Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a3a2f34342d313238203d3e20323035383438.roa
File:                     326130363a313238323a3a2f34342d313238203d3e20323035383438.roa (raw, json)
Hash identifier:          r2TeINFddDk6FLNy1P02Sojy5Y0A05B3sX9lm7yGZIc=
Subject key identifier:   01:94:CA:FE:82:B5:1D:B4:5A:EC:92:F6:A3:E4:26:F9:09:75:51:84
Certificate issuer:       /CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
Certificate serial:       2D782D5EC31523DB15242809D8D8F0171A2C96EB
Authority key identifier: 8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a3a2f34342d313238203d3e20323035383438.roa
Signing time:             Mon 21 Jul 2025 16:33:09 +0000
ROA not before:           Mon 21 Jul 2025 16:28:09 +0000
ROA not after:            Mon 20 Jul 2026 16:33:09 +0000
asID:                     205848
IP address blocks:        2a06:1282::/44 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl
                          rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Aug 2025 23:12:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:78:2d:5e:c3:15:23:db:15:24:28:09:d8:d8:f0:17:1a:2c:96:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0F9F7AA93BA1735F59A004E37710C51DFBB593
        Validity
            Not Before: Jul 21 16:28:09 2025 GMT
            Not After : Jul 20 16:33:09 2026 GMT
        Subject: CN=0194CAFE82B51DB45AEC92F6A3E426F909755184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3e:bd:4c:b3:ac:d3:bb:be:7d:39:46:74:84:
                    ac:2f:ec:89:97:7d:4c:22:0d:46:e0:52:72:3e:a0:
                    34:2b:50:c6:b9:c4:d0:48:6d:5c:f7:39:fa:95:a5:
                    10:17:47:24:2f:23:ab:df:0c:47:68:11:93:23:3a:
                    1a:a3:74:8e:45:f3:8a:b4:39:18:d0:b6:c4:d3:99:
                    ba:8d:ba:64:9f:bb:37:19:0c:e2:a5:3e:29:8f:51:
                    e5:47:43:17:ea:70:99:d4:9e:01:83:a8:77:86:f8:
                    e6:99:4d:bb:2a:0b:58:c2:70:3a:1e:23:e2:97:53:
                    56:aa:09:69:fe:20:33:0f:32:b4:64:a3:92:60:a1:
                    18:62:72:30:ce:e3:19:02:dd:d4:1c:1f:95:c5:ee:
                    e6:b1:08:8c:0b:95:da:53:73:b7:1f:97:da:65:4c:
                    b9:b5:51:c7:41:f7:b8:53:db:17:c1:a9:fe:17:6d:
                    5b:44:3c:92:b5:1c:76:ee:80:e2:9c:5d:28:5f:30:
                    ff:4c:bf:dd:89:16:cb:2b:e5:34:4b:d6:d3:25:87:
                    df:47:b4:e2:0d:8a:8f:54:29:a7:7f:d8:ee:b0:14:
                    1b:6a:30:64:fa:16:91:a5:66:85:2d:31:bf:bf:58:
                    73:e7:e4:15:1d:eb:e7:6e:70:c9:f6:04:73:08:43:
                    d6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:94:CA:FE:82:B5:1D:B4:5A:EC:92:F6:A3:E4:26:F9:09:75:51:84
            X509v3 Authority Key Identifier:
                keyid:8C:0F:9F:7A:A9:3B:A1:73:5F:59:A0:04:E3:77:10:C5:1D:FB:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8C0F9F7AA93BA1735F59A004E37710C51DFBB593.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/2/326130363a313238323a3a2f34342d313238203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1282::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:6a:51:e9:d6:fb:b0:03:0b:ec:f6:f1:c1:a8:e5:7f:01:eb:
         a3:3e:21:98:33:f0:a6:37:23:e7:4c:e8:b1:f3:23:ac:57:4d:
         4a:8c:cf:5b:94:94:3f:dd:44:a1:6c:2b:f1:8b:29:18:e3:ca:
         ce:4b:70:c5:ca:ef:09:eb:a2:8a:73:39:cb:4b:97:ed:16:6e:
         7c:57:2b:4b:09:5b:d9:77:eb:5a:fd:98:ca:9c:44:c9:ac:52:
         b3:fa:b8:59:17:ae:cb:f7:59:62:30:57:24:0e:f8:8e:9d:6a:
         ea:4b:16:dd:75:a2:5e:10:d1:59:46:31:08:ed:79:9d:68:5e:
         44:e8:e9:6f:a2:9c:50:c3:6d:bc:26:ac:59:4a:ec:28:0a:2d:
         ed:3c:3a:1e:a5:cc:85:fe:61:a7:0b:84:be:8e:a3:11:ae:b3:
         a1:c9:cf:7f:d1:e3:66:eb:93:e6:18:a4:37:31:03:b9:65:42:
         89:6d:53:6d:f8:57:88:3e:fc:7a:dc:83:36:60:ce:74:f5:3c:
         10:72:87:da:e9:48:63:91:3a:b5:11:9b:03:e5:6f:ce:96:5b:
         af:1d:e4:86:17:5f:c2:13:c6:03:8e:6b:fb:b3:30:bd:c7:97:
         85:88:01:54:2b:fe:dd:b3:78:d2:7c:31:87:27:c4:78:5b:4b:
         b3:b7:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:39 2025 by rpki-client