Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3330303a3a2f34312d3438203d3e20323134303236.roa
File:                     323630323a3261333a3330303a3a2f34312d3438203d3e20323134303236.roa (raw, json)
Hash identifier:          qjZ0AoNLp33+UXCqamXxmOnEikAU+/c5OMPg1wIKUj0=
Subject key identifier:   3E:8A:30:18:62:2D:81:B8:8D:52:C1:76:32:F9:75:8A:1E:6A:27:27
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       0975744D0A5CA00188500E07B8C2A82E2CBA7D9B
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3330303a3a2f34312d3438203d3e20323134303236.roa
Signing time:             Mon 20 Oct 2025 15:27:25 +0000
ROA not before:           Mon 20 Oct 2025 15:22:25 +0000
ROA not after:            Mon 19 Oct 2026 15:27:25 +0000
asID:                     214026
IP address blocks:        2602:2a3:300::/41 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 13:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:75:74:4d:0a:5c:a0:01:88:50:0e:07:b8:c2:a8:2e:2c:ba:7d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Oct 20 15:22:25 2025 GMT
            Not After : Oct 19 15:27:25 2026 GMT
        Subject: CN=3E8A3018622D81B88D52C17632F9758A1E6A2727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:92:f2:27:ac:3b:78:a6:ec:97:cd:f4:c3:18:
                    78:74:2b:e2:2e:51:49:6c:33:aa:42:dc:c2:2f:8b:
                    c5:ea:1f:2b:43:19:d9:64:4a:8f:a2:be:d7:d7:b0:
                    4a:b4:79:2e:0e:93:4b:51:e3:8e:ac:e9:cc:e0:0f:
                    ae:69:61:d1:0e:d3:73:8d:1a:1e:d3:b7:ed:ef:ab:
                    78:97:69:1e:f8:fc:46:e3:3f:63:55:06:df:6c:a9:
                    2d:e5:27:c7:ac:1b:84:ea:c4:11:ea:ac:e2:7b:29:
                    80:ec:7a:ec:dd:67:30:96:98:33:1c:5e:0f:82:a5:
                    4e:60:e5:18:de:eb:27:ef:96:2f:4f:1f:6d:86:b4:
                    e3:ae:18:41:c9:88:48:fb:75:04:06:71:0b:a0:69:
                    b5:9f:5a:05:c5:61:1d:8c:ff:4a:90:5c:4d:06:d5:
                    0d:72:30:1e:d8:1c:78:d6:01:1d:bc:a7:05:33:f5:
                    41:5e:7d:8f:fc:d6:71:a3:32:9a:9f:e5:0c:7f:01:
                    7b:33:6d:77:f6:77:80:a1:cc:e1:f5:be:04:c6:44:
                    b2:f8:fa:ff:f5:9e:d8:37:bc:f8:85:a3:ee:1b:8d:
                    ae:e5:28:d3:0f:0f:4f:4d:1c:fd:1a:1b:c5:29:3f:
                    bd:a8:f4:b9:78:a2:9f:a3:2e:24:0f:6f:89:40:72:
                    ff:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8A:30:18:62:2D:81:B8:8D:52:C1:76:32:F9:75:8A:1E:6A:27:27
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3330303a3a2f34312d3438203d3e20323134303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:300::/41

    Signature Algorithm: sha256WithRSAEncryption
         33:24:08:ac:77:95:04:76:bd:86:d5:ce:0d:07:cd:fd:92:2b:
         a8:80:2c:ea:c3:01:8b:db:b4:27:6f:0d:e6:ae:b3:99:30:4b:
         4d:8a:dc:08:6b:e1:03:6b:56:6f:bc:5f:85:90:38:77:5b:53:
         ee:f5:7d:de:c2:95:11:8b:05:2c:6f:1a:b3:e5:5e:97:b2:b0:
         54:93:d5:58:da:13:e3:7d:c8:f7:83:ad:f9:50:0c:5a:69:1d:
         93:25:03:67:18:51:35:f3:f8:01:87:72:31:58:7b:89:c4:b9:
         44:33:6c:ed:f5:f3:94:e2:bf:6f:e1:d3:6f:b1:a8:ab:84:18:
         90:87:fd:12:5b:4c:8d:3b:0d:6d:e0:f5:98:87:97:e7:9a:ae:
         4b:18:21:15:9d:b8:4d:14:8e:71:57:a5:4a:91:89:39:64:32:
         00:5e:bb:dc:56:a5:3e:ce:44:07:9c:2d:6d:63:87:28:c3:7c:
         1c:39:5c:37:83:af:a0:a4:20:f0:41:46:dc:b1:68:b2:05:17:
         80:cc:28:6d:c1:3c:19:d3:99:26:4f:6c:04:3b:72:45:3d:48:
         6a:31:df:b9:67:60:ce:40:69:74:59:b4:41:08:66:af:91:9d:
         cf:01:c0:48:1e:e9:99:10:f4:07:a9:bc:e6:dc:ef:8f:e6:c0:
         f2:23:74:64
-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIUCXV0TQpcoAGIUA4HuMKoLiy6fZswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzIwM2RlOWE5M2E2MTM2MjRmZWJmOGNlZjg1ZWIxNzZm
ZWI1NDU0MDUxYmJmNjljM2UwHhcNMjUxMDIwMTUyMjI1WhcNMjYxMDE5MTUyNzI1
WjAzMTEwLwYDVQQDEygzRThBMzAxODYyMkQ4MUI4OEQ1MkMxNzYzMkY5NzU4QTFF
NkEyNzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pLyJ6w7eKbs
l830wxh4dCviLlFJbDOqQtzCL4vF6h8rQxnZZEqPor7X17BKtHkuDpNLUeOOrOnM
4A+uaWHRDtNzjRoe07ft76t4l2ke+PxG4z9jVQbfbKkt5SfHrBuE6sQR6qzieymA
7Hrs3WcwlpgzHF4PgqVOYOUY3usn75YvTx9thrTjrhhByYhI+3UEBnELoGm1n1oF
xWEdjP9KkFxNBtUNcjAe2Bx41gEdvKcFM/VBXn2P/NZxozKan+UMfwF7M2139neA
oczh9b4ExkSy+Pr/9Z7YN7z4haPuG42u5SjTDw9PTRz9GhvFKT+9qPS5eKKfoy4k
D2+JQHL/0wIDAQABo4ICdjCCAnIwHQYDVR0OBBYEFD6KMBhiLYG4jVLBdjL5dYoe
aicnMB8GA1UdIwQYMBaAFBeo6HBgiZvbhmqhD4exO4oEfKyZMA4GA1UdDwEB/wQE
AwIHgDBlBgNVHR8EXjBcMFqgWKBWhlRyc3luYzovL3Jwa2kuc3Vub2FraS5uZXQv
cmVwby9TVU5PQUtJLzAvMTdBOEU4NzA2MDg5OUJEQjg2NkFBMTBGODdCMTNCOEEw
NDdDQUM5OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03Jz
eW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRh
MjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00
YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q0MGU2Y2FiLWU2NmMtNGNhNy1hYjYxLTEy
NmIzY2ZjYmI4Ni83MjAzZGU5YTkzYTYxMzYyNGZlYmY4Y2VmODVlYjE3NmZlYjU0
NTQwNTFiYmY2OWMzZS5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpLnN1bm9ha2kubmV0L3JlcG8vU1VOT0FLSS8wLzMyMzYzMDMy
M2EzMjYxMzMzYTMzMzAzMDNhM2EyZjM0MzEyZDM0MzgyMDNkM2UyMDMyMzEzNDMw
MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB
/wQTMBEwDwQCAAIwCQMHByYCAqMDADANBgkqhkiG9w0BAQsFAAOCAQEAMyQIrHeV
BHa9htXODQfN/ZIrqIAs6sMBi9u0J28N5q6zmTBLTYrcCGvhA2tWb7xfhZA4d1tT
7vV93sKVEYsFLG8as+Vel7KwVJPVWNoT433I94Ot+VAMWmkdkyUDZxhRNfP4AYdy
MVh7icS5RDNs7fXzlOK/b+HTb7Goq4QYkIf9EltMjTsNbeD1mIeX55quSxghFZ24
TRSOcVelSpGJOWQyAF673FalPs5EB5wtbWOHKMN8HDlcN4OvoKQg8EFG3LFosgUX
gMwobcE8GdOZJk9sBDtyRT1IajHfuWdgzkBpdFm0QQhmr5GdzwHASB7pmRD0B6m8
5tzvj+bA8iN0ZA==
-----END CERTIFICATE-----
Generated at Wed Oct 22 03:57:38 2025 by rpki-client