Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3430303a3a2f33382d3438203d3e20323033333134.roa
File:                     323630323a3261333a3430303a3a2f33382d3438203d3e20323033333134.roa (raw, json)
Hash identifier:          SgsA0dsyRqR3UkZqUQltax+XRmGRrnocF4LDY7c1xp8=
Subject key identifier:   EA:40:7C:F1:3F:A2:59:36:25:52:9A:81:3F:A8:CF:82:F1:B3:8F:78
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       4B991C8E7EE555AE8E8FE07217F989468C4B9A00
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3430303a3a2f33382d3438203d3e20323033333134.roa
Signing time:             Fri 20 Dec 2024 21:17:49 +0000
ROA not before:           Fri 20 Dec 2024 21:12:49 +0000
ROA not after:            Fri 19 Dec 2025 21:17:49 +0000
asID:                     203314
IP address blocks:        2602:2a3:400::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:99:1c:8e:7e:e5:55:ae:8e:8f:e0:72:17:f9:89:46:8c:4b:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec 20 21:12:49 2024 GMT
            Not After : Dec 19 21:17:49 2025 GMT
        Subject: CN=EA407CF13FA2593625529A813FA8CF82F1B38F78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:92:58:a3:20:24:4e:05:d6:a4:50:b0:0b:
                    5f:0b:c5:03:b8:f4:5e:89:f0:f3:fa:5f:23:7e:fc:
                    46:84:35:e1:9f:ae:fd:96:dc:a6:8c:8a:45:1b:d0:
                    14:2f:49:b3:0d:95:8e:9e:61:32:dc:9d:a7:ef:70:
                    eb:d5:c6:01:84:3b:5b:40:57:e3:f5:18:82:ed:cb:
                    6c:15:d3:64:d1:b1:8b:b3:c8:40:16:7c:bf:1b:e5:
                    fd:af:2d:c9:1e:bb:1c:65:70:e4:76:5d:8b:cc:58:
                    9c:b0:97:d1:2a:41:4e:b2:00:a0:0a:07:f8:ee:94:
                    95:4e:9c:1d:f9:bf:05:c1:61:b5:8d:35:a1:b9:85:
                    5f:1f:76:67:8d:f3:03:fa:94:b3:dc:d5:0b:b8:c8:
                    95:f0:47:11:76:7a:d5:8f:1c:28:a2:f9:6f:e5:43:
                    17:df:b5:a1:62:24:2e:a5:d4:1c:76:be:d4:0f:99:
                    25:5a:c4:8b:c6:c7:19:a0:e8:b3:01:40:c0:34:74:
                    be:00:99:a8:92:cf:b6:b7:25:3c:4c:25:1a:24:e6:
                    58:0b:12:db:d5:1b:6a:a4:31:32:4b:d7:fb:cf:df:
                    99:b3:16:86:96:a7:10:c2:eb:fb:87:ce:5b:d4:c4:
                    b0:a2:3a:49:7b:06:42:89:65:f2:cd:d7:1e:38:0e:
                    a8:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:40:7C:F1:3F:A2:59:36:25:52:9A:81:3F:A8:CF:82:F1:B3:8F:78
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3430303a3a2f33382d3438203d3e20323033333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         b0:6a:20:25:7d:cc:8c:c5:d8:71:a3:64:11:85:07:c8:c3:ac:
         a2:30:67:19:8a:04:b0:d0:91:e6:75:a4:21:59:d6:5e:54:7a:
         77:3d:4c:93:9d:17:27:95:59:b4:df:7f:ab:ed:32:66:31:73:
         16:99:72:b7:55:36:53:02:50:51:02:9d:5b:cb:a0:60:bb:5f:
         ac:e3:f3:e7:da:fb:cc:14:b7:bb:c0:b8:33:c2:4a:06:4f:e6:
         6f:e6:5a:08:c9:df:66:0d:70:55:16:c6:7f:50:1e:49:0c:f9:
         aa:0c:2b:57:16:5c:c3:57:77:1b:39:97:57:c6:ae:a8:42:c8:
         63:a4:8b:57:11:13:dc:53:65:07:e3:62:a5:67:45:48:0d:d6:
         37:01:8b:e6:91:8d:4b:af:62:76:ba:cc:f7:f7:51:90:2a:5d:
         b1:9b:de:99:6e:f3:27:e5:d5:64:a8:62:86:d6:4d:97:1e:86:
         c7:4b:3d:39:c7:43:29:9b:46:30:cf:91:ff:51:55:54:86:ef:
         6d:85:90:a4:1b:8c:95:34:f3:56:ad:c6:9c:04:aa:07:ff:cd:
         c8:18:81:40:e4:e3:d6:10:87:47:39:bf:9f:81:ee:6c:e3:78:
         42:5f:e3:76:9d:7d:32:49:1f:3b:dc:f1:19:7a:1b:a9:68:3f:
         88:99:e6:e8
-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIUS5kcjn7lVa6Oj+ByF/mJRoxLmgAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzIwM2RlOWE5M2E2MTM2MjRmZWJmOGNlZjg1ZWIxNzZm
ZWI1NDU0MDUxYmJmNjljM2UwHhcNMjQxMjIwMjExMjQ5WhcNMjUxMjE5MjExNzQ5
WjAzMTEwLwYDVQQDEyhFQTQwN0NGMTNGQTI1OTM2MjU1MjlBODEzRkE4Q0Y4MkYx
QjM4Rjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu52SWKMgJE4F
1qRQsAtfC8UDuPReifDz+l8jfvxGhDXhn679ltymjIpFG9AUL0mzDZWOnmEy3J2n
73Dr1cYBhDtbQFfj9RiC7ctsFdNk0bGLs8hAFny/G+X9ry3JHrscZXDkdl2LzFic
sJfRKkFOsgCgCgf47pSVTpwd+b8FwWG1jTWhuYVfH3ZnjfMD+pSz3NULuMiV8EcR
dnrVjxwoovlv5UMX37WhYiQupdQcdr7UD5klWsSLxscZoOizAUDANHS+AJmoks+2
tyU8TCUaJOZYCxLb1RtqpDEyS9f7z9+ZsxaGlqcQwuv7h85b1MSwojpJewZCiWXy
zdceOA6osQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFOpAfPE/olk2JVKagT+oz4Lx
s494MB8GA1UdIwQYMBaAFBeo6HBgiZvbhmqhD4exO4oEfKyZMA4GA1UdDwEB/wQE
AwIHgDBlBgNVHR8EXjBcMFqgWKBWhlRyc3luYzovL3Jwa2kuc3Vub2FraS5uZXQv
cmVwby9TVU5PQUtJLzAvMTdBOEU4NzA2MDg5OUJEQjg2NkFBMTBGODdCMTNCOEEw
NDdDQUM5OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03Jz
eW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRh
MjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00
YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q0MGU2Y2FiLWU2NmMtNGNhNy1hYjYxLTEy
NmIzY2ZjYmI4Ni83MjAzZGU5YTkzYTYxMzYyNGZlYmY4Y2VmODVlYjE3NmZlYjU0
NTQwNTFiYmY2OWMzZS5jZXIwgYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4Zo
cnN5bmM6Ly9ycGtpLnN1bm9ha2kubmV0L3JlcG8vU1VOT0FLSS8wLzMyMzYzMDMy
M2EzMjYxMzMzYTM0MzAzMDNhM2EyZjMzMzgyZDM0MzgyMDNkM2UyMDMyMzAzMzMz
MzEzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGAiYCAqMEMA0GCSqGSIb3DQEBCwUAA4IBAQCwaiAlfcyM
xdhxo2QRhQfIw6yiMGcZigSw0JHmdaQhWdZeVHp3PUyTnRcnlVm033+r7TJmMXMW
mXK3VTZTAlBRAp1by6Bgu1+s4/Pn2vvMFLe7wLgzwkoGT+Zv5loIyd9mDXBVFsZ/
UB5JDPmqDCtXFlzDV3cbOZdXxq6oQshjpItXERPcU2UH42KlZ0VIDdY3AYvmkY1L
r2J2usz391GQKl2xm96ZbvMn5dVkqGKG1k2XHobHSz05x0Mpm0Ywz5H/UVVUhu9t
hZCkG4yVNPNWrcacBKoH/83IGIFA5OPWEIdHOb+fge5s43hCX+N2nX0ySR873PEZ
ehupaD+Imebo
-----END CERTIFICATE-----
Generated at Fri Mar 14 14:08:47 2025 by rpki-client