Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a666666663a3a2f34382d3438203d3e2030.roa
File:                     326130363a313238323a666666663a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          sgc1LS/akYGKSjcyxQnxHHp6sovggXVheXNc4/Xrm+U=
Subject key identifier:   C7:55:04:93:1B:4B:3F:D8:CA:C7:83:53:14:FC:F6:B9:B6:AC:C4:B6
Certificate issuer:       /CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Certificate serial:       740D1E1905672EF50A507D887B7FA722ECD6012D
Authority key identifier: 3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a666666663a3a2f34382d3438203d3e2030.roa
Signing time:             Tue 14 May 2024 15:33:23 +0000
ROA not before:           Tue 14 May 2024 15:28:23 +0000
ROA not after:            Tue 13 May 2025 15:33:23 +0000
asID:                     0
IP address blocks:        2a06:1282:ffff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Jun 2024 13:11:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0d:1e:19:05:67:2e:f5:0a:50:7d:88:7b:7f:a7:22:ec:d6:01:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
        Validity
            Not Before: May 14 15:28:23 2024 GMT
            Not After : May 13 15:33:23 2025 GMT
        Subject: CN=C75504931B4B3FD8CAC7835314FCF6B9B6ACC4B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:01:73:3d:f8:bd:31:cf:e8:8c:79:50:6b:
                    c5:4a:03:48:21:5d:6b:b3:c8:96:c5:b8:ca:6e:f6:
                    34:88:42:9a:c6:f5:14:e3:b3:21:5b:37:8f:08:03:
                    e4:4f:a4:53:9f:21:bf:e3:c8:f9:4a:cc:26:da:de:
                    1d:a5:25:81:6b:d1:5b:bb:3b:d8:5e:e9:54:3b:2c:
                    a0:43:3e:d2:fa:e5:09:29:ec:0f:32:a6:01:ee:b9:
                    9a:60:da:36:47:15:b2:96:06:15:1f:f6:71:c5:d2:
                    b0:42:56:6c:70:5a:48:24:11:83:e2:f5:83:b8:1a:
                    d9:94:61:d6:39:e6:24:70:e8:69:4a:2f:e2:e3:80:
                    37:42:e5:14:bd:9a:d1:ea:6f:a3:b2:03:c7:91:ee:
                    78:4d:26:21:0b:09:43:f4:70:9d:f7:98:da:c8:3a:
                    8a:3b:76:63:b4:27:12:df:24:61:d1:dd:a1:59:64:
                    b1:bb:61:48:50:5b:82:c2:8f:1b:6f:52:08:4e:ea:
                    99:61:3f:26:a3:9d:90:4b:e9:27:36:82:65:e1:46:
                    d2:7c:44:cf:3d:77:bc:79:b8:42:ac:68:bb:75:5a:
                    46:02:31:ba:04:3e:2f:ba:62:06:4d:70:61:ca:e3:
                    85:9f:c9:0f:36:c3:1c:24:d6:21:21:b9:92:05:42:
                    87:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:55:04:93:1B:4B:3F:D8:CA:C7:83:53:14:FC:F6:B9:B6:AC:C4:B6
            X509v3 Authority Key Identifier:
                keyid:3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a666666663a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1282:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:d6:55:14:ca:5d:b3:a1:ec:94:36:16:6c:b1:6b:94:49:d6:
         d5:09:1c:f2:1f:1f:48:c7:e5:c3:0c:6d:0d:3b:8d:fe:34:c2:
         a4:15:60:41:1b:25:2c:55:32:e1:d0:8a:cc:20:11:a7:3d:1a:
         c7:d8:1c:09:c7:42:48:09:dd:b5:bd:67:c8:30:67:b5:e9:ac:
         5d:bb:52:e9:f3:53:f8:e5:86:d4:9b:fa:50:db:27:12:68:ee:
         9d:c9:71:93:83:e4:a1:c9:7b:26:f5:d3:39:cd:53:ac:b6:b9:
         48:9c:7f:f7:bc:b6:62:10:f9:d3:2b:67:87:2d:19:b0:86:4f:
         cf:0a:74:c9:f2:74:7b:68:3c:89:17:e4:76:72:b4:45:8e:44:
         70:23:f3:5c:96:a7:cc:66:1f:85:2f:26:83:a8:4d:7c:e6:a4:
         5c:ce:d1:c6:94:73:00:46:a3:f1:0e:57:a9:66:4c:74:e9:69:
         79:45:5e:e8:e2:05:c1:a8:63:ea:73:4a:0f:46:17:3e:35:98:
         47:46:26:e7:5e:99:d8:dd:2b:6c:26:3d:9c:c1:76:82:c8:94:
         de:c2:9a:68:81:d8:ef:11:a2:15:38:cc:a3:12:40:fc:c6:6c:
         52:bc:6d:7a:a2:a0:f3:70:e7:ae:73:eb:5f:bc:b9:7f:74:10:
         a4:8e:4a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:21:39 2024 by rpki-client on console-ams.rpki-client.org