Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3a2f34382d3438203d3e20343031353139.roa
File:                     323630323a3261333a3a2f34382d3438203d3e20343031353139.roa (raw, json)
Hash identifier:          p09b0qrW95j0qP8U0gO82rcenKsP7Msjezo+5l56EZA=
Subject key identifier:   73:53:A5:5E:08:A8:C9:43:89:F1:C1:9F:BF:F4:99:92:FC:54:BF:C3
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       1A199772E9A5B969545386047087CBA8FF50921A
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3a2f34382d3438203d3e20343031353139.roa
Signing time:             Fri 20 Dec 2024 21:17:52 +0000
ROA not before:           Fri 20 Dec 2024 21:12:52 +0000
ROA not after:            Fri 19 Dec 2025 21:17:52 +0000
asID:                     401519
IP address blocks:        2602:2a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:19:97:72:e9:a5:b9:69:54:53:86:04:70:87:cb:a8:ff:50:92:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec 20 21:12:52 2024 GMT
            Not After : Dec 19 21:17:52 2025 GMT
        Subject: CN=7353A55E08A8C94389F1C19FBFF49992FC54BFC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dd:63:90:6e:d2:30:b8:a7:ac:bd:81:28:91:
                    b6:7b:de:4d:d1:50:01:58:85:6b:7b:4d:7b:fb:3d:
                    a2:d7:46:10:cc:03:48:cd:b6:b0:18:4f:6f:a0:44:
                    d1:10:9b:46:09:de:95:7d:fe:28:bc:bb:9a:c7:8d:
                    88:4f:8f:74:1f:b2:85:6a:c4:9a:94:d0:12:5d:d0:
                    e2:e1:49:d5:3c:9e:4a:4b:48:51:45:97:82:fe:3b:
                    4e:f1:d2:38:d8:81:ea:86:60:08:7f:63:b7:d4:78:
                    00:0b:9f:e7:e4:15:5c:15:21:da:69:1b:84:fa:9e:
                    f0:51:f6:43:f2:91:cf:38:21:cf:ec:c3:89:47:1e:
                    1e:b7:e0:c0:e2:7e:40:ff:7b:18:a1:9b:a2:90:5b:
                    a7:37:fe:92:5f:72:c2:8d:01:ac:0c:88:66:f6:99:
                    98:47:6e:be:5c:8e:a6:75:bd:28:eb:b8:39:65:cd:
                    a3:f7:8f:d0:f8:fc:f7:17:a8:08:6b:6e:da:9d:8c:
                    03:3f:02:1a:0a:16:4b:6f:7d:05:e8:2c:01:d0:54:
                    7d:55:09:13:4a:0e:29:40:0f:fe:1d:c4:3d:f5:76:
                    42:f9:5b:0a:09:b5:6a:85:94:f8:05:a9:36:e2:87:
                    61:85:94:aa:4c:c9:3a:0e:93:46:64:b3:fd:99:ec:
                    82:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:53:A5:5E:08:A8:C9:43:89:F1:C1:9F:BF:F4:99:92:FC:54:BF:C3
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3a2f34382d3438203d3e20343031353139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:17:51:72:d5:fb:5a:8e:f0:0f:04:f1:08:7e:db:ad:f5:f3:
         d5:44:55:f7:10:08:9c:3e:61:1f:9b:9e:ba:96:79:9b:33:70:
         23:7e:b6:7f:74:57:95:32:84:f7:26:f5:e3:4d:d3:1a:f3:2b:
         df:a5:3a:3e:25:d0:a9:05:ac:31:3b:a1:06:b5:fa:00:75:8e:
         aa:25:ae:f8:55:91:cb:95:53:2a:f5:b0:20:53:ab:9e:a6:8d:
         d6:bc:bc:e6:11:7e:05:c4:1b:74:a6:2c:b3:6e:ad:f0:e9:31:
         51:42:bd:91:f3:39:02:86:08:45:d4:6d:ad:7d:0e:29:63:5b:
         4c:c8:44:39:b5:64:6c:ac:3f:09:d1:6b:23:41:83:5d:5a:26:
         7e:ec:b2:01:e2:e3:d9:a2:74:28:f4:92:43:cf:ef:35:13:1f:
         a4:1c:af:4e:be:4b:06:42:75:87:f1:f6:84:6d:63:2c:0c:e4:
         66:0f:17:de:5c:14:57:6f:0b:a3:82:b5:99:72:8e:fb:01:fc:
         4a:3e:a0:00:a2:dc:d2:6a:0c:62:82:c4:49:ad:c0:bd:04:44:
         5f:aa:58:84:57:5c:35:6f:6a:98:24:b8:57:2f:8e:1f:b8:a0:
         5b:c3:2d:4c:b4:cc:19:90:3a:4b:8b:b8:68:74:7a:3c:c6:0a:
         13:3c:fc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:08:48 2025 by rpki-client