Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a323a3a2f34382d3438203d3e203437373738.roa
File:                     323630323a3261333a323a3a2f34382d3438203d3e203437373738.roa (raw, json)
Hash identifier:          fROYP/tYZwoAUY3VFGpJWFYMEVEX8Ppkb362SkwWrds=
Subject key identifier:   1D:68:0B:B3:75:60:DB:DD:D0:60:63:22:0B:76:80:EC:45:D8:DB:86
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       2D78DB87B69E5FFE09E82BB5C3F553D742CB149B
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a323a3a2f34382d3438203d3e203437373738.roa
Signing time:             Fri 20 Dec 2024 21:17:49 +0000
ROA not before:           Fri 20 Dec 2024 21:12:49 +0000
ROA not after:            Fri 19 Dec 2025 21:17:49 +0000
asID:                     47778
IP address blocks:        2602:2a3:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:78:db:87:b6:9e:5f:fe:09:e8:2b:b5:c3:f5:53:d7:42:cb:14:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec 20 21:12:49 2024 GMT
            Not After : Dec 19 21:17:49 2025 GMT
        Subject: CN=1D680BB37560DBDDD06063220B7680EC45D8DB86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:29:ad:38:73:c9:9a:18:0d:f2:7a:a2:ab:b6:
                    36:01:f5:97:b5:59:7c:97:eb:f5:a6:c7:69:8a:c4:
                    90:30:67:01:8a:d3:3c:b8:46:b4:94:4b:b0:86:0d:
                    8f:2a:6d:af:fc:01:1c:89:c7:39:aa:a3:68:3c:55:
                    03:eb:d2:7e:f1:b3:99:3a:e7:81:27:4b:9f:ab:a4:
                    34:29:70:a0:b9:4e:fb:a9:f4:78:ed:07:30:9b:bb:
                    fe:5d:1d:d3:6b:80:47:e1:e1:8b:af:6a:43:b9:10:
                    25:ca:87:06:e7:2e:a1:7f:ac:91:ac:bc:46:5e:75:
                    36:2b:34:5d:a2:28:a4:10:7b:48:13:f3:df:1e:e1:
                    32:28:66:43:ad:8c:45:a0:30:a7:1c:33:6d:b0:41:
                    f6:af:f7:d4:51:e6:06:3e:97:54:22:22:80:6d:84:
                    51:84:8f:74:78:b0:a6:84:60:c3:2e:75:2c:20:8e:
                    c2:d6:56:20:8f:53:db:d6:60:f1:9f:22:5a:33:08:
                    c2:57:4c:b1:c7:1b:30:36:74:b2:54:cc:aa:45:25:
                    3c:6d:b1:ce:8f:b8:d1:0c:ca:07:93:65:85:ef:7e:
                    4a:4a:7b:a9:c0:3f:98:80:d5:66:b0:97:33:db:91:
                    61:da:a3:91:e9:5d:5d:56:68:a4:b7:ad:41:98:2e:
                    4a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:68:0B:B3:75:60:DB:DD:D0:60:63:22:0B:76:80:EC:45:D8:DB:86
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a323a3a2f34382d3438203d3e203437373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:0c:83:d3:0a:0b:52:a7:0b:99:13:df:01:75:98:aa:5f:71:
         e9:7f:0a:30:76:e8:43:c9:93:c0:04:df:83:8d:cf:74:55:4e:
         31:7d:7e:3b:ed:ca:30:ef:9b:f4:fd:d4:49:88:7d:72:6c:1a:
         2e:07:55:ef:f1:06:73:ce:6c:d6:7a:72:a3:33:16:b7:fe:09:
         43:16:d0:8a:10:cc:57:8b:35:af:ae:5f:b7:cf:24:6b:10:12:
         33:45:ac:b8:16:2c:eb:04:3a:0a:8a:af:67:b0:57:25:31:14:
         10:26:aa:d5:be:8e:63:1a:57:3f:07:bd:f5:c6:6b:e5:02:6e:
         8a:cb:3f:3b:53:75:ea:b4:5e:c1:47:1e:18:90:52:53:6b:16:
         26:85:85:e7:8f:7c:1c:3e:77:0c:b9:99:b1:ef:35:9d:7e:ac:
         47:b6:92:e5:ab:38:e9:f4:23:fe:1c:8a:57:03:28:5b:81:9e:
         c2:5c:3d:81:0b:60:74:7a:32:30:63:68:5c:45:b6:d9:1b:4d:
         78:0e:92:d8:f5:cd:b5:d0:8f:5e:60:91:b7:61:0e:42:77:48:
         5b:ca:64:02:4e:d3:88:92:f7:39:1b:dc:2a:c5:a3:e4:c7:9a:
         3b:8e:b0:cf:7a:41:c8:f0:ea:4b:8b:1a:83:1a:ef:7d:01:a9:
         34:85:16:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:09:08 2025 by rpki-client