Route Origin Authorization

$ rpki-client -vvvf rpki.sunoaki.net/repo/SUNOAKI/0/32332e3136332e382e302f32342d3234203d3e203437373738.roa
File:                     32332e3136332e382e302f32342d3234203d3e203437373738.roa (raw, json)
Hash identifier:          yXSoleKkgt70zVIclA7FE6bcwvSQ8PI8YEh+JEsToLk=
Subject key identifier:   8D:A0:39:FD:46:FC:C8:3A:87:60:B6:C8:57:BD:C1:08:00:BA:CA:4D
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       645A0B0AECF9BB4510144BA512BDDF11E11039D9
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/32332e3136332e382e302f32342d3234203d3e203437373738.roa
Signing time:             Sun 27 Sep 2026 06:57:30 +0000
ROA not before:           Sun 27 Sep 2026 06:52:30 +0000
ROA not after:            Sun 26 Sep 2027 06:57:30 +0000
asID:                     47778
IP address blocks:        23.163.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 12:09:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5a:0b:0a:ec:f9:bb:45:10:14:4b:a5:12:bd:df:11:e1:10:39:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Sep 27 06:52:30 2026 GMT
            Not After : Sep 26 06:57:30 2027 GMT
        Subject: CN=8DA039FD46FCC83A8760B6C857BDC10800BACA4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b3:67:cc:e8:f4:14:60:f6:54:c8:d7:1f:93:
                    00:9b:fb:6a:cb:26:44:8b:a0:68:bc:c8:b7:e9:ae:
                    99:3b:8a:46:9a:70:fd:ac:26:99:66:b3:10:69:ce:
                    72:d9:d4:09:3f:85:75:33:6e:1c:23:6f:64:a3:1a:
                    0a:c9:77:77:96:d1:57:c3:24:08:d6:d3:4b:c2:e8:
                    c0:12:63:cc:f1:2f:eb:97:4c:a2:dc:80:a5:b9:3c:
                    cf:f6:d0:7f:cd:f4:a0:eb:4b:5f:24:e6:30:34:53:
                    f4:91:c3:db:41:2b:ed:42:9b:73:ae:3f:3f:19:0e:
                    b6:d2:ce:c9:42:aa:74:60:45:ef:3b:f0:77:cb:1a:
                    2e:52:7d:98:7c:98:cb:9c:42:db:01:d3:50:af:da:
                    61:82:86:57:02:25:b4:93:a2:76:93:1c:b2:41:ef:
                    44:aa:c6:6b:97:ff:e1:aa:8e:2f:2b:c7:cc:28:d4:
                    df:e0:84:5d:69:ac:c3:87:55:c7:f7:31:cd:26:bb:
                    ea:8c:22:82:9d:43:c3:8c:87:c6:af:14:41:ef:d2:
                    55:51:68:3f:46:da:06:3b:90:5c:4b:6e:14:8e:13:
                    01:69:01:5c:cf:1e:5b:2f:e7:0e:fb:b1:6a:32:a9:
                    d0:55:22:3f:74:78:ed:82:b6:ee:09:fb:9f:d2:b3:
                    5b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A0:39:FD:46:FC:C8:3A:87:60:B6:C8:57:BD:C1:08:00:BA:CA:4D
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/32332e3136332e382e302f32342d3234203d3e203437373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:67:57:51:7d:c3:b5:bb:8c:3b:58:bf:d6:6c:e2:fb:40:54:
         c0:69:5d:35:ad:56:d3:6c:2d:0f:09:14:87:68:05:49:9e:a9:
         45:7b:71:d3:4a:a0:a5:19:65:56:31:b8:c7:ea:0c:b0:1b:20:
         f4:2c:5b:64:03:72:bf:72:82:b5:de:0a:24:f9:b3:51:a2:8d:
         1d:8a:ab:79:f6:a9:51:a4:31:71:e4:7a:e9:e8:6c:e6:d7:03:
         e3:9a:be:e0:4d:a7:56:5d:f7:90:68:7a:10:ad:62:a2:48:96:
         21:99:21:b3:ad:06:47:7e:44:08:bb:42:32:41:c3:f9:ad:23:
         a8:76:ef:67:c7:4b:61:39:e4:2e:fa:11:78:11:37:4d:8b:1b:
         ad:9e:cc:9c:c7:a8:2b:ae:fa:53:27:db:48:0b:22:b1:3b:21:
         31:b0:26:e7:5d:0a:9e:3b:34:ff:a2:bb:62:d5:c0:4c:dc:eb:
         2a:18:7e:38:0b:5e:e1:05:34:a7:42:ac:a3:a8:08:81:81:30:
         52:be:de:45:d5:53:64:fd:3d:93:9d:ad:bd:ae:60:fc:9c:27:
         70:26:ab:69:ce:f9:d5:f7:91:e6:e8:a3:ea:6d:73:a1:17:12:
         58:22:0c:81:ed:56:69:e9:76:ae:3a:cb:a4:24:53:bb:c9:5c:
         53:19:67:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:31:04 2026 by rpki-client