Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa
File:                     326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa (raw, json)
Hash identifier:          tycFKYP/anx2JiNOOjsQ3oPM2wjVx4azas7m8j+efRE=
Subject key identifier:   10:40:30:9B:0B:F2:4E:5D:6F:66:F8:20:B5:B9:53:C2:39:DA:E4:11
Certificate issuer:       /CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Certificate serial:       5294EDFC310C6AAD6E48AEC7B8D1F236B1662875
Authority key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa
Signing time:             Fri 05 Sep 2025 20:18:22 +0000
ROA not before:           Fri 05 Sep 2025 20:13:22 +0000
ROA not after:            Fri 04 Sep 2026 20:18:22 +0000
asID:                     205848
IP address blocks:        2a06:1282:40::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 07:58:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:94:ed:fc:31:0c:6a:ad:6e:48:ae:c7:b8:d1:f2:36:b1:66:28:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
        Validity
            Not Before: Sep  5 20:13:22 2025 GMT
            Not After : Sep  4 20:18:22 2026 GMT
        Subject: CN=1040309B0BF24E5D6F66F820B5B953C239DAE411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:58:1b:04:06:7a:4d:e7:2e:c2:48:72:37:
                    b4:3c:c4:fc:d3:d8:b8:0c:40:80:57:dd:a8:93:0e:
                    9b:7d:30:e3:33:4d:bd:1e:78:a3:cf:9b:d4:a2:2f:
                    74:cf:23:a8:d5:64:e0:38:53:41:0e:fc:41:f2:8d:
                    65:72:b7:d6:74:91:fe:2b:86:db:0e:ad:a2:79:f0:
                    24:17:f1:e3:98:0f:59:51:e5:ad:7f:bf:dd:02:27:
                    40:97:e1:72:11:df:50:a1:ab:29:d7:41:83:30:69:
                    3d:b2:99:54:13:d8:e0:cf:b1:ef:a1:42:11:dd:4c:
                    f7:76:ae:35:69:37:af:23:58:cc:c4:ef:a3:e4:52:
                    14:60:99:7d:f4:a8:ca:05:a2:4a:05:5e:ea:18:06:
                    10:db:4c:e3:65:8b:67:eb:85:6a:07:51:ef:23:d1:
                    ae:64:5e:51:ee:55:66:93:6b:9e:d2:04:cd:a3:d8:
                    ab:1e:4f:4b:04:76:d2:cb:ea:b0:da:9e:fd:24:ad:
                    2a:7d:99:24:0d:5d:6c:b2:05:57:1b:18:63:1b:c7:
                    98:b4:a7:30:ca:a5:7b:03:21:43:58:7a:97:8c:b3:
                    c6:43:57:65:90:fc:a1:9d:a6:a0:70:d8:a6:d4:9a:
                    eb:69:e2:02:43:d2:e8:45:a2:3e:78:d7:a2:51:df:
                    9f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:40:30:9B:0B:F2:4E:5D:6F:66:F8:20:B5:B9:53:C2:39:DA:E4:11
            X509v3 Authority Key Identifier:
                keyid:8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a34303a3a2f34342d313238203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1282:40::/44

    Signature Algorithm: sha256WithRSAEncryption
         31:e2:b8:b2:55:ef:8e:a9:d1:0e:9f:25:27:51:13:d4:5d:f6:
         cd:77:00:4f:7d:d6:aa:b1:4f:c0:7c:da:1f:3c:e6:41:7f:e5:
         ea:78:89:e5:c7:4f:da:8f:3b:ae:39:2d:5e:a6:19:81:ff:7f:
         6e:25:77:8e:8f:25:87:ee:6e:5e:bd:5b:be:e8:8b:97:23:da:
         a5:45:4a:bc:29:4e:a3:b5:85:66:4e:67:e8:3e:1b:eb:0f:0e:
         21:7a:77:4d:c6:42:32:b7:16:60:52:5c:f2:44:3a:04:a2:df:
         92:2e:b2:bb:ca:87:4b:6e:a3:27:44:5e:a8:f1:a3:de:e7:ba:
         cb:17:a1:13:40:0a:c6:d7:5e:4c:c9:8f:75:d3:9f:c9:be:97:
         7d:33:37:9a:e4:3d:ad:2f:9d:07:50:06:0a:66:3b:9d:0c:dd:
         8a:24:6f:bb:9c:32:71:1b:d9:99:19:d9:25:8d:42:4d:78:f4:
         e4:24:e3:2f:97:2b:41:5b:35:69:6f:9f:38:0a:36:32:b8:42:
         df:47:d1:b2:6e:89:9c:9c:38:f3:84:62:91:a6:85:e9:3d:30:
         a1:e0:5b:2d:d6:40:07:95:24:6a:66:a4:5a:a1:2b:0a:4e:d9:
         74:a6:0b:5c:08:bb:7b:31:09:e4:9f:17:94:0e:ae:d9:f9:6a:
         71:70:00:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 22:58:46 2025 by rpki-client