Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/3134302e3233352e33362e302f32342d3234203d3e203531383437.roa
File:                     3134302e3233352e33362e302f32342d3234203d3e203531383437.roa (raw, json)
Hash identifier:          awtCt33OAnGolU2IQi1O/rpjhwlcAZOreBqJq86n6xU=
Subject key identifier:   1A:C3:F1:FA:6E:58:A4:14:61:1D:E2:2B:36:1D:CF:2B:F9:AD:85:DB
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       369A2B2CA53F983AE0EEF28599B31800C689BAEF
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/3134302e3233352e33362e302f32342d3234203d3e203531383437.roa
Signing time:             Mon 13 Jan 2025 13:37:53 +0000
ROA not before:           Mon 13 Jan 2025 13:32:53 +0000
ROA not after:            Mon 12 Jan 2026 13:37:53 +0000
asID:                     51847
IP address blocks:        140.235.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Mar 2025 22:24:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:9a:2b:2c:a5:3f:98:3a:e0:ee:f2:85:99:b3:18:00:c6:89:ba:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Jan 13 13:32:53 2025 GMT
            Not After : Jan 12 13:37:53 2026 GMT
        Subject: CN=1AC3F1FA6E58A414611DE22B361DCF2BF9AD85DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:a4:88:e4:0e:dc:e3:d8:cf:38:ea:7c:7d:
                    a1:66:22:a4:45:20:58:49:c7:c5:83:ef:db:f2:6c:
                    34:44:8c:31:eb:b8:31:d3:4d:f2:fe:a8:98:68:b4:
                    0d:e9:fb:54:af:5e:17:0c:38:82:a0:d9:65:72:e1:
                    9e:90:fa:07:ac:00:20:ef:52:8d:7d:30:f1:e6:f0:
                    92:28:04:f7:ce:aa:fc:36:ec:28:9c:c3:ee:c1:ca:
                    6d:f7:c9:6e:38:fc:7b:ae:6b:c9:63:4c:2f:37:14:
                    20:7d:fb:2c:ff:13:1b:91:45:55:ae:1d:aa:2c:e2:
                    04:40:20:5e:6f:05:12:46:28:67:ac:25:7b:e9:65:
                    de:fd:c5:1c:6e:db:0c:e2:1d:e7:d7:18:da:11:9d:
                    30:89:91:d7:d3:9a:4b:10:1a:8b:1d:63:6a:e5:6c:
                    81:ce:b4:21:1c:d0:1e:04:39:a1:6a:30:c8:49:ab:
                    66:59:67:0c:44:1a:62:4d:8b:7c:72:e5:58:53:25:
                    50:8e:e6:4a:90:ef:b6:25:6f:e4:d2:f3:fb:c1:c9:
                    82:68:59:38:f4:2b:6a:1e:56:0d:60:6c:20:8c:03:
                    44:7a:99:85:7a:ad:87:61:44:a3:18:76:e2:ad:f3:
                    17:24:0d:55:31:ae:5e:c1:1c:ed:ce:69:c4:cc:9c:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C3:F1:FA:6E:58:A4:14:61:1D:E2:2B:36:1D:CF:2B:F9:AD:85:DB
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/3134302e3233352e33362e302f32342d3234203d3e203531383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:83:b1:34:cf:1b:ed:bb:43:33:98:31:9e:27:03:b9:94:85:
         5b:c3:85:50:cf:68:d6:f9:0d:b1:45:e0:9e:b2:ef:cb:18:95:
         4b:29:d2:b1:c7:e6:18:8d:24:a5:e2:03:d3:03:45:6a:0e:42:
         f0:ca:af:3e:fe:b6:45:ae:f7:77:1e:38:c5:c8:72:3e:19:1a:
         28:06:dd:a4:f7:ae:48:af:aa:cc:18:af:04:5c:ce:aa:a3:33:
         52:49:0e:55:c2:22:5c:bb:a2:10:4a:05:07:e1:56:96:71:be:
         84:f2:99:fe:3f:ef:2d:40:94:b7:ea:fb:ec:ae:39:01:b8:3c:
         cc:ba:18:51:38:0f:5a:8f:88:7b:45:fe:2e:5e:6f:80:8c:47:
         3c:3b:c5:6a:44:a5:6a:f6:44:d7:30:bb:e4:d6:a0:d4:1e:5c:
         83:db:25:5a:6a:1a:97:62:2c:94:24:e0:2f:b4:36:85:2c:6b:
         85:4e:d6:bd:ad:14:d7:93:4c:38:ae:1f:47:d2:91:76:6b:9b:
         76:79:6e:25:bd:c9:a2:bb:aa:c1:35:5d:42:6e:9b:65:43:61:
         2f:db:b0:8a:3c:e1:9d:88:26:14:be:be:c2:9e:fa:7b:a7:a6:
         41:7a:bc:1c:aa:86:ce:d9:c1:46:8a:86:e7:f0:26:38:33:6b:
         ff:dd:67:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:45:36 2025 by rpki-client