Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/32332e3136332e382e302f32342d3234203d3e20323131373539.roa
File:                     32332e3136332e382e302f32342d3234203d3e20323131373539.roa (raw, json)
Hash identifier:          +uQR0Vk101Ztlas8PDdZVbSTC+aPC8rEVq7BGGHPgYw=
Subject key identifier:   61:BD:B5:A6:F8:3C:65:57:39:5B:FD:5D:66:88:B1:7E:E6:E7:16:4F
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       38C71526CA5FD503C5A1FBCE4A679D046C6B7395
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/32332e3136332e382e302f32342d3234203d3e20323131373539.roa
Signing time:             Fri 20 Dec 2024 21:17:50 +0000
ROA not before:           Fri 20 Dec 2024 21:12:50 +0000
ROA not after:            Fri 19 Dec 2025 21:17:50 +0000
asID:                     211759
IP address blocks:        23.163.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:c7:15:26:ca:5f:d5:03:c5:a1:fb:ce:4a:67:9d:04:6c:6b:73:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec 20 21:12:50 2024 GMT
            Not After : Dec 19 21:17:50 2025 GMT
        Subject: CN=61BDB5A6F83C6557395BFD5D6688B17EE6E7164F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:c8:fa:63:e9:b3:ab:e1:e5:21:ed:51:cd:03:
                    76:cf:51:33:09:04:aa:b4:66:33:27:e7:22:58:dd:
                    02:62:ad:f9:b6:ad:61:1f:3c:c2:cf:1e:c8:a8:96:
                    3c:36:3d:c9:6c:6d:51:4d:9b:03:7b:79:3e:8d:7c:
                    13:33:6c:f9:6c:60:e5:c4:09:e5:36:9f:ad:8d:b0:
                    20:89:4e:6e:d5:20:fb:00:62:16:54:f9:b5:cf:d3:
                    bf:6f:ff:07:26:b8:e4:2c:b9:10:c9:35:ac:32:91:
                    22:d7:c3:39:2d:31:2d:5c:33:af:a7:33:17:4d:42:
                    44:eb:69:27:bb:21:a1:4f:c3:77:e7:0d:9f:bd:cd:
                    ed:46:4f:1c:41:55:f5:a2:27:b1:25:d2:4b:6a:0b:
                    5b:4e:ce:dd:87:93:93:94:f6:24:a1:dc:44:75:e2:
                    16:83:0f:ad:8d:a3:d8:9c:7b:58:67:fc:25:94:ae:
                    3a:ca:ac:44:a0:58:0d:19:28:3b:08:4a:9c:51:cb:
                    94:b0:c9:77:95:ee:6c:14:ed:15:85:ba:9e:cc:0e:
                    0c:7b:08:6f:60:21:4d:82:ea:74:b8:83:72:0a:12:
                    49:d3:e9:77:71:ff:4c:ce:e6:a5:cf:fd:1f:33:9d:
                    f8:09:7d:20:66:0e:62:ed:ce:aa:c1:98:2f:f6:5d:
                    9b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BD:B5:A6:F8:3C:65:57:39:5B:FD:5D:66:88:B1:7E:E6:E7:16:4F
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/32332e3136332e382e302f32342d3234203d3e20323131373539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:f0:ad:1f:d9:e1:1b:fd:e6:29:49:92:7e:62:a5:0a:7f:b9:
         83:b1:7f:c7:ff:fd:24:03:18:92:4a:50:1f:4e:7c:57:2c:97:
         e5:43:46:d8:a0:32:74:91:f4:51:04:35:3b:5d:1c:2e:56:66:
         26:2c:dc:0e:ec:40:ea:eb:65:8e:3b:ca:2c:2a:f7:84:09:a3:
         f7:d9:73:07:84:ca:1c:a2:cd:c6:28:eb:9c:9c:e1:00:cb:6f:
         b3:91:a1:b1:7d:5e:27:52:45:cd:2f:1e:ab:42:6a:a7:07:43:
         75:a1:3d:cb:ad:7f:2f:aa:ee:c6:92:dd:e5:c8:5d:82:ae:18:
         d1:e2:4d:50:d3:c2:2a:d0:fc:6b:05:e6:38:57:ab:b8:dd:02:
         ba:af:a3:e0:ec:bc:23:9b:34:3b:90:5f:42:96:db:10:64:cc:
         33:02:57:2b:05:c1:d8:35:9b:32:0e:b8:5a:76:a9:0b:bc:fd:
         9e:b7:8d:ba:76:d8:a5:5b:34:c1:14:9f:8f:52:61:79:06:b9:
         f3:84:f9:fb:8e:6b:e5:3b:dc:b6:0a:ad:10:e6:0b:19:a0:7e:
         e7:e2:a4:8f:e7:ac:5e:05:ec:c4:c3:e8:9e:f9:01:c4:5b:25:
         50:82:f9:7a:32:17:62:b4:cf:a2:15:6e:a7:bb:9e:81:62:16:
         99:99:10:22
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIUOMcVJspf1QPFofvOSmedBGxrc5UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzIwM2RlOWE5M2E2MTM2MjRmZWJmOGNlZjg1ZWIxNzZm
ZWI1NDU0MDUxYmJmNjljM2UwHhcNMjQxMjIwMjExMjUwWhcNMjUxMjE5MjExNzUw
WjAzMTEwLwYDVQQDEyg2MUJEQjVBNkY4M0M2NTU3Mzk1QkZENUQ2Njg4QjE3RUU2
RTcxNjRGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMj6Y+mzq+Hl
Ie1RzQN2z1EzCQSqtGYzJ+ciWN0CYq35tq1hHzzCzx7IqJY8Nj3JbG1RTZsDe3k+
jXwTM2z5bGDlxAnlNp+tjbAgiU5u1SD7AGIWVPm1z9O/b/8HJrjkLLkQyTWsMpEi
18M5LTEtXDOvpzMXTUJE62knuyGhT8N35w2fvc3tRk8cQVX1oiexJdJLagtbTs7d
h5OTlPYkodxEdeIWgw+tjaPYnHtYZ/wllK46yqxEoFgNGSg7CEqcUcuUsMl3le5s
FO0VhbqezA4MewhvYCFNgup0uINyChJJ0+l3cf9Mzualz/0fM534CX0gZg5i7c6q
wZgv9l2bEwIDAQABo4ICajCCAmYwHQYDVR0OBBYEFGG9tab4PGVXOVv9XWaIsX7m
5xZPMB8GA1UdIwQYMBaAFBeo6HBgiZvbhmqhD4exO4oEfKyZMA4GA1UdDwEB/wQE
AwIHgDBlBgNVHR8EXjBcMFqgWKBWhlRyc3luYzovL3Jwa2kuc3Vub2FraS5uZXQv
cmVwby9TVU5PQUtJLzAvMTdBOEU4NzA2MDg5OUJEQjg2NkFBMTBGODdCMTNCOEEw
NDdDQUM5OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03Jz
eW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRh
MjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00
YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q0MGU2Y2FiLWU2NmMtNGNhNy1hYjYxLTEy
NmIzY2ZjYmI4Ni83MjAzZGU5YTkzYTYxMzYyNGZlYmY4Y2VmODVlYjE3NmZlYjU0
NTQwNTFiYmY2OWMzZS5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmBy
c3luYzovL3Jwa2kuc3Vub2FraS5uZXQvcmVwby9TVU5PQUtJLzAvMzIzMzJlMzEz
NjMzMmUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzEzMTM3MzUzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEABejCDANBgkqhkiG9w0BAQsFAAOCAQEAjPCtH9nhG/3mKUmSfmKlCn+5
g7F/x//9JAMYkkpQH058VyyX5UNG2KAydJH0UQQ1O10cLlZmJizcDuxA6utljjvK
LCr3hAmj99lzB4TKHKLNxijrnJzhAMtvs5GhsX1eJ1JFzS8eq0JqpwdDdaE9y61/
L6ruxpLd5chdgq4Y0eJNUNPCKtD8awXmOFeruN0Cuq+j4Oy8I5s0O5BfQpbbEGTM
MwJXKwXB2DWbMg64WnapC7z9nreNunbYpVs0wRSfj1JheQa584T5+45r5Tvctgqt
EOYLGaB+5+Kkj+esXgXsxMPonvkBxFslUIL5ejIXYrTPohVup7uegWIWmZkQIg==
-----END CERTIFICATE-----
Generated at Fri Mar 14 14:08:48 2025 by rpki-client