Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a353a3a2f34382d3438203d3e203437373738.roa
File:                     323630323a3261333a353a3a2f34382d3438203d3e203437373738.roa (raw, json)
Hash identifier:          R2xS4b+SZnS5jetzv3pq45ErMmvEaWYC8k3rtvp5JpM=
Subject key identifier:   93:0D:8E:1E:1C:E2:B5:16:FE:D9:D3:72:7A:D7:C7:99:DB:8C:2D:A9
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       2BD6796D3F06AD80D2F237596C4E4584DB4C875B
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a353a3a2f34382d3438203d3e203437373738.roa
Signing time:             Fri 20 Dec 2024 21:17:49 +0000
ROA not before:           Fri 20 Dec 2024 21:12:49 +0000
ROA not after:            Fri 19 Dec 2025 21:17:49 +0000
asID:                     47778
IP address blocks:        2602:2a3:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d6:79:6d:3f:06:ad:80:d2:f2:37:59:6c:4e:45:84:db:4c:87:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec 20 21:12:49 2024 GMT
            Not After : Dec 19 21:17:49 2025 GMT
        Subject: CN=930D8E1E1CE2B516FED9D3727AD7C799DB8C2DA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:41:9f:8a:3e:06:8d:3f:0a:18:0d:72:e3:90:
                    0f:7c:8c:3b:54:16:bc:57:b3:b3:59:07:68:7b:a0:
                    8d:a5:bc:30:2f:1f:a3:3a:77:76:ca:00:05:07:3b:
                    63:30:20:a3:11:8e:66:51:45:b9:2e:0b:cf:dc:dc:
                    5d:7e:50:af:11:da:22:0b:95:2c:f1:16:db:9c:79:
                    76:f7:86:66:06:fd:fb:17:e1:c3:b6:80:df:f8:8b:
                    bc:88:b9:95:32:13:a7:de:53:b2:cb:e3:4a:b0:c5:
                    fe:28:c0:b5:73:d6:b5:34:bf:8a:8b:14:66:c8:2f:
                    97:6b:9f:73:ac:cb:17:86:77:51:36:d9:fc:04:8f:
                    6c:03:8f:52:b5:c8:b6:d9:9c:8a:e2:6a:61:6f:e9:
                    9b:b6:a0:02:ad:5b:68:a7:15:11:41:47:8f:d2:35:
                    86:e3:49:57:04:6d:fb:e2:d2:52:d1:f9:a2:29:14:
                    2a:bf:fd:dc:20:33:dd:6b:3b:42:08:58:56:fb:d7:
                    1d:b7:e8:c2:7b:81:f9:53:3c:db:98:49:cf:a5:98:
                    1a:20:c3:35:ce:e9:64:e2:77:a8:60:c6:9b:63:43:
                    b4:61:05:fc:07:1c:13:c6:24:b5:87:06:c8:85:49:
                    9b:f8:cc:d6:88:d8:dc:9b:48:38:04:4e:86:8a:2c:
                    6f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0D:8E:1E:1C:E2:B5:16:FE:D9:D3:72:7A:D7:C7:99:DB:8C:2D:A9
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a353a3a2f34382d3438203d3e203437373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:cc:f6:9d:3c:cd:ca:a3:ee:f4:fc:39:f9:0a:e8:fc:71:5a:
         6a:71:08:8e:48:0a:15:59:88:af:b4:7a:37:31:81:fb:c4:4c:
         c8:42:b2:10:78:7d:9c:26:9d:65:cb:35:e7:33:2d:d2:e8:f1:
         c5:82:be:24:b8:5c:c6:cf:a3:6f:71:0d:d7:e3:7d:ed:fb:18:
         75:16:d0:7d:bf:e9:22:f6:1d:d8:11:5c:5c:24:86:0a:60:e7:
         4b:4e:5c:74:d8:0b:29:a1:4b:63:f8:83:09:8f:24:86:18:24:
         56:aa:77:c8:27:5f:2f:6d:61:89:9f:c9:0d:5d:53:af:0e:93:
         bf:ae:fa:5e:a0:f4:74:ca:9c:16:3f:30:77:7c:e4:99:4c:c7:
         e5:24:c9:a0:f7:8f:54:fc:da:38:80:1f:d8:1b:13:6f:c7:f6:
         ac:7c:fb:ff:58:01:31:a3:a0:9c:5c:00:ea:43:b0:8a:1d:6e:
         a4:5b:fa:26:c4:8d:fb:99:35:09:86:81:53:4b:c8:84:b4:a0:
         ee:d5:42:2c:d5:7d:20:82:37:86:c5:91:26:83:70:d7:0a:d0:
         aa:ac:8a:c6:1c:c8:07:75:e0:a6:a4:6d:20:46:c5:dd:32:3e:
         f4:0e:3e:16:2f:06:f4:c6:0f:31:3a:a9:ef:81:8e:44:40:a3:
         74:48:9a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:09:05 2025 by rpki-client