Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/customer-bytevirt/0/3134302e3233352e33372e302f32342d3234203d3e20323132333336.roa
File:                     3134302e3233352e33372e302f32342d3234203d3e20323132333336.roa (raw, json)
Hash identifier:          TOzzPhsNiYG8v0RSNe0+JK5hzl9QZB2Atb8Q+ItKj34=
Subject key identifier:   2A:BD:1A:FA:16:51:01:AA:02:97:18:01:1A:F4:86:37:2E:26:DB:C7
Certificate issuer:       /CN=5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE
Certificate serial:       1E53A3B3677023729ECD82F0C06B22BBB3FE2BB9
Authority key identifier: 51:74:BF:1E:2F:F3:BA:BA:9C:3B:00:43:E9:FE:F1:EB:39:BE:B8:FE
Authority info access:    rsync://rpki.sunoaki.net/repo/SUNOAKI/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/3134302e3233352e33372e302f32342d3234203d3e20323132333336.roa
Signing time:             Wed 23 Jul 2025 03:13:22 +0000
ROA not before:           Wed 23 Jul 2025 03:08:22 +0000
ROA not after:            Wed 22 Jul 2026 03:13:22 +0000
asID:                     212336
IP address blocks:        140.235.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.crl
                          rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.mft
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.cer
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 03:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:53:a3:b3:67:70:23:72:9e:cd:82:f0:c0:6b:22:bb:b3:fe:2b:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE
        Validity
            Not Before: Jul 23 03:08:22 2025 GMT
            Not After : Jul 22 03:13:22 2026 GMT
        Subject: CN=2ABD1AFA165101AA029718011AF486372E26DBC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:20:a4:05:f8:a9:ba:46:1a:8b:4b:c8:a2:10:
                    dc:cc:86:21:3a:e0:67:48:68:a3:99:30:5e:1f:a8:
                    f1:9f:28:d6:43:e1:1c:df:df:b6:59:fd:e9:d2:e9:
                    b3:92:e5:04:33:cc:39:43:0c:54:53:3a:18:11:5f:
                    62:89:20:cc:38:60:f2:26:ee:69:c9:6e:87:4b:c8:
                    4d:69:b8:7c:3a:b9:fb:cd:45:64:a0:61:ce:ac:33:
                    40:9f:b0:c9:ac:69:31:59:cd:81:5a:eb:e5:fd:53:
                    a3:aa:cf:91:01:2a:d6:ef:83:b1:22:f3:0c:bc:64:
                    0f:b0:76:b7:28:37:4e:ab:7a:ee:b6:48:e3:30:f8:
                    60:52:34:b2:64:45:50:26:ab:31:71:52:1a:52:dd:
                    1a:c9:88:b2:e2:25:f1:2b:4b:c6:bb:ca:14:ae:c2:
                    88:ae:55:cd:08:46:56:8d:be:d0:a8:f5:3c:37:28:
                    92:ac:b6:60:38:e0:0e:af:96:81:4a:86:90:4f:55:
                    9f:f5:ce:28:ff:07:22:24:48:fe:ba:ff:ab:f8:93:
                    14:47:da:97:1f:01:63:24:68:74:16:7a:0d:a5:3a:
                    3a:d0:57:3b:c9:4d:89:67:a8:d9:f6:3f:42:26:b3:
                    3c:a7:ca:1f:b4:43:15:44:4e:37:d9:6d:5d:6e:ec:
                    fc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BD:1A:FA:16:51:01:AA:02:97:18:01:1A:F4:86:37:2E:26:DB:C7
            X509v3 Authority Key Identifier:
                keyid:51:74:BF:1E:2F:F3:BA:BA:9C:3B:00:43:E9:FE:F1:EB:39:BE:B8:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/3134302e3233352e33372e302f32342d3234203d3e20323132333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:db:38:b5:1e:19:65:4c:7c:0b:13:b1:b4:2a:a6:29:74:c9:
         0e:6c:7d:b0:b9:b4:48:bc:5f:3a:98:3e:a1:ac:42:f5:ca:cc:
         97:bd:e9:f3:f9:f0:e4:1d:9e:5f:bc:49:9b:a9:73:f7:32:72:
         1c:e2:7f:77:71:93:49:a1:1c:f1:dd:01:a4:ec:8c:e6:b9:9f:
         94:d4:f7:d4:e5:83:5d:d1:76:5b:e0:2e:9d:6d:61:88:9a:29:
         c8:f7:22:51:8e:77:0d:71:17:99:57:2c:e5:18:5d:44:47:81:
         e1:a8:bf:38:57:30:6e:a1:1f:b3:fc:a5:11:78:da:ba:90:e9:
         78:09:b3:c6:b7:42:27:24:25:08:bb:8e:60:f6:24:cc:ee:3f:
         54:22:5c:47:b7:8b:93:0c:74:ff:66:e6:7a:50:81:3f:98:60:
         38:64:01:d6:5d:de:fe:a2:30:78:f9:92:3d:97:0d:39:35:b5:
         7b:bd:f6:13:3c:ee:ae:bb:ee:56:67:e3:73:f9:85:9d:ec:5d:
         79:24:b1:a2:69:dd:98:0c:04:6b:90:eb:88:fe:d2:2b:3f:f5:
         cf:89:fb:68:10:35:41:9e:86:ed:70:c2:9c:88:d1:8b:c6:1b:
         a2:cd:9f:ec:f3:0f:44:c3:a5:36:68:ff:ae:fe:57:05:28:c8:
         fb:5c:3c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:49:51 2025 by rpki-client