Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3a2f34382d3438203d3e203437373738.roa
File:                     323630323a3261333a3a2f34382d3438203d3e203437373738.roa (raw, json)
Hash identifier:          T+Egm1fxLB27w52p1DNgSQNysSdAtZ4C0vP81q+1KaA=
Subject key identifier:   94:FE:18:7C:3B:B1:BF:F1:8C:6E:0A:05:4E:2E:84:01:D1:6C:90:DD
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       7693D8CDD65AAD21A81BB27C2F619FEF853872B3
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3a2f34382d3438203d3e203437373738.roa
Signing time:             Fri 20 Dec 2024 21:17:50 +0000
ROA not before:           Fri 20 Dec 2024 21:12:50 +0000
ROA not after:            Fri 19 Dec 2025 21:17:50 +0000
asID:                     47778
IP address blocks:        2602:2a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:27:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:93:d8:cd:d6:5a:ad:21:a8:1b:b2:7c:2f:61:9f:ef:85:38:72:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Dec 20 21:12:50 2024 GMT
            Not After : Dec 19 21:17:50 2025 GMT
        Subject: CN=94FE187C3BB1BFF18C6E0A054E2E8401D16C90DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3d:70:cf:72:5d:05:39:0d:d7:69:fc:37:a3:
                    6f:18:83:cb:f5:dc:b3:02:f4:20:a2:58:40:a4:46:
                    51:fc:db:f9:5f:c9:cb:fa:bb:e2:96:7f:1b:74:e6:
                    25:d0:52:84:29:3b:f0:90:f0:93:fa:67:d3:62:71:
                    50:10:79:58:17:63:2c:62:4a:1d:05:9b:da:ab:4c:
                    1b:ec:7e:eb:0e:c1:5a:36:93:a6:36:6f:23:7b:71:
                    ab:b7:d9:86:0b:96:a1:ea:40:25:a6:e7:13:88:85:
                    c8:f3:9b:6b:dc:79:84:f8:df:d4:5b:5d:63:01:80:
                    15:59:97:84:74:b3:ee:42:38:18:20:34:fc:e5:24:
                    22:66:59:39:64:1a:77:ce:07:a5:7a:bf:88:a9:86:
                    c4:2c:6d:50:47:e7:af:8d:9e:4d:fe:61:44:92:85:
                    ce:a1:23:79:0a:15:28:74:51:8a:c5:23:84:b9:4a:
                    a5:ab:71:8c:95:55:e7:36:4d:bb:20:55:d7:06:93:
                    89:64:18:bf:d2:4c:34:3e:85:72:18:08:b0:ae:7d:
                    b3:19:19:6e:26:13:da:ee:a8:21:f1:b2:a7:e0:a8:
                    6c:4b:d3:a4:44:a1:d7:07:21:37:cb:a3:7b:d7:2e:
                    83:f9:cc:40:d5:15:48:c5:4f:42:b9:e5:af:27:01:
                    80:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FE:18:7C:3B:B1:BF:F1:8C:6E:0A:05:4E:2E:84:01:D1:6C:90:DD
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a3a2f34382d3438203d3e203437373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:57:14:bb:56:09:45:2e:34:15:9c:2a:c3:5c:13:b4:8e:cd:
         6e:14:6e:62:b1:6b:92:84:ae:44:c5:88:4a:74:5f:55:c6:2b:
         62:31:8e:33:59:c8:20:e0:6d:62:d6:94:97:19:11:ec:ed:55:
         6f:11:46:a7:de:ed:af:8d:ec:1e:e8:d6:82:3e:2c:30:7f:81:
         80:45:a4:d3:b1:fd:05:8a:54:04:91:61:ba:12:7d:18:8b:02:
         ce:9a:7e:3e:00:ad:af:93:b1:c0:60:d5:64:9a:8f:c7:c4:55:
         62:12:db:91:9a:55:91:0e:f4:79:37:3c:3d:5d:43:86:c4:3b:
         25:30:08:2b:c4:22:1b:a6:9d:00:22:e5:1e:57:8d:47:b3:75:
         7d:28:8b:3c:9b:10:46:da:e0:9b:40:b7:c9:3d:11:06:9c:8c:
         1d:c1:b2:2c:2e:3e:7c:2b:45:21:e5:0c:8d:0e:10:00:77:16:
         2a:79:5d:fd:73:07:44:b2:a1:6e:28:1f:c7:07:8a:91:d7:9f:
         76:05:17:d3:4c:6d:37:a3:de:67:b5:cf:c0:3a:2f:b2:18:d8:
         fe:0e:7e:69:64:c2:df:fa:52:f6:fb:55:fb:71:c0:53:ae:b2:
         8f:cf:b2:e7:e3:b2:4a:52:19:b2:0d:9c:e8:ab:26:ad:1d:87:
         2a:1b:88:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Mar 14 14:09:09 2025 by rpki-client