Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a323a3a2f34382d313238203d3e20323035383438.roa
File:                     326130363a313238323a323a3a2f34382d313238203d3e20323035383438.roa (raw, json)
Hash identifier:          BTOVp9N6vQhBVoEHjCM4/Ibl4FnqfK98Mc+Ugrx6nVo=
Subject key identifier:   97:BD:64:50:37:EB:67:0D:4C:88:2B:4A:31:07:ED:B4:CD:A8:ED:A6
Certificate issuer:       /CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Certificate serial:       0BAF810AF15E86CBBA9AC305AED77042165B446A
Authority key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a323a3a2f34382d313238203d3e20323035383438.roa
Signing time:             Thu 03 Jul 2025 15:52:55 +0000
ROA not before:           Thu 03 Jul 2025 15:47:55 +0000
ROA not after:            Thu 02 Jul 2026 15:52:55 +0000
asID:                     205848
IP address blocks:        2a06:1282:2::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:af:81:0a:f1:5e:86:cb:ba:9a:c3:05:ae:d7:70:42:16:5b:44:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
        Validity
            Not Before: Jul  3 15:47:55 2025 GMT
            Not After : Jul  2 15:52:55 2026 GMT
        Subject: CN=97BD645037EB670D4C882B4A3107EDB4CDA8EDA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:64:79:9c:53:0b:32:91:07:9a:59:54:97:49:
                    2e:92:f4:0e:2d:b7:f3:17:c4:65:19:d3:1d:76:93:
                    00:23:3b:b3:30:dd:16:8c:0e:f6:e3:1f:b6:be:04:
                    78:48:ce:43:a2:12:41:e6:a0:c3:60:45:46:9c:a4:
                    b6:84:0d:0f:08:0e:1b:87:2d:e2:68:e4:a3:5b:77:
                    a0:47:99:69:f6:b2:f1:9a:5b:0a:25:38:b0:4a:93:
                    ed:69:e9:64:5e:2e:b3:1f:d4:24:e5:0a:6d:6f:59:
                    43:c3:69:e3:3a:ec:f9:c4:10:1e:ec:6e:be:1e:4b:
                    df:18:69:80:d1:76:f4:2b:69:dc:6e:df:66:09:b0:
                    ad:8e:ba:5e:ec:52:e3:aa:ed:d9:72:ec:ba:36:11:
                    24:a0:86:4f:51:c4:12:30:d4:54:eb:f2:76:20:c4:
                    28:02:f1:bb:50:83:4a:25:f2:50:09:04:4a:da:90:
                    31:86:e0:4c:8b:98:bd:17:71:ec:39:f2:5d:e6:cc:
                    3a:90:1d:c4:a1:eb:09:7e:eb:b2:06:17:31:9e:a8:
                    c8:b7:53:09:76:94:3f:40:03:72:41:32:85:83:f3:
                    80:0d:0b:34:8a:b3:f6:77:de:f4:84:62:f9:61:da:
                    91:45:cc:33:7f:19:dd:7e:46:78:86:82:98:b9:cc:
                    9c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BD:64:50:37:EB:67:0D:4C:88:2B:4A:31:07:ED:B4:CD:A8:ED:A6
            X509v3 Authority Key Identifier:
                keyid:8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a323a3a2f34382d313238203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1282:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:79:ac:7c:0f:6e:eb:41:40:78:24:fc:16:4a:c1:07:14:d9:
         60:a1:97:a9:d2:6c:4b:c8:e0:73:1d:35:81:64:dc:40:b6:10:
         21:53:ed:85:55:5d:a0:09:bf:08:84:6b:2e:96:fe:32:ef:e9:
         55:76:a0:ef:2c:5e:59:ce:bb:8f:4f:9b:ed:e4:ec:31:c5:c8:
         80:1b:61:08:c3:e7:52:61:d1:50:08:4c:a2:50:75:48:e6:36:
         fa:da:b4:e5:25:a2:6a:bf:32:c6:aa:b7:00:90:c7:fd:85:26:
         19:6b:28:f7:2f:a4:c8:24:c8:51:a0:f0:59:fe:6a:a0:69:5c:
         a8:c2:53:c0:0c:54:e0:1d:ef:37:1c:20:6d:fc:8d:16:fa:ee:
         1f:dc:2b:98:58:de:be:0f:0d:ce:3b:37:96:00:97:3d:ce:b6:
         e8:e3:bf:4d:01:aa:9a:45:46:b1:b3:45:09:c3:45:a7:a5:1e:
         9c:4f:13:e1:59:6e:b7:d0:29:8e:08:b8:fc:9b:56:4a:4e:b0:
         b9:14:65:84:be:e6:ca:62:4f:43:7e:39:23:10:04:3e:bf:eb:
         00:7c:04:5b:ae:5a:7a:0e:95:54:ad:21:34:53:ba:4f:94:e1:
         b9:99:15:4e:07:26:2a:7a:3a:08:6f:3f:0f:70:f7:ab:1a:b1:
         f6:b7:2a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:44:53 2025 by rpki-client