Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a323a3a2f34382d313238203d3e20323035383438.roa
File:                     326130363a313238323a323a3a2f34382d313238203d3e20323035383438.roa (raw, json)
Hash identifier:          ZT2GON38AvG7YCNFgRgEMeCYcrHJDPOGRsmUw4dpThE=
Subject key identifier:   C0:45:AF:09:F6:EB:18:6A:53:44:7B:D2:AA:E7:2C:34:AE:32:A9:02
Certificate issuer:       /CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Certificate serial:       4AA702E178EB7C74BDDA6B51CB69AD77EBE32335
Authority key identifier: 3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a323a3a2f34382d313238203d3e20323035383438.roa
Signing time:             Mon 04 Mar 2024 13:28:45 +0000
ROA not before:           Mon 04 Mar 2024 13:23:45 +0000
ROA not after:            Mon 03 Mar 2025 13:28:45 +0000
asID:                     205848
IP address blocks:        2a06:1282:2::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Dec 2024 17:43:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:a7:02:e1:78:eb:7c:74:bd:da:6b:51:cb:69:ad:77:eb:e3:23:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
        Validity
            Not Before: Mar  4 13:23:45 2024 GMT
            Not After : Mar  3 13:28:45 2025 GMT
        Subject: CN=C045AF09F6EB186A53447BD2AAE72C34AE32A902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4c:ec:86:36:32:cd:32:33:9c:b8:e4:d1:04:
                    2f:dc:97:87:17:19:bd:6d:08:e7:d9:3b:fc:4d:7b:
                    ac:c3:20:c1:38:b2:61:f8:ee:e1:7c:3a:e2:66:a9:
                    33:f4:e7:11:9f:dd:a1:e5:5f:c1:c1:b1:e9:1d:43:
                    0b:74:64:7d:f4:fa:e3:33:a4:95:d5:8b:8f:a7:79:
                    2a:62:aa:1c:b4:77:24:5c:23:5e:3d:d2:58:bc:e3:
                    10:60:f5:e2:6c:ef:62:3d:b3:65:f9:3b:32:a9:6e:
                    6a:1e:e9:bb:35:f9:10:aa:e8:e4:54:59:d4:f3:e3:
                    5d:1e:ba:c1:39:87:90:8c:f7:74:0d:76:6b:6a:17:
                    33:32:b0:37:c5:c2:45:77:cc:f6:81:80:cd:25:42:
                    8c:38:ee:c7:51:dc:21:cc:19:c5:8c:c0:e6:b5:5e:
                    cb:12:eb:69:c1:db:79:62:17:a5:51:e9:75:0a:21:
                    f7:fa:10:1b:56:80:0b:4c:d7:83:7c:38:b4:f4:76:
                    90:fb:ee:d5:7c:2d:3f:4c:e3:6f:00:5f:84:6f:8b:
                    43:c6:fa:f8:09:92:c6:23:69:77:d3:60:12:0c:43:
                    4f:fc:57:28:6d:de:22:6a:07:cf:ae:64:1c:91:c9:
                    a3:13:49:c6:5d:e8:89:13:88:7c:07:9d:4d:a7:ce:
                    8b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:45:AF:09:F6:EB:18:6A:53:44:7B:D2:AA:E7:2C:34:AE:32:A9:02
            X509v3 Authority Key Identifier:
                keyid:3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a323a3a2f34382d313238203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1282:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:88:1c:07:80:4a:6f:0f:20:9e:b2:0d:d7:85:cd:69:65:bc:
         14:eb:3d:6e:98:55:be:fe:a6:69:ba:df:5b:44:b2:81:fa:b7:
         e7:e7:2c:1b:d0:65:9f:f8:5e:81:18:ff:1c:dc:cd:57:5f:7d:
         04:66:ce:c8:ab:97:ad:f9:14:15:ee:73:84:34:3b:e0:29:38:
         fd:a5:96:d7:81:48:6f:c2:80:98:4a:ef:d9:1a:73:bb:09:0f:
         98:66:99:03:08:04:1a:8f:79:eb:72:2d:12:ec:ba:30:2e:96:
         86:3d:16:6c:dd:f7:05:8e:3e:1e:87:3b:0d:d0:88:93:5b:3e:
         91:f4:ac:56:85:28:2e:84:f0:12:87:42:21:3d:2b:cd:9c:b2:
         48:1c:5b:f1:d3:c0:57:fa:1d:70:13:6f:40:aa:f1:94:1c:bc:
         05:17:04:1e:b2:3d:7e:02:ea:10:83:80:c0:d8:bd:d4:fb:b6:
         1d:44:5b:ee:84:76:59:f9:88:2f:b5:9c:90:d3:e3:e1:37:8e:
         70:42:4f:3f:62:1f:fd:e6:9e:f6:ba:06:d3:bf:f4:b9:f9:3f:
         d0:a7:fa:50:73:54:6a:c5:fd:c5:f3:80:2e:11:e5:87:7d:8d:
         ac:ed:7b:1c:ba:3f:43:ea:c9:9c:0c:73:56:be:46:e3:3c:79:
         53:98:e8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 03:04:27 2024 by rpki-client on console-ams.rpki-client.org