Route Origin Authorization

$ rpki-client -vvvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a343a3a2f34382d3438203d3e20343031353139.roa
File:                     323630323a3261333a343a3a2f34382d3438203d3e20343031353139.roa (raw, json)
Hash identifier:          WHjM1Q9jpu7L2cxM182c93UIoBpE9q5E3ktrABbfH1s=
Subject key identifier:   BE:1D:B5:8B:FC:AA:66:E6:BA:35:4D:4E:4B:E8:DF:9E:2F:DD:1E:5C
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       7D00095DDEEB5320484C3399036A815E1F5B1270
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a343a3a2f34382d3438203d3e20343031353139.roa
Signing time:             Fri 23 Oct 2026 22:41:11 +0000
ROA not before:           Fri 23 Oct 2026 22:36:11 +0000
ROA not after:            Fri 22 Oct 2027 22:41:11 +0000
asID:                     401519
IP address blocks:        2602:2a3:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:00:09:5d:de:eb:53:20:48:4c:33:99:03:6a:81:5e:1f:5b:12:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Oct 23 22:36:11 2026 GMT
            Not After : Oct 22 22:41:11 2027 GMT
        Subject: CN=BE1DB58BFCAA66E6BA354D4E4BE8DF9E2FDD1E5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0c:94:ee:cb:b5:89:9a:28:58:e4:52:e6:d6:
                    2e:70:bf:7e:9a:ce:81:a1:85:5a:83:08:4d:64:87:
                    4b:4a:4a:e6:9c:2c:96:84:18:91:79:28:c9:f4:9f:
                    4c:b3:ac:ac:6f:25:67:63:a5:b9:9a:74:1d:f7:cc:
                    af:3a:49:73:dd:15:7b:33:96:e7:b5:4c:09:52:83:
                    67:f3:19:74:cc:33:04:eb:b9:83:20:0b:a8:20:0f:
                    03:d7:54:4a:4c:d6:9e:a5:24:46:9a:86:28:5b:88:
                    eb:b2:8d:22:fa:0c:59:5e:7c:38:b0:37:bb:6a:46:
                    8b:91:e7:77:1d:1f:6f:3c:f5:2e:1d:e4:64:a6:c8:
                    60:e2:d2:ab:3b:a2:8c:76:03:92:80:89:a2:2c:48:
                    f5:2a:16:2c:88:23:c2:52:e9:54:0a:4c:c7:31:81:
                    b0:a9:31:bf:dd:73:d8:8d:31:9c:35:2b:c6:70:86:
                    0e:be:c4:c5:11:d2:da:da:88:2c:dd:b6:86:5e:7d:
                    17:0d:87:e6:5d:5d:fc:54:b8:8a:40:7a:0c:c1:f7:
                    5f:8b:dd:75:da:7c:c3:d3:9d:47:42:b9:1b:ae:46:
                    01:72:1e:f4:b7:28:ba:b6:b0:bc:89:e4:56:a9:9c:
                    d5:93:20:87:ca:cc:12:10:3e:68:82:56:5d:6c:50:
                    5b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1D:B5:8B:FC:AA:66:E6:BA:35:4D:4E:4B:E8:DF:9E:2F:DD:1E:5C
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a343a3a2f34382d3438203d3e20343031353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:a2:19:19:aa:7d:84:e6:5a:a8:d6:8a:49:5a:a0:8a:07:31:
         58:c4:16:19:da:aa:a6:19:ec:d7:eb:45:cc:5f:c0:8f:8d:69:
         79:b5:d7:c3:1a:48:83:75:35:c5:ed:75:99:e6:b2:12:49:fe:
         84:e7:88:65:46:a9:05:8b:96:56:79:fd:4d:f8:d2:f8:82:8e:
         46:4e:0c:ce:29:cd:af:16:3d:27:cb:d3:eb:dc:db:fd:b1:f8:
         d8:03:97:3a:f4:d8:b9:62:12:11:af:ac:dc:fb:af:88:ea:32:
         30:5a:cf:b9:5d:db:3d:5c:e6:51:bc:1d:bc:80:c2:eb:9a:44:
         a7:d7:e7:cb:86:2a:98:ef:9f:13:95:5e:39:00:99:d6:3c:30:
         78:29:41:f2:b1:f9:2f:1c:c6:67:46:34:67:32:06:eb:59:41:
         17:3d:7b:e0:7f:f9:14:3c:0b:34:a1:ec:1d:3d:c3:04:18:dd:
         61:5c:24:b2:2a:9e:c1:b9:6d:79:26:a1:ca:4e:31:13:d7:76:
         92:9e:fc:b4:12:d7:11:fb:60:f4:4d:49:af:e7:19:81:6d:f8:
         f6:42:69:3d:ac:ca:d4:e6:02:17:a8:35:bf:12:f8:7e:24:e7:
         73:bf:c3:9a:2a:d0:95:9e:a1:53:08:b8:2c:7e:42:a5:8d:fb:
         98:4e:bd:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:19:08 2026 by rpki-client