Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS402970.roa
File:                     AS402970.roa (raw, json)
Hash identifier:          q5TCMmoNHIVnStMrzV1yx5dWpAzqmHvd15nSjK5r7IU=
Subject key identifier:   E7:3B:FD:92:58:33:6B:7E:54:8D:4F:76:C2:6B:C9:0B:02:BB:6C:B8
Certificate issuer:       /CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
Certificate serial:       5E9C852CFCCF94A220D12569F430E971B35A908B
Authority key identifier: D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS402970.roa
Signing time:             Wed 16 Sep 2026 22:29:33 +0000
ROA not before:           Wed 16 Sep 2026 22:24:33 +0000
ROA not after:            Wed 15 Sep 2027 22:29:33 +0000
asID:                     402970
IP address blocks:        2a09:54c6::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:9c:85:2c:fc:cf:94:a2:20:d1:25:69:f4:30:e9:71:b3:5a:90:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d14b6fcf2b2c69be085e9f959872dcbe8ea54177
        Validity
            Not Before: Sep 16 22:24:33 2026 GMT
            Not After : Sep 15 22:29:33 2027 GMT
        Subject: CN=E73BFD9258336B7E548D4F76C26BC90B02BB6CB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:95:20:a6:8b:6a:b1:88:d0:82:df:c9:1f:
                    69:44:11:21:76:40:63:c7:0d:7f:a7:9c:8f:ac:1a:
                    8c:74:95:31:a2:a7:7c:b5:a0:19:00:f0:94:03:a3:
                    59:4c:b7:cb:57:a8:63:e6:48:70:e3:4f:65:02:97:
                    a9:d0:ff:83:d2:28:ea:ab:1f:d0:4e:91:4e:64:b3:
                    f0:ee:05:5f:7f:3c:22:1c:32:7e:3a:42:39:78:68:
                    81:66:3d:26:8c:ce:d9:f4:d9:ec:d4:b0:2c:e6:22:
                    26:85:ab:51:9c:f4:99:38:c4:30:57:74:d9:5a:25:
                    45:f5:5b:e9:06:7d:97:2a:b8:24:ef:ba:54:a4:ed:
                    a3:ea:31:bf:d4:c6:ca:95:9b:7c:9f:73:c3:28:b2:
                    3f:ff:49:6b:e2:22:8e:a6:89:f5:43:c5:8d:fb:91:
                    ef:a9:10:40:59:17:8b:3e:20:3c:db:24:73:e9:9d:
                    f0:0e:0c:76:7c:c1:16:d5:ae:04:68:95:70:e5:d8:
                    a0:92:20:6c:45:a6:2f:f3:d5:64:80:b2:0b:38:7d:
                    5d:6a:5f:c0:56:92:fe:be:5a:c5:63:a4:ad:18:93:
                    f1:07:97:ef:f6:fc:9c:25:5a:be:f8:dd:a9:f6:76:
                    39:47:80:2c:47:44:e5:a4:5a:8c:02:83:f8:62:2e:
                    62:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3B:FD:92:58:33:6B:7E:54:8D:4F:76:C2:6B:C9:0B:02:BB:6C:B8
            X509v3 Authority Key Identifier:
                keyid:D1:4B:6F:CF:2B:2C:69:BE:08:5E:9F:95:98:72:DC:BE:8E:A5:41:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/AS402970.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:75:e6:29:94:af:a9:26:f1:9b:c1:a2:c4:29:9e:e5:e5:f5:
         cf:42:6f:50:3d:df:40:a6:4c:7b:de:fe:e3:91:f0:af:eb:d2:
         f6:6f:e6:7c:1c:d4:25:57:2f:f8:0b:d8:e0:59:51:53:a9:1f:
         01:40:25:99:80:37:7f:30:b4:c7:37:2c:dc:02:42:19:bd:f0:
         2e:ce:84:f6:06:f0:ce:24:e5:c4:f2:2a:b9:70:51:c3:98:9a:
         3f:26:34:4c:41:f3:83:cd:2e:cd:e0:50:99:e2:dd:ae:85:83:
         4a:17:9f:43:30:3e:54:8d:50:45:7c:dd:c3:56:2c:fb:5a:a3:
         31:a7:7a:46:8b:72:da:6e:4d:3f:7d:e0:03:2b:1e:72:e5:19:
         ce:ab:b1:96:99:c8:16:bc:9a:5e:1e:90:1d:bf:b8:f3:75:66:
         90:62:f6:21:6b:5a:f4:b7:b5:58:37:f0:ba:bc:a2:94:76:44:
         67:2a:20:9f:03:5b:42:70:a4:ea:b5:e3:ea:67:84:5b:69:15:
         a0:6b:fb:4e:51:43:2c:61:c5:1b:8f:f2:6c:26:90:4a:2a:1b:
         f0:79:cf:c4:a5:15:55:6f:2c:78:b8:41:11:60:bc:46:fa:95:
         04:66:4f:9c:fb:51:fb:34:a8:d2:a3:69:18:41:5c:b6:92:e2:
         25:0c:33:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----