Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a333a3a2f34382d3438203d3e203437373738.roa
File:                     323630323a3261333a333a3a2f34382d3438203d3e203437373738.roa (raw, json)
Hash identifier:          uASdY9wZC/IZ++UKzVVylMN9sr93wnIPkWKStPOOuMw=
Subject key identifier:   73:0C:C5:2F:92:E9:68:E2:E4:73:DE:23:52:38:2A:B2:0B:36:90:FD
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       0A2D1FC2028FC582C7E80DDEDA5586BB7AC5EBCA
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a333a3a2f34382d3438203d3e203437373738.roa
Signing time:             Fri 20 Dec 2024 21:17:50 +0000
ROA not before:           Fri 20 Dec 2024 21:12:50 +0000
ROA not after:            Fri 19 Dec 2025 21:17:50 +0000
asID:                     47778
IP address blocks:        2602:2a3:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:2d:1f:c2:02:8f:c5:82:c7:e8:0d:de:da:55:86:bb:7a:c5:eb:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec 20 21:12:50 2024 GMT
            Not After : Dec 19 21:17:50 2025 GMT
        Subject: CN=730CC52F92E968E2E473DE2352382AB20B3690FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:58:75:2a:99:44:7e:1b:d9:d0:f2:f6:35:a6:
                    a9:4c:7b:98:f7:76:16:e0:5d:83:ee:63:01:10:cb:
                    fb:0a:ee:01:74:cf:c3:a7:6a:b9:1a:fe:99:5a:e7:
                    31:95:91:31:80:5e:1e:3e:03:3b:6b:82:26:4c:40:
                    2e:a8:ac:47:02:53:17:a7:b7:e8:f5:c9:4b:88:78:
                    18:b1:0a:d3:60:cc:dd:38:f8:ed:02:6d:3a:b8:75:
                    5e:5b:0a:2e:20:1d:e8:49:86:38:e8:b6:1a:46:ba:
                    5e:22:ee:d0:51:1a:6b:b4:39:13:ab:c8:95:9e:fc:
                    57:ba:9d:9f:4a:d4:a3:1d:2e:1a:52:2e:9a:89:de:
                    16:4d:c1:2f:cf:c7:40:19:99:9d:e2:d5:02:1c:20:
                    00:dc:f1:b4:f7:6a:b2:6c:7d:3d:cf:c5:07:60:80:
                    3d:fc:0e:57:6c:80:34:0d:0c:59:93:a0:39:24:6e:
                    4b:2d:56:33:22:55:ee:ad:c8:99:e3:3d:9a:21:4e:
                    cd:08:3e:e3:c8:11:c8:6c:5c:05:6b:a4:bf:fa:db:
                    c5:8e:03:6d:6f:68:6e:d1:1c:e2:9b:ab:74:7f:86:
                    c2:57:83:9c:24:33:9e:90:05:f6:51:25:b1:52:37:
                    59:08:2a:00:41:73:0c:80:a8:2f:5d:62:1e:ec:4f:
                    db:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0C:C5:2F:92:E9:68:E2:E4:73:DE:23:52:38:2A:B2:0B:36:90:FD
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a333a3a2f34382d3438203d3e203437373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:f3:6d:76:99:4d:3f:d1:db:c1:23:d8:70:ef:bf:a5:93:fd:
         76:ad:6f:09:90:6c:50:4c:d1:cc:1f:8b:2e:2b:e9:75:5f:00:
         7b:58:34:54:e7:89:4d:f4:a4:0e:f1:3e:13:58:23:be:81:ae:
         c9:92:2d:7f:e9:fa:83:70:ab:ce:8f:ea:87:66:10:3a:69:a8:
         51:4a:93:6f:c1:80:50:f8:29:0d:14:be:a9:45:93:97:18:9c:
         b6:84:c1:97:30:5a:fb:e0:15:2b:77:7f:c5:8c:fd:5d:16:85:
         6a:de:3f:78:ff:24:86:13:a9:3a:eb:9b:c7:78:6e:1b:36:a5:
         ad:94:48:8d:45:a2:be:eb:9a:bf:cc:51:4c:07:f3:7e:77:d5:
         b9:dd:53:a0:93:a2:04:73:02:fa:0b:f0:16:e0:98:3a:ac:56:
         01:23:ea:9f:c4:3c:48:0e:fc:47:83:8a:73:79:ab:d5:ca:cd:
         f8:6f:84:7e:86:bf:52:6f:d5:5a:f2:5b:a8:5a:65:59:c8:bf:
         e2:90:b5:4c:b3:8e:64:fc:33:f9:b9:f2:4f:12:8a:7d:fe:81:
         e6:4f:3a:03:fb:72:77:68:e0:eb:62:8a:fc:2e:f4:b9:7e:18:
         a3:d1:9f:09:6c:b2:c7:4e:d8:c7:bb:00:da:53:4a:8e:f6:0f:
         22:16:af:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:08:48 2025 by rpki-client