Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a313a3a2f34382d313238203d3e20323035383438.roa
File:                     326130363a313238323a313a3a2f34382d313238203d3e20323035383438.roa (raw, json)
Hash identifier:          59As0/jadXYVj1gV+qWz+bosSiTvEpG+oDwhkyCpSWo=
Subject key identifier:   DE:52:6E:4C:1F:86:FF:6A:71:CD:CF:2A:06:D2:BF:B3:43:69:FD:95
Certificate issuer:       /CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Certificate serial:       37D84F8B1F89808620E093EB36625197F80844C2
Authority key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a313a3a2f34382d313238203d3e20323035383438.roa
Signing time:             Thu 03 Jul 2025 15:52:56 +0000
ROA not before:           Thu 03 Jul 2025 15:47:56 +0000
ROA not after:            Thu 02 Jul 2026 15:52:56 +0000
asID:                     205848
IP address blocks:        2a06:1282:1::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d8:4f:8b:1f:89:80:86:20:e0:93:eb:36:62:51:97:f8:08:44:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
        Validity
            Not Before: Jul  3 15:47:56 2025 GMT
            Not After : Jul  2 15:52:56 2026 GMT
        Subject: CN=DE526E4C1F86FF6A71CDCF2A06D2BFB34369FD95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:b5:ad:09:4b:ab:14:66:4a:a1:c4:15:16:
                    bd:d7:fe:93:e9:4c:c4:3a:f2:3c:18:57:48:eb:64:
                    c9:65:46:21:29:2c:40:0f:b7:e7:91:73:e6:85:78:
                    5d:10:5c:24:83:55:c1:36:75:b2:bc:05:c9:e3:04:
                    0c:eb:aa:73:05:c1:e6:f6:69:37:77:a9:58:e0:e1:
                    19:0c:3b:44:55:2f:bb:88:41:07:5a:8c:b7:de:cd:
                    1b:7f:99:2c:2c:c5:75:99:03:4c:a7:f5:75:ff:3b:
                    54:15:97:58:63:1f:98:ce:77:a5:a5:bd:40:ee:55:
                    06:e0:b5:00:8e:09:5c:aa:26:f7:91:b6:5a:fd:52:
                    0c:96:3e:6c:44:4a:5f:2a:4a:e6:1d:2d:97:56:1c:
                    ff:e0:be:2d:44:75:e8:12:d9:ee:0e:05:d0:a0:e6:
                    3d:e0:2e:30:49:85:2a:bb:7e:70:bd:bc:2d:03:4c:
                    6d:98:c4:3d:41:d7:30:09:2b:cd:af:c0:fe:26:9d:
                    cb:ed:6d:88:2d:59:6f:de:14:1e:66:96:53:6d:31:
                    f0:dc:06:87:1d:60:ac:88:d0:1b:2c:9d:3f:09:c2:
                    cf:ad:63:69:13:dd:25:09:95:ee:53:2f:e7:68:6f:
                    fb:08:89:97:4d:04:03:2e:79:6c:1d:cf:54:ef:be:
                    5b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:52:6E:4C:1F:86:FF:6A:71:CD:CF:2A:06:D2:BF:B3:43:69:FD:95
            X509v3 Authority Key Identifier:
                keyid:8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a313a3a2f34382d313238203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1282:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:7b:47:a5:93:8a:c9:63:88:23:72:76:c2:08:e7:ff:12:0a:
         81:77:05:43:21:9c:d2:6a:6c:4b:40:66:1a:b7:a0:71:8b:d9:
         f5:06:72:4a:fd:96:17:b3:73:c1:10:77:34:3d:5e:82:6a:7f:
         25:05:1d:58:f6:1b:ab:d4:7d:be:25:0e:cc:7e:2b:0d:42:bd:
         91:8a:09:07:e1:44:5b:89:8b:35:93:e8:22:f0:7d:87:9a:c8:
         f0:c7:36:46:68:cd:12:29:6f:04:e1:c5:8d:12:2c:91:84:9b:
         aa:cb:6b:2c:2b:60:7c:30:14:c3:32:9e:ed:f3:d0:2d:7f:50:
         7e:59:2c:4c:54:a6:e8:5b:2a:0f:1a:b2:01:37:ca:dc:20:5e:
         31:6c:44:af:fa:f9:20:d3:05:c7:f1:98:4f:72:30:43:69:58:
         6b:7c:82:3a:97:ce:90:e5:2e:94:40:c4:18:af:ec:96:bb:39:
         f1:be:67:ea:4b:c0:17:7d:45:0e:9d:32:ff:68:0f:77:c2:da:
         8b:8a:f7:c3:92:f2:fe:d9:9e:b8:79:5b:d1:13:d5:3c:4d:03:
         04:03:10:2f:82:6c:8f:a5:0f:29:f6:07:8b:51:04:c5:6c:b3:
         b5:d5:3b:f6:3d:90:97:e6:56:e3:a2:2a:58:05:f9:31:cd:76:
         2f:cf:ec:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:42:14 2025 by rpki-client