Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a3a2f34382d313238203d3e20323035383438.roa
File:                     326130363a313238323a3a2f34382d313238203d3e20323035383438.roa (raw, json)
Hash identifier:          6xIBC9pBH1zAei3VVJ5XlaoqLTqunHpRHBmKemVJrfI=
Subject key identifier:   CC:10:9E:9F:19:F3:7A:44:C5:32:AC:31:15:1F:66:B1:E8:A9:8A:2B
Certificate issuer:       /CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Certificate serial:       429D97103A8DEF82EEE89BF92CE09953E79C25B4
Authority key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a3a2f34382d313238203d3e20323035383438.roa
Signing time:             Thu 03 Jul 2025 15:52:56 +0000
ROA not before:           Thu 03 Jul 2025 15:47:56 +0000
ROA not after:            Thu 02 Jul 2026 15:52:56 +0000
asID:                     205848
IP address blocks:        2a06:1282::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:9d:97:10:3a:8d:ef:82:ee:e8:9b:f9:2c:e0:99:53:e7:9c:25:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
        Validity
            Not Before: Jul  3 15:47:56 2025 GMT
            Not After : Jul  2 15:52:56 2026 GMT
        Subject: CN=CC109E9F19F37A44C532AC31151F66B1E8A98A2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:04:fc:2d:ee:79:9b:4a:ce:6c:1a:a4:5b:c3:
                    bb:b8:74:67:c9:33:f8:79:ec:dc:a9:f1:88:ac:92:
                    1d:43:2a:59:30:1a:21:17:04:d5:10:52:e9:d1:aa:
                    6d:7c:77:7a:17:eb:c1:63:f3:5d:43:65:d7:67:e9:
                    e6:37:4b:8a:3f:d7:a4:db:48:8b:28:27:61:7d:e6:
                    0b:05:c2:ec:49:cf:a8:e2:a8:65:3f:00:b8:84:03:
                    66:f1:8f:65:f0:11:80:ab:bb:52:6c:3b:e7:c1:56:
                    d8:7e:4f:56:b7:d0:e9:ae:71:65:df:ef:72:15:7d:
                    f7:dd:d7:a0:9a:8d:c6:b6:94:5c:39:44:d4:dd:7c:
                    56:0b:1e:53:7a:40:6d:29:f5:21:8d:d8:8d:6a:6c:
                    39:11:d1:d1:93:ea:26:9e:a8:92:3e:0a:55:09:ef:
                    a0:34:5d:e9:5c:8f:78:62:1c:95:64:62:3b:4c:cc:
                    a7:36:25:2c:06:f3:8e:87:06:8b:53:07:62:93:2b:
                    b3:8e:8d:e8:b8:08:ff:60:0c:a2:ef:82:08:90:14:
                    95:fb:c1:88:c8:43:e1:88:7c:ee:72:fc:c1:19:15:
                    24:ea:31:2f:bd:7d:92:3c:e8:13:87:0b:5d:d7:03:
                    d8:bc:88:56:d7:82:62:84:4c:44:e9:77:38:db:2e:
                    d7:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:10:9E:9F:19:F3:7A:44:C5:32:AC:31:15:1F:66:B1:E8:A9:8A:2B
            X509v3 Authority Key Identifier:
                keyid:8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a3a2f34382d313238203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1282::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:03:dc:55:cd:17:2d:67:58:ed:83:9a:ed:f1:eb:a4:fa:7b:
         8e:7f:4a:13:42:a4:77:02:ea:ba:39:02:07:99:54:04:c9:75:
         9d:f3:10:8d:2f:47:d6:d9:cd:be:05:e8:b3:ae:33:36:89:cf:
         77:3f:1a:28:6b:3f:d4:d9:66:b7:76:31:9a:22:f3:45:25:b9:
         22:7d:a9:7a:58:f4:94:7c:84:13:2a:fc:22:2f:7e:ba:f4:93:
         0d:dd:27:43:0b:ca:cf:81:6a:b9:2e:f2:dc:6b:59:84:58:b2:
         44:0f:33:36:b5:f3:8c:b1:2b:75:5a:9a:82:b5:0e:b9:00:d3:
         37:20:99:96:a1:59:a5:dc:b8:e6:af:1a:39:70:cd:3a:dc:db:
         1e:0c:22:14:b7:a2:0e:c1:02:3c:d1:24:34:e0:07:8b:7b:1c:
         c9:90:e5:c8:00:50:ab:30:8d:f0:1e:0c:b0:f5:26:b9:c0:b3:
         47:43:13:d2:cc:c2:3b:6a:66:cd:1e:05:e3:ec:7a:91:e2:06:
         ab:50:41:00:10:4a:d4:2a:c9:d1:c9:68:79:ef:85:ea:87:25:
         28:b5:95:c9:89:a2:81:65:e9:e8:18:ea:7b:36:f6:1b:1b:fd:
         37:60:d7:ca:11:34:68:38:74:5a:c4:fd:9b:6b:c5:e9:c1:97:
         31:71:48:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 08:43:27 2025 by rpki-client