Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a343a3a2f34382d3438203d3e20343031353139.roa
File:                     323630323a3261333a343a3a2f34382d3438203d3e20343031353139.roa (raw, json)
Hash identifier:          +WD4nefwJoqx0Ga0vHzUqjpvQX/dyRQ3JzmmCNHge84=
Subject key identifier:   02:B9:01:B4:E0:A2:BE:40:C8:E5:27:0E:67:5A:F8:05:0F:B5:AB:02
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       096BA5F0379D8B9B61203F8CAAD0ADBFEEC178BF
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a343a3a2f34382d3438203d3e20343031353139.roa
Signing time:             Fri 20 Dec 2024 21:17:49 +0000
ROA not before:           Fri 20 Dec 2024 21:12:49 +0000
ROA not after:            Fri 19 Dec 2025 21:17:49 +0000
asID:                     401519
IP address blocks:        2602:2a3:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:6b:a5:f0:37:9d:8b:9b:61:20:3f:8c:aa:d0:ad:bf:ee:c1:78:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec 20 21:12:49 2024 GMT
            Not After : Dec 19 21:17:49 2025 GMT
        Subject: CN=02B901B4E0A2BE40C8E5270E675AF8050FB5AB02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:71:c3:a1:dd:4b:46:37:de:e9:e7:dc:15:
                    84:fc:21:51:30:af:35:53:4c:d1:6c:2e:e1:c6:28:
                    84:d6:6e:5e:4b:0a:a9:16:e0:ad:7f:32:fb:5b:2d:
                    21:5c:f6:ec:f9:80:84:9c:9d:57:10:58:84:a1:63:
                    7e:9c:56:0e:b2:c5:1b:80:01:5e:bb:f8:c6:7b:a0:
                    9e:40:be:fd:4b:25:d8:b2:e4:a8:60:61:08:ff:2c:
                    0f:f2:5d:39:45:7e:38:e4:78:ec:42:4c:10:f7:31:
                    95:07:55:ba:12:c1:70:b4:db:9b:92:f6:1f:36:6f:
                    24:bc:ca:8f:b8:bf:34:7d:22:c7:9e:26:2d:5a:1f:
                    bb:10:28:06:03:75:e3:ca:f6:ac:9b:0a:55:4c:7e:
                    c3:fe:e6:16:df:b9:d6:90:55:0c:b2:6b:ab:19:77:
                    74:b4:52:08:92:5a:f1:5f:02:da:ae:0c:3a:ac:ce:
                    3a:cf:19:7c:77:69:ab:6b:a6:ae:6f:e6:d8:f4:9b:
                    9f:30:0b:e2:4b:6a:7f:34:d5:2c:d9:79:0c:58:5a:
                    e4:08:63:04:42:7b:8f:be:8a:d2:ad:e4:d9:1b:3f:
                    6b:0f:34:ee:5a:5a:ab:c4:54:63:ee:ff:93:a8:76:
                    43:6e:c0:97:ec:fa:ab:d4:5a:fa:ae:bc:f3:db:47:
                    c5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B9:01:B4:E0:A2:BE:40:C8:E5:27:0E:67:5A:F8:05:0F:B5:AB:02
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a343a3a2f34382d3438203d3e20343031353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:be:f0:1c:b8:df:26:28:de:24:25:30:28:76:3f:8c:a6:e6:
         37:9a:31:f9:a3:96:c7:18:6a:d2:cc:7a:68:89:9b:2e:d8:17:
         68:67:e3:f1:09:f3:b9:82:c1:3d:14:94:1d:8d:04:92:57:68:
         96:16:e7:0c:51:67:66:2d:e9:cc:7f:77:fe:12:df:33:00:c2:
         d0:ef:77:4c:e1:79:5d:75:fa:0c:db:ea:7c:33:52:97:5a:1b:
         b6:08:7a:e3:d6:d9:35:f6:54:e7:e3:8f:e1:db:4a:68:51:22:
         f5:b2:af:89:60:95:3b:12:0b:cf:2c:fc:fb:c5:91:59:78:17:
         47:ec:b9:07:c5:9e:f4:dd:3a:01:37:a3:55:5d:87:2c:00:3c:
         dc:0a:e0:ce:1e:5b:2e:bc:6b:63:dc:f3:e2:b1:5a:dc:dd:a9:
         40:52:75:d7:57:42:c4:e6:79:51:0b:c3:c2:0e:17:0d:16:ec:
         76:07:13:52:7d:ba:7a:cd:18:db:74:21:e6:43:a4:6f:f3:81:
         1f:ee:54:e0:71:75:05:21:f3:6c:66:2e:1f:c8:92:01:61:a1:
         7e:e0:38:5b:fe:c2:a0:a0:03:b7:01:a7:77:6c:4f:82:8a:b6:
         68:26:f8:46:34:9e:7c:a8:41:4a:9d:50:3f:4d:7d:24:e0:d4:
         4b:a7:de:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:08:48 2025 by rpki-client