Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/32332e3134372e3233322e302f32342d3234203d3e203531383437.roa
File:                     32332e3134372e3233322e302f32342d3234203d3e203531383437.roa (raw, json)
Hash identifier:          lUnNVSjsgZAjmNHXxFhvlRw+eHChUo2gqyqF4wBNUQU=
Subject key identifier:   47:05:9F:46:E3:EB:2B:E1:79:5A:00:68:8A:1F:0E:E3:1E:14:52:D3
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       762E6678F23F0B46200E5A8E5BFF1FD82CE95FC1
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/32332e3134372e3233322e302f32342d3234203d3e203531383437.roa
Signing time:             Fri 20 Dec 2024 21:17:51 +0000
ROA not before:           Fri 20 Dec 2024 21:12:51 +0000
ROA not after:            Fri 19 Dec 2025 21:17:51 +0000
asID:                     51847
IP address blocks:        23.147.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Mar 2025 22:24:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2e:66:78:f2:3f:0b:46:20:0e:5a:8e:5b:ff:1f:d8:2c:e9:5f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec 20 21:12:51 2024 GMT
            Not After : Dec 19 21:17:51 2025 GMT
        Subject: CN=47059F46E3EB2BE1795A00688A1F0EE31E1452D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:34:43:bc:11:77:8b:9e:69:fe:a2:f5:86:1f:
                    c7:ac:c1:af:cc:e6:df:64:c2:95:05:72:42:a8:ec:
                    a2:76:07:9f:9b:c9:67:5a:08:12:bd:24:dd:d0:d2:
                    61:04:12:0d:22:ce:53:c8:07:2f:a8:90:cd:bb:cd:
                    e5:a5:82:f5:dc:34:d0:43:79:4c:8c:1a:52:e9:1e:
                    ec:9e:da:a8:00:b9:d7:b9:ad:e2:20:e8:3a:8e:fb:
                    09:51:db:d9:8e:55:1b:49:15:00:e6:3c:cf:8c:4f:
                    db:14:29:c9:60:0c:08:a5:03:6b:8e:08:f0:ff:42:
                    a7:ba:c3:46:32:2a:b5:0a:5f:ee:61:97:c2:dc:17:
                    df:ea:a6:83:28:2c:e5:d6:24:b1:eb:2e:84:e7:5b:
                    cf:cf:a5:22:dc:73:df:ba:54:20:8d:d7:d8:b9:2b:
                    32:6b:30:a6:06:fc:66:2a:30:0a:1d:9a:4a:2e:1d:
                    f6:a4:b2:23:d2:c1:96:e9:2c:8c:c4:f3:5d:58:e5:
                    4e:06:b2:39:a6:ee:c5:97:2c:77:60:39:7d:33:a5:
                    3e:78:fb:76:4d:68:3f:4f:46:1e:6c:e0:1a:5c:eb:
                    36:32:b2:c9:67:1e:bd:58:d8:0f:01:0a:99:2f:5f:
                    6a:67:3c:15:13:1f:ab:6a:c0:6b:25:ca:9a:96:5c:
                    c5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:05:9F:46:E3:EB:2B:E1:79:5A:00:68:8A:1F:0E:E3:1E:14:52:D3
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/32332e3134372e3233322e302f32342d3234203d3e203531383437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:e1:c4:80:c1:e2:d1:fe:f1:15:e7:91:93:da:05:5a:a6:06:
         12:24:77:4a:cf:2d:34:0c:3a:76:e7:96:62:cf:c9:e3:c6:82:
         cc:0c:d5:54:ee:49:43:3e:b4:89:f9:d3:7a:46:55:85:df:ea:
         3e:33:8b:d5:77:87:44:42:50:b4:a6:b0:0e:b6:2a:2a:db:ee:
         b3:bd:5f:dd:77:22:79:0b:55:66:98:d9:5d:7f:62:e2:8f:79:
         80:3b:2f:fe:13:3a:55:76:51:f5:ce:d3:9a:aa:99:42:b1:01:
         01:dd:82:99:a5:15:48:4b:88:90:4d:dc:af:e8:96:52:32:7d:
         ad:fe:73:6f:68:aa:05:63:4b:35:a0:f4:c4:af:67:23:b1:3d:
         02:9b:66:3a:3b:4f:99:42:1e:09:bd:17:3e:e9:29:7b:a8:cf:
         dd:69:53:23:aa:e6:87:d6:a3:92:bc:aa:5f:14:d7:6e:04:51:
         d3:3e:4e:e2:80:e9:14:c4:80:23:95:13:b2:04:3a:44:24:a0:
         af:49:30:d5:cb:fb:10:4d:6e:95:4c:02:ff:60:4b:38:40:1c:
         65:f7:78:b7:1a:55:92:e7:8a:94:6d:4c:a0:89:8f:86:6f:9a:
         7a:20:89:20:b0:de:e3:7f:27:7a:d5:0d:dc:c7:1a:08:bc:4c:
         56:14:92:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:31:04 2025 by rpki-client