Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15287.roa
File:                     AS15287.roa (raw, json)
Hash identifier:          RaTOgTb2Z6VZjGKfpWu4DG2QU//ecrbab+ZCP3GRHxE=
Subject key identifier:   84:0C:60:1C:01:6A:DC:A9:41:87:12:13:98:B8:FA:38:A4:98:39:42
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       1D45C6474F2825D871EE1C17687AC526D6F09743
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15287.roa
Signing time:             Sun 08 Jun 2025 11:58:55 +0000
ROA not before:           Sun 08 Jun 2025 11:53:55 +0000
ROA not after:            Sun 07 Jun 2026 11:58:55 +0000
asID:                     15287
IP address blocks:        157.254.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 20:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:45:c6:47:4f:28:25:d8:71:ee:1c:17:68:7a:c5:26:d6:f0:97:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jun  8 11:53:55 2025 GMT
            Not After : Jun  7 11:58:55 2026 GMT
        Subject: CN=840C601C016ADCA94187121398B8FA38A4983942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:5a:57:9f:2a:4a:ca:3c:0a:81:e5:ed:9d:
                    81:b5:ff:1a:0c:9b:94:ab:87:98:f5:8d:2d:cc:48:
                    4a:05:6e:33:f5:55:84:f0:ee:4e:2b:38:ec:d7:57:
                    62:83:0e:87:7f:80:2c:90:6c:ab:33:a0:b7:58:d3:
                    b0:cb:f9:24:d6:76:0f:8f:5f:f1:eb:69:b4:23:d1:
                    9d:7e:cf:46:52:98:61:f1:5c:2e:44:61:f6:53:96:
                    ab:c5:da:7b:fd:15:d2:7e:ee:1c:eb:36:21:aa:59:
                    db:41:80:dd:72:1e:ce:e6:bc:1c:ef:31:e0:37:48:
                    7d:87:72:07:61:3d:51:51:58:88:3f:42:25:94:c5:
                    e0:5f:82:66:a1:b9:38:5b:18:7c:66:94:c7:4f:25:
                    d8:39:e2:8f:db:b8:1c:cd:b0:1d:40:57:b7:79:df:
                    7a:f4:47:2e:db:45:52:43:f9:cd:b5:76:ff:6a:b2:
                    05:b3:71:7e:81:56:cd:36:ed:07:1f:68:aa:39:19:
                    1a:3b:50:35:d0:bc:ea:c9:67:66:a5:e9:b3:1d:b4:
                    64:b9:5a:fe:69:19:b4:f6:7a:2b:2b:7f:21:1a:76:
                    f8:8a:08:a9:90:ee:d0:d4:9a:73:36:6b:9a:7d:6e:
                    09:f7:7d:27:65:3e:f6:d5:ba:7a:04:82:d1:ce:d4:
                    91:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0C:60:1C:01:6A:DC:A9:41:87:12:13:98:B8:FA:38:A4:98:39:42
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS15287.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:da:02:cd:1a:31:16:17:d7:6a:27:ff:32:ab:1a:0c:69:53:
         1a:12:86:cb:57:99:06:fe:59:ad:64:3a:4d:b6:99:90:6a:35:
         bf:40:de:f8:90:39:6c:c8:c5:cd:1c:fd:9b:9e:cc:ce:7f:6c:
         2a:4e:43:0d:07:4d:f4:b7:d7:f8:0e:9f:52:f9:c8:46:00:f1:
         6a:e9:db:f9:32:c7:6e:1c:5b:bf:8b:21:d8:17:69:64:22:1e:
         d3:cf:58:82:b3:fa:3e:d6:be:3a:5f:b9:66:0a:54:a2:d6:14:
         04:08:dc:8e:aa:82:ad:43:75:e2:35:9f:7d:a6:5f:57:7d:ea:
         10:3c:41:5a:47:67:fd:93:2a:99:61:cc:17:60:a8:05:fd:b9:
         ef:71:aa:ad:6d:69:bd:6e:38:04:77:d4:be:8f:57:7a:64:0b:
         d0:55:7f:f2:8a:ff:dc:36:94:0e:2f:5f:13:fa:e8:fe:17:44:
         21:30:e5:52:6c:e5:a1:be:41:e0:17:08:96:e6:d9:5f:f6:d4:
         91:6a:a8:25:37:c2:02:ed:1c:57:4a:a3:35:76:00:46:3c:a2:
         ea:a7:82:f3:80:8c:28:8d:6c:40:29:de:22:34:77:e7:a5:c9:
         fa:4e:c6:76:0f:d8:ce:21:76:e9:0f:4c:24:7b:74:c4:b6:6c:
         76:e3:ec:e1
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUHUXGR08oJdhx7hwXaHrFJtbwl0MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWRlNzgxNjJjNzkwZjdhZTA5YzFmNTM0Y2M3YTJjZjQ4
NDcxYTI2M2Q5NGNjZjdmYjIwHhcNMjUwNjA4MTE1MzU1WhcNMjYwNjA3MTE1ODU1
WjAzMTEwLwYDVQQDEyg4NDBDNjAxQzAxNkFEQ0E5NDE4NzEyMTM5OEI4RkEzOEE0
OTgzOTQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SVaV58qSso8
CoHl7Z2Btf8aDJuUq4eY9Y0tzEhKBW4z9VWE8O5OKzjs11digw6Hf4AskGyrM6C3
WNOwy/kk1nYPj1/x62m0I9Gdfs9GUphh8VwuRGH2U5arxdp7/RXSfu4c6zYhqlnb
QYDdch7O5rwc7zHgN0h9h3IHYT1RUViIP0IllMXgX4Jmobk4Wxh8ZpTHTyXYOeKP
27gczbAdQFe3ed969Ecu20VSQ/nNtXb/arIFs3F+gVbNNu0HH2iqORkaO1A10Lzq
yWdmpemzHbRkuVr+aRm09norK38hGnb4igipkO7Q1JpzNmuafW4J930nZT721bp6
BILRztSR1wIDAQABo4ICfjCCAnowHQYDVR0OBBYEFIQMYBwBatypQYcSE5i4+jik
mDlCMB8GA1UdIwQYMBaAFNP5zSiKljS1OWOP59+myFQnwwP5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NjQ5MGY0NDUzYjdiLzAv
RDNGOUNEMjg4QTk2MzRCNTM5NjM4RkU3REZBNkM4NTQyN0MzMDNGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5
ZWYzMjIzLzQzYjdmYmY0LTRkZWYtNDkwNC04N2ZkLWU1OThiZjljZjJlMy9lZGU3
ODE2MmM3OTBmN2FlMDljMWY1MzRjYzdhMmNmNDg0NzFhMjYzZDk0Y2NmN2ZiMi5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU2NDkwZjQ0
NTNiN2IvMC9BUzE1Mjg3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnf7eMA0GCSqGSIb3DQEBCwUAA4IB
AQCl2gLNGjEWF9dqJ/8yqxoMaVMaEobLV5kG/lmtZDpNtpmQajW/QN74kDlsyMXN
HP2bnszOf2wqTkMNB030t9f4Dp9S+chGAPFq6dv5MsduHFu/iyHYF2lkIh7Tz1iC
s/o+1r46X7lmClSi1hQECNyOqoKtQ3XiNZ99pl9XfeoQPEFaR2f9kyqZYcwXYKgF
/bnvcaqtbWm9bjgEd9S+j1d6ZAvQVX/yiv/cNpQOL18T+uj+F0QhMOVSbOWhvkHg
FwiW5tlf9tSRaqglN8IC7RxXSqM1dgBGPKLqp4LzgIwojWxAKd4iNHfnpcn6TsZ2
D9jOIXbpD0wke3TEtmx24+zh
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:45:46 2025 by rpki-client