Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a333a3a2f34382d313238203d3e20323035383438.roa
File:                     326130363a313238323a333a3a2f34382d313238203d3e20323035383438.roa (raw, json)
Hash identifier:          fQPW5ENWOYx6p1Eh4Eog4rvNCYf+ex8pFVKa9Z1LF1s=
Subject key identifier:   00:E2:F4:DF:17:79:1A:30:7B:D9:BB:12:44:06:7D:C4:97:56:5D:48
Certificate issuer:       /CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Certificate serial:       7B0E18E772E1A136DC9B5EC6A473B3E8837C7C42
Authority key identifier: 3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a333a3a2f34382d313238203d3e20323035383438.roa
Signing time:             Tue 08 Oct 2024 20:36:05 +0000
ROA not before:           Tue 08 Oct 2024 20:31:05 +0000
ROA not after:            Tue 07 Oct 2025 20:36:05 +0000
asID:                     205848
IP address blocks:        2a06:1282:3::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:0e:18:e7:72:e1:a1:36:dc:9b:5e:c6:a4:73:b3:e8:83:7c:7c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
        Validity
            Not Before: Oct  8 20:31:05 2024 GMT
            Not After : Oct  7 20:36:05 2025 GMT
        Subject: CN=00E2F4DF17791A307BD9BB1244067DC497565D48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:77:72:5e:84:27:3c:83:d8:b9:2f:7e:52:59:
                    b5:6d:4f:e7:1c:ea:1b:22:6e:52:95:ec:17:12:78:
                    19:59:4b:36:05:dc:a6:0d:5e:eb:ee:2d:f6:1a:b3:
                    9d:8f:e8:29:e7:7e:7f:68:36:fe:df:40:19:59:83:
                    28:22:c8:d2:48:41:0b:45:d8:f8:94:2b:31:bf:73:
                    14:37:21:12:b6:bb:6a:b4:fa:6b:cc:5a:40:cf:23:
                    5a:36:68:4a:3b:29:c4:3b:fb:13:bd:a0:fa:97:70:
                    eb:56:b8:e5:a2:d5:cb:5d:b6:92:20:bc:64:fc:5f:
                    1e:b1:2a:c5:57:f6:f4:d7:5a:fe:11:22:b4:69:92:
                    0f:fe:21:7e:08:51:d5:8f:a5:42:19:37:e6:38:19:
                    f6:15:6f:bc:e5:59:70:ed:b4:d3:cc:f7:60:0e:31:
                    46:22:75:51:04:1e:88:3a:8f:d2:a8:4f:1b:6e:96:
                    2a:63:56:fc:c5:ed:1c:47:7b:ef:b7:58:44:89:f4:
                    9b:31:84:77:af:78:91:d5:a3:80:5f:4a:5c:68:e3:
                    17:1c:4e:07:31:6b:49:b9:8f:50:82:7a:1f:b4:71:
                    6b:3e:df:af:df:5c:6a:36:fb:74:b6:f4:72:85:eb:
                    db:b1:59:ef:de:62:85:83:24:f7:56:a5:1c:16:c3:
                    c1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E2:F4:DF:17:79:1A:30:7B:D9:BB:12:44:06:7D:C4:97:56:5D:48
            X509v3 Authority Key Identifier:
                keyid:3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a333a3a2f34382d313238203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1282:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:58:cf:2f:8e:cd:7e:81:03:3c:1f:12:71:57:e0:0b:2c:52:
         4e:97:75:37:41:c1:d0:cb:93:05:3a:58:39:c9:20:54:f1:09:
         84:a6:7c:79:cd:0e:36:dd:d1:17:2a:5a:ac:fc:d4:3d:a9:a1:
         19:40:78:63:de:55:2d:bc:2f:5d:21:4e:1d:97:2e:2e:61:4f:
         89:05:2d:65:d2:57:d2:98:ef:c9:f1:92:ce:2c:30:3d:60:f8:
         3c:f5:f7:18:6e:6c:1b:c6:33:94:f7:12:9e:15:17:6b:d0:c8:
         b0:db:df:d4:ae:f4:8a:16:3a:86:37:f1:72:a1:41:5a:ce:90:
         b7:77:b4:5b:98:16:4d:98:ea:1e:de:99:68:47:ec:7c:f9:8c:
         33:c2:7c:08:39:33:9f:56:83:c6:74:21:79:32:60:74:c9:b2:
         61:59:c5:e5:e5:17:99:ff:5b:9f:28:4c:d6:8f:26:8d:50:56:
         fa:63:bd:d1:41:d1:a6:17:37:ae:dc:f1:57:ba:73:8e:bc:65:
         f5:fd:5e:52:20:f0:b3:9d:44:22:f1:57:d0:e8:72:1a:09:a3:
         2c:5a:96:b1:cb:8e:b4:d8:e4:a1:74:73:af:71:62:c7:68:5d:
         67:55:7e:e6:05:24:67:22:c0:4e:4e:18:88:91:ca:e4:83:ba:
         64:87:9c:cd
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUew4Y53LhoTbcm17GpHOz6IN8fEIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0IzRTFCRENFRDhDQjg5NTk3RkU5MkVBRjc1QkUyREY5
OEFGODRBNzAeFw0yNDEwMDgyMDMxMDVaFw0yNTEwMDcyMDM2MDVaMDMxMTAvBgNV
BAMTKDAwRTJGNERGMTc3OTFBMzA3QkQ5QkIxMjQ0MDY3REM0OTc1NjVENDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbd3JehCc8g9i5L35SWbVtT+cc
6hsiblKV7BcSeBlZSzYF3KYNXuvuLfYas52P6Cnnfn9oNv7fQBlZgygiyNJIQQtF
2PiUKzG/cxQ3IRK2u2q0+mvMWkDPI1o2aEo7KcQ7+xO9oPqXcOtWuOWi1ctdtpIg
vGT8Xx6xKsVX9vTXWv4RIrRpkg/+IX4IUdWPpUIZN+Y4GfYVb7zlWXDttNPM92AO
MUYidVEEHog6j9KoTxtulipjVvzF7RxHe++3WESJ9JsxhHeveJHVo4BfSlxo4xcc
Tgcxa0m5j1CCeh+0cWs+36/fXGo2+3S29HKF69uxWe/eYoWDJPdWpRwWw8E7AgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUAOL03xd5GjB72bsSRAZ9xJdWXUgwHwYDVR0j
BBgwFoAUOz4b3O2MuJWX/pLq91vi35ivhKcwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraS5zbi1wLmlvL3JlcG8vc24tcC1pby8w
LzNCM0UxQkRDRUQ4Q0I4OTU5N0ZFOTJFQUY3NUJFMkRGOThBRjg0QTcuY3JsMIGT
BggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC8yLzNCM0UxQkRDRUQ4Q0I4OTU5N0ZFOTJFQUY3NUJFMkRGOThBRjg0QTcu
Y2VyMIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnBraS5z
bi1wLmlvL3JlcG8vc24tcC1pby8wLzMyNjEzMDM2M2EzMTMyMzgzMjNhMzMzYTNh
MmYzNDM4MmQzMTMyMzgyMDNkM2UyMDMyMzAzNTM4MzQzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoG
EoIAAzANBgkqhkiG9w0BAQsFAAOCAQEAU1jPL47NfoEDPB8ScVfgCyxSTpd1N0HB
0MuTBTpYOckgVPEJhKZ8ec0ONt3RFyparPzUPamhGUB4Y95VLbwvXSFOHZcuLmFP
iQUtZdJX0pjvyfGSziwwPWD4PPX3GG5sG8YzlPcSnhUXa9DIsNvf1K70ihY6hjfx
cqFBWs6Qt3e0W5gWTZjqHt6ZaEfsfPmMM8J8CDkzn1aDxnQheTJgdMmyYVnF5eUX
mf9bnyhM1o8mjVBW+mO90UHRphc3rtzxV7pzjrxl9f1eUiDws51EIvFX0OhyGgmj
LFqWscuOtNjkoXRzr3Fix2hdZ1V+5gUkZyLATk4YiJHK5IO6ZIeczQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:35:32 2024 by rpki-client on console-ams.rpki-client.org