Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/customer-bytevirt/0/3134302e3233352e33372e302f32342d3234203d3e20313939373037.roa
File:                     3134302e3233352e33372e302f32342d3234203d3e20313939373037.roa (raw, json)
Hash identifier:          vioWGHU/CII36MOdgIo3Cgk+y4QD8ncqPEFKWjebGpY=
Subject key identifier:   FF:E2:2C:93:62:BE:AE:E8:B5:E7:EB:65:EE:35:64:95:0C:4E:9A:79
Certificate issuer:       /CN=5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE
Certificate serial:       5D3082ABD33F9A7BAB0852A8DE6B133A29792249
Authority key identifier: 51:74:BF:1E:2F:F3:BA:BA:9C:3B:00:43:E9:FE:F1:EB:39:BE:B8:FE
Authority info access:    rsync://rpki.sunoaki.net/repo/SUNOAKI/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/3134302e3233352e33372e302f32342d3234203d3e20313939373037.roa
Signing time:             Tue 21 Jan 2025 10:49:40 +0000
ROA not before:           Tue 21 Jan 2025 10:44:40 +0000
ROA not after:            Tue 20 Jan 2026 10:49:40 +0000
asID:                     199707
IP address blocks:        140.235.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.crl
                          rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.mft
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.cer
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 18:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:30:82:ab:d3:3f:9a:7b:ab:08:52:a8:de:6b:13:3a:29:79:22:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE
        Validity
            Not Before: Jan 21 10:44:40 2025 GMT
            Not After : Jan 20 10:49:40 2026 GMT
        Subject: CN=FFE22C9362BEAEE8B5E7EB65EE3564950C4E9A79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:a5:71:fa:40:8f:64:5c:95:8b:f0:52:c0:
                    29:16:d3:78:f5:a1:34:4c:ea:70:f5:0b:e2:08:dc:
                    5d:fb:88:cd:6b:ba:97:84:1b:72:26:fd:0b:9f:32:
                    24:9f:16:c3:d4:2c:40:1c:dc:27:90:76:ca:6b:ab:
                    cd:5c:a0:27:ea:3f:b9:32:7a:1a:d0:ad:03:af:fe:
                    5c:e3:51:da:90:68:b2:a1:a9:68:76:63:9e:62:88:
                    7f:65:45:48:78:00:7f:43:80:89:74:eb:13:76:bb:
                    2b:95:05:c4:ea:80:92:92:40:14:3d:91:a8:6f:f3:
                    4e:44:27:14:f2:8e:91:79:b5:12:b2:44:e9:59:c7:
                    ff:74:95:49:0c:87:57:36:1b:31:a5:61:45:c1:04:
                    98:59:50:86:a4:bc:8a:e3:5a:3a:0b:d3:49:5d:41:
                    38:ad:bb:3d:31:1a:d4:c0:19:25:3c:95:d0:b1:e8:
                    c1:16:a0:ba:ec:1c:c8:3e:3d:f8:41:62:04:a5:83:
                    44:7c:61:00:f8:e1:50:05:3b:ea:a9:d4:b2:9e:f5:
                    7d:5c:7d:8c:e8:0d:78:e6:46:51:7e:66:f2:c8:7b:
                    c1:ad:bc:5c:a3:0f:47:a3:08:b1:94:37:23:dd:2f:
                    03:a8:8f:2e:14:6b:0d:17:32:66:4c:f9:ec:f3:2d:
                    1c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E2:2C:93:62:BE:AE:E8:B5:E7:EB:65:EE:35:64:95:0C:4E:9A:79
            X509v3 Authority Key Identifier:
                keyid:51:74:BF:1E:2F:F3:BA:BA:9C:3B:00:43:E9:FE:F1:EB:39:BE:B8:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/3134302e3233352e33372e302f32342d3234203d3e20313939373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:20:47:47:38:d5:59:5a:36:5c:b9:b3:56:46:3a:fc:16:51:
         0f:32:92:4e:0b:de:a3:c3:2d:fc:40:99:7b:41:ef:92:ca:40:
         93:0a:e1:01:f0:04:90:4e:2a:95:9b:74:01:bb:08:79:19:f3:
         a9:de:7b:f3:32:01:f2:76:90:58:e8:01:b0:fb:46:e2:b4:b4:
         c7:2e:ac:59:b0:6f:2b:d1:2e:f3:16:08:ec:29:ac:e7:cc:af:
         a0:2d:18:12:ab:3e:f5:ec:ef:e8:87:c9:d8:a8:65:52:c0:03:
         81:3e:e9:f2:f3:aa:aa:5b:0c:9a:b8:ec:f7:32:1f:0c:98:55:
         e0:13:6f:86:60:3a:7d:4d:92:66:a5:d1:1c:f5:32:eb:d1:97:
         8c:ab:ab:37:e4:95:5a:f1:97:9f:00:74:ee:6c:d7:21:0f:b3:
         51:0e:f4:d6:a1:55:cf:82:1e:57:a2:3a:58:f2:de:64:76:65:
         fd:ef:cb:04:4c:1c:6b:81:06:ca:8e:0f:d8:0c:6f:28:3d:01:
         1c:7e:c9:3b:8a:3a:1d:d5:37:97:ea:55:26:15:99:89:c7:b7:
         92:a3:ce:81:08:de:1a:02:de:f7:3e:27:0c:f9:ae:b5:4a:38:
         f2:e0:f6:ed:de:0b:73:32:16:53:24:21:9f:ec:dc:0c:34:a3:
         1e:2d:e3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:58:05 2025 by rpki-client