Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS23470.roa
File:                     AS23470.roa (raw, json)
Hash identifier:          gook05kg9+ZC0ay/6Yx3Iua2bhaURv0nxlqrMUm3SPg=
Subject key identifier:   9E:BF:7B:2A:95:09:19:6F:17:09:20:28:26:5A:1F:17:7D:76:A2:E1
Certificate issuer:       /CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
Certificate serial:       3435B112AA031741829EFC5525A89847C707AAB4
Authority key identifier: A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS23470.roa
Signing time:             Sun 19 Apr 2026 08:43:01 +0000
ROA not before:           Sun 19 Apr 2026 08:38:01 +0000
ROA not after:            Sun 18 Apr 2027 08:43:01 +0000
asID:                     23470
IP address blocks:        2a14:7583:f801::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Apr 2026 13:21:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:35:b1:12:aa:03:17:41:82:9e:fc:55:25:a8:98:47:c7:07:aa:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a83d48652f3b2df74f6bf9baa8a9c174ccfd3772
        Validity
            Not Before: Apr 19 08:38:01 2026 GMT
            Not After : Apr 18 08:43:01 2027 GMT
        Subject: CN=9EBF7B2A9509196F17092028265A1F177D76A2E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:b9:1c:6f:6a:d1:c7:6f:c6:39:f5:aa:2e:ef:
                    4a:66:7f:27:00:d7:83:79:bc:fe:5c:8a:18:1d:cb:
                    71:be:07:fc:74:0c:4e:c2:e8:3d:73:0d:d4:7e:ff:
                    1e:b3:3e:d3:19:be:ce:06:1d:58:57:ff:12:67:21:
                    7e:79:2b:2a:31:c4:d0:73:9b:5b:1e:79:83:c7:0a:
                    84:f0:e3:8c:c5:34:99:4d:82:33:8d:9e:0c:ad:d5:
                    45:1c:98:de:8e:50:c8:06:db:94:b5:3a:e7:0f:0c:
                    64:a5:8e:2d:f4:02:6e:84:a4:b6:a7:44:57:b3:1f:
                    8f:0e:6c:46:10:82:f7:0b:54:20:f7:9c:d0:5f:07:
                    55:ad:e0:8f:48:7a:af:ac:ba:5f:25:5e:c9:99:32:
                    74:84:b4:ae:ff:cd:2b:1a:23:da:04:1c:23:37:89:
                    ed:d1:b7:f4:82:e5:25:aa:bf:eb:ba:76:c6:7f:13:
                    84:05:b0:51:0e:5f:14:f7:81:fd:87:4a:5e:88:a2:
                    ae:18:c6:1e:29:a5:a5:17:64:c3:5f:0f:19:b9:af:
                    9e:b0:b3:05:f3:87:05:dc:e4:5f:c3:f0:a7:09:f5:
                    5d:7d:42:42:aa:cd:24:21:7b:e5:0f:19:1e:6a:71:
                    d8:e5:d5:0c:dc:d9:4b:09:91:55:43:60:07:a7:ba:
                    39:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BF:7B:2A:95:09:19:6F:17:09:20:28:26:5A:1F:17:7D:76:A2:E1
            X509v3 Authority Key Identifier:
                keyid:A8:3D:48:65:2F:3B:2D:F7:4F:6B:F9:BA:A8:A9:C1:74:CC:FD:37:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/AS23470.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7583:f801::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:dc:c8:c1:4d:c9:51:74:d0:bc:8d:ba:07:6f:af:f4:5f:10:
         96:5b:bf:93:69:24:4c:55:99:30:8e:42:e8:f2:02:fe:e4:ba:
         8e:84:db:74:1a:2a:d9:fb:76:af:25:03:73:20:be:1f:f4:31:
         a9:31:f0:25:0f:9e:23:c3:fb:6f:aa:54:d4:1e:fb:c5:8b:35:
         ae:0c:d1:4f:05:57:61:aa:bd:07:9e:47:c0:b4:5d:cb:24:69:
         7b:39:21:82:1d:1d:ca:46:70:f2:1c:1b:87:01:8f:66:2e:e4:
         db:cf:a5:81:b5:c2:2e:12:97:f5:ae:15:86:9a:f6:06:f6:28:
         47:2e:13:52:74:a7:62:47:a5:01:bb:62:7f:ba:e7:79:75:df:
         1d:f2:02:e2:b8:e4:2a:ef:f6:d6:7b:21:7e:d7:c7:fa:c9:d0:
         f8:19:02:3f:b0:7c:fd:67:f7:12:4f:8b:de:45:40:86:8d:30:
         29:a2:b3:4b:77:bf:80:0a:81:08:45:4d:fe:e3:c3:bb:0d:bd:
         2e:94:28:4d:e7:13:e2:a1:b2:bf:48:ec:c1:d8:aa:99:b8:32:
         ef:13:f2:2e:56:df:df:b3:ee:19:73:5f:66:c3:f9:9e:48:e1:
         43:8d:0c:d7:ac:b6:32:3c:d7:ab:5b:1f:2d:43:f7:62:76:7c:
         8b:0d:74:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----