1:aa:2b:c5:33:27:cb:56:00:84:44:
                    f5:1c:e1:40:b1:79:3c:9e:4b:eb:34:20:08:0e:4a:
                    af:3f:a9:d4:59:15:9d:2b:2c:da:15:6e:2d:c8:27:
                    0a:fc:cc:9a:fb:9f:9a:48:71:1d:b1:ec:1d:0f:eb:
                    45:f6:19:bf:81:fb:d5:1f:fd:02:e2:2f:9e:e6:90:
                    cb:0b:a9:55:ba:bd:9e:53:5d:52:77:95:e6:8e:ce:
                    a8:a2:bd:d4:ee:c7:dc:45:8a:81:74:61:6f:dc:37:
                    d7:fd:1b:4a:67:8b:93:a8:e2:1d:26:1e:27:f6:be:
                    dd:7d:03:a2:08:4e:43:58:0c:96:e6:09:fe:92:10:
                    f2:ed:23:92:e9:75:e8:90:2b:27:f2:f7:6f:81:09:
                    91:89:a4:61:85:79:c1:a3:6c:50:c9:27:87:ee:48:
                    6b:8f:29:54:c6:3d:a8:8b:34:87:50:92:b8:69:07:
                    0e:6f:ba:14:47:20:cc:1f:0b:40:a6:51:2d:9d:03:
                    9a:5b:eb:79:f6:6d:95:2b:72:c8:fb:dd:4d:af:86:
                    20:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:65:40:20:23:50:69:84:09:9B:DC:D0:72:CE:25:C8:30:1F:83:D8
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:e9:36:40:95:e1:dd:9d:39:2f:ae:91:77:41:68:70:a4:05:
         9c:74:c4:f4:49:fe:ed:21:24:ec:91:98:b6:c5:e2:98:f0:27:
         cd:11:93:12:cc:c0:6e:70:da:c5:58:1e:b8:b6:b0:ca:5b:79:
         a5:38:d9:86:f3:8a:ee:36:3c:4e:e7:39:34:8d:d4:8c:ab:41:
         ea:ec:d0:7a:b8:fd:87:23:46:03:3c:d4:2f:b4:06:d1:6e:e4:
         60:72:46:58:7d:ea:fe:d8:23:ad:dd:c4:97:a6:3b:30:e7:7d:
         63:cb:02:ba:01:a9:4a:61:df:92:58:56:35:62:55:b4:ce:76:
         1a:c1:69:24:cf:3e:d4:4d:20:4f:c2:be:11:32:62:f7:b0:10:
         85:e8:9d:1e:46:6b:92:26:2b:27:dc:09:49:c5:f9:ba:d3:35:
         7a:d3:2d:cd:2a:b6:7c:a6:36:11:a0:f3:d7:d3:be:d5:0a:ba:
         22:1a:4c:ff:69:1f:02:4f:32:ed:8b:0f:5c:3f:10:7b:7d:85:
         e8:96:42:73:e8:47:30:51:99:ba:08:c5:75:a1:a6:c9:83:f7:
         1f:4d:70:1e:ce:26:3a:01:f2:93:af:e5:0f:c5:26:f9:60:e8:
         33:ef:a1:59:40:9c:10:5b:8d:b6:11:81:2b:3c:28:73:c6:f3:
         01:6a:ff:25
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUSTvX0fTyzPaGwwyu/v3Y2zSAasswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjYwNTEwMTIzMTAwWhcNMjcwNTA5MTIzNjAw
WjAzMTEwLwYDVQQDEyg3NzY1NDAyMDIzNTA2OTg0MDk5QkRDRDA3MkNFMjVDODMw
MUY4M0Q4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnQLqZhLPq7V
bCAoAroVQz+xgltFNnrG2D5TAVJ/Ua7lBqN4Obap/pyeYd2JFseQ0aorxTMny1YA
hET1HOFAsXk8nkvrNCAIDkqvP6nUWRWdKyzaFW4tyCcK/Mya+5+aSHEdsewdD+tF
9hm/gfvVH/0C4i+e5pDLC6lVur2eU11Sd5Xmjs6oor3U7sfcRYqBdGFv3DfX/RtK
Z4uTqOIdJh4n9r7dfQOiCE5DWAyW5gn+khDy7SOS6XXokCsn8vdvgQmRiaRhhXnB
o2xQySeH7khrjylUxj2oizSHUJK4aQcOb7oURyDMHwtAplEtnQOaW+t59m2VK3LI
+91Nr4YgiQIDAQABo4ICfjCCAnowHQYDVR0OBBYEFHdlQCAjUGmECZvc0HLOJcgw
H4PYMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzE1Mjg3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf7eMA0GCSqGSIb3DQEBCwUAA4IB
AQAj6TZAleHdnTkvrpF3QWhwpAWcdMT0Sf7tISTskZi2xeKY8CfNEZMSzMBucNrF
WB64trDKW3mlONmG84ruNjxO5zk0jdSMq0Hq7NB6uP2HI0YDPNQvtAbRbuRgckZY
fer+2COt3cSXpjsw531jywK6AalKYd+SWFY1YlW0znYawWkkzz7UTSBPwr4RMmL3
sBCF6J0eRmuSJisn3AlJxfm60zV60y3NKrZ8pjYRoPPX077VCroiGkz/aR8CTzLt
iw9cPxB7fYXolkJz6EcwUZm6CMV1oabJg/cfTXAeziY6AfKTr+UPxSb5YOgz76FZ
QJwQW422EYErPChzxvMBav8l
-----END CERTIFICATE-----
Generated at Tue May 12 23:02:08 2026 by rpki-client