Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa
File:                     326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa (raw, json)
Hash identifier:          ysQzKr2LfpHKgKtqaoHWNDP3ZdvLo0/OVzWjgd0/KDE=
Subject key identifier:   9E:D6:D3:C7:E4:DA:22:30:64:BC:F1:8E:7B:89:2D:AB:5E:99:87:E8
Certificate issuer:       /CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Certificate serial:       40C74EE07558320E29A03A9558310BED636F73CB
Authority key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa
Signing time:             Mon 21 Jul 2025 16:32:40 +0000
ROA not before:           Mon 21 Jul 2025 16:27:40 +0000
ROA not after:            Mon 20 Jul 2026 16:32:40 +0000
asID:                     205848
IP address blocks:        2a06:1282:10::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Aug 2025 23:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c7:4e:e0:75:58:32:0e:29:a0:3a:95:58:31:0b:ed:63:6f:73:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
        Validity
            Not Before: Jul 21 16:27:40 2025 GMT
            Not After : Jul 20 16:32:40 2026 GMT
        Subject: CN=9ED6D3C7E4DA223064BCF18E7B892DAB5E9987E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:08:7e:16:ae:f0:1d:dc:13:24:70:e6:64:
                    e8:43:3f:aa:1b:84:1f:28:1c:1f:99:3e:52:88:43:
                    5c:a3:fa:8e:70:d6:af:71:7b:28:74:89:b7:66:cf:
                    8a:fc:ee:c4:83:07:e3:fa:59:12:d1:62:82:f9:0a:
                    00:72:b3:b2:08:04:07:b1:30:8e:e8:1b:9b:00:eb:
                    86:03:30:3b:8b:62:18:c0:9d:b6:d8:26:95:d6:93:
                    95:0d:5a:d7:db:40:07:0e:5a:b8:14:4c:98:65:b3:
                    d3:2c:9c:34:29:00:5b:04:d3:ea:8e:94:2c:fa:c4:
                    94:60:45:4e:37:6a:b5:23:8a:14:1c:e6:2d:fb:e5:
                    a9:41:7b:8c:e4:be:2e:fd:a1:c0:b5:ec:b8:45:77:
                    cc:10:5a:2c:21:e4:84:a8:96:11:53:3d:75:24:70:
                    24:94:28:da:3a:30:61:3e:7a:8c:3f:db:c4:38:28:
                    90:67:e7:86:7b:67:44:5a:44:36:56:f7:e3:93:59:
                    59:b7:26:cd:49:ae:21:1d:7c:f9:ca:83:08:f4:82:
                    13:27:5c:61:8c:cc:5c:37:e1:a7:45:51:68:83:14:
                    64:fd:99:57:cb:39:5b:5f:ab:ab:8d:96:24:3f:21:
                    03:be:af:5f:20:61:6f:cd:1a:0d:06:3d:20:00:f3:
                    97:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D6:D3:C7:E4:DA:22:30:64:BC:F1:8E:7B:89:2D:AB:5E:99:87:E8
            X509v3 Authority Key Identifier:
                keyid:8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a31303a3a2f34342d313238203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1282:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         31:bd:7c:b8:46:3a:bd:79:ff:d1:ec:25:c0:a9:ee:48:0e:8c:
         92:76:e5:1b:36:7c:6f:a6:4c:7a:bb:bc:71:31:99:53:00:02:
         ec:8f:3a:c1:fe:91:b4:f5:cf:90:10:ef:45:3f:18:cb:2e:3f:
         fd:7a:a7:d9:2c:50:20:08:91:16:17:4a:19:0c:16:c7:5b:65:
         03:d2:14:04:5f:8a:3d:39:39:a6:25:c3:de:fe:f1:c7:70:72:
         df:cf:35:2e:e2:e4:d6:3b:6d:40:e4:eb:f2:55:ce:f7:01:f5:
         79:82:06:15:4c:a0:4c:91:15:a7:ad:ad:c6:07:fb:43:d8:24:
         52:45:d8:b5:c1:3a:f7:2b:ab:1f:72:87:bc:8c:85:1d:41:ab:
         ef:66:86:46:49:50:51:43:11:e2:4b:3b:a1:ab:7d:a3:12:5f:
         cd:31:3f:ea:13:99:81:2c:02:bd:1e:a1:e2:bd:0c:21:fd:3e:
         89:4d:f7:25:00:e6:55:60:76:87:16:aa:9d:45:37:12:38:42:
         0e:f8:ea:5b:0f:a6:7d:70:ed:ea:bc:d7:fc:71:8f:51:75:a0:
         ea:e9:e9:5b:81:28:f5:fc:01:d3:b6:13:8e:ec:1c:f0:e0:cd:
         96:ac:6a:2c:9c:2a:74:35:2b:d5:29:c2:b7:23:b7:b4:57:1a:
         bf:28:9c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:45 2025 by rpki-client