Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa
File:                     326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa (raw, json)
Hash identifier:          XIquqk5eatu7MDG7vJzzV3gWKxyFgt5TX70n+ScWh0Y=
Subject key identifier:   A5:AE:16:5F:BF:B1:F3:8D:67:EC:24:45:4D:41:02:14:53:F0:FC:87
Certificate issuer:       /CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Certificate serial:       509F502C1ACD273E8922F7221192B6A4C3F71826
Authority key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa
Signing time:             Mon 21 Jul 2025 16:30:08 +0000
ROA not before:           Mon 21 Jul 2025 16:25:08 +0000
ROA not after:            Mon 20 Jul 2026 16:30:08 +0000
asID:                     205848
IP address blocks:        2a06:1282:20::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Aug 2025 23:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:9f:50:2c:1a:cd:27:3e:89:22:f7:22:11:92:b6:a4:c3:f7:18:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
        Validity
            Not Before: Jul 21 16:25:08 2025 GMT
            Not After : Jul 20 16:30:08 2026 GMT
        Subject: CN=A5AE165FBFB1F38D67EC24454D41021453F0FC87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ce:10:a1:03:31:fa:02:1c:65:f0:9b:2f:13:
                    af:11:f8:49:0e:37:3b:00:01:53:1f:ff:85:27:c6:
                    93:27:12:6b:17:42:ef:67:fb:20:70:ea:6f:79:e1:
                    99:b4:b8:c6:58:76:57:10:7a:1f:b3:8e:c0:c3:ce:
                    01:0a:eb:2b:73:63:82:32:20:60:0e:bf:8a:7c:f7:
                    0c:4e:9b:7f:98:96:92:49:74:73:7a:6d:0c:9b:b6:
                    ad:29:82:35:d4:ea:f5:fc:f8:05:e7:22:a6:e1:80:
                    3e:25:b3:6d:ec:c4:9a:38:c9:6b:25:40:e4:9a:e6:
                    31:d9:16:57:c7:5b:3d:1c:7e:64:5d:a4:40:54:56:
                    58:8b:8d:7c:56:99:58:d7:64:7f:d5:68:79:af:b1:
                    b0:74:f3:5a:a3:88:94:25:be:62:7e:b7:b7:7b:9c:
                    b4:98:4f:ae:e5:f2:3b:6e:05:f7:0e:2d:a7:57:bb:
                    e3:63:ed:9c:40:f3:dd:bc:74:6a:4c:b4:d5:36:f2:
                    e6:5c:10:6c:46:c6:eb:30:60:00:50:2b:1c:b6:e0:
                    30:f6:07:ac:59:07:93:f2:be:65:92:57:60:b0:3b:
                    df:2b:9e:74:6f:64:97:28:4b:4c:8a:3a:41:3f:6f:
                    72:62:32:27:6e:92:a6:d6:b9:3c:28:61:f4:b7:a8:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AE:16:5F:BF:B1:F3:8D:67:EC:24:45:4D:41:02:14:53:F0:FC:87
            X509v3 Authority Key Identifier:
                keyid:8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a32303a3a2f34342d313238203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1282:20::/44

    Signature Algorithm: sha256WithRSAEncryption
         52:77:49:89:f0:c9:ec:b1:b7:e4:6c:f2:50:c2:ef:94:ca:ef:
         23:d4:ce:c7:f9:1e:e8:d8:27:27:a3:ea:7e:3e:63:0b:52:5f:
         04:23:21:51:07:7d:7b:35:95:9c:e7:a5:f3:5e:a1:4d:ba:e2:
         6c:9b:0b:cd:a3:8d:83:b2:44:f0:f9:3b:8a:a2:85:fa:7b:bd:
         8f:10:ce:b4:11:ba:67:0f:c3:a5:32:a8:cd:37:6d:4d:af:5c:
         d6:0e:89:c4:43:5d:4d:06:7a:e6:3f:0c:d4:a2:5b:6d:3d:16:
         06:40:38:61:00:d1:42:ef:cf:1f:e0:49:8c:84:49:32:33:08:
         c1:8b:a6:b6:fe:d1:b0:09:09:8e:ef:b8:3a:4c:33:98:30:7e:
         15:62:e7:09:35:78:b4:2e:83:14:63:b4:44:42:f0:4e:d2:93:
         ac:79:ee:8d:0a:c6:e2:f2:a0:3f:e7:da:43:ae:8f:97:ed:02:
         ac:8b:74:6b:b3:15:b7:f3:7a:a6:11:b5:ba:f4:0f:e7:f7:99:
         d5:32:9d:cc:25:8c:08:21:62:28:0d:1f:c2:8f:54:86:63:ef:
         d0:23:09:cf:e2:8e:6d:e5:8a:a5:ae:63:b4:9f:53:69:9c:97:
         e4:a9:87:7e:01:14:54:98:10:0b:80:31:81:02:0c:2c:09:9e:
         86:bd:6e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:32:50 2025 by rpki-client