Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/customer-bytevirt/0/3134302e3233352e33382e302f32332d3234203d3e20323132333336.roa
File:                     3134302e3233352e33382e302f32332d3234203d3e20323132333336.roa (raw, json)
Hash identifier:          yJCvPMb5dJM4eR5yo1o4QKwJMyc5xs95q6mGvowiQ08=
Subject key identifier:   11:15:34:6C:59:6B:75:0C:0B:7E:73:C5:E8:46:79:F1:7C:34:6B:BD
Certificate issuer:       /CN=5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE
Certificate serial:       7AF9DF075CE74873EFA65758D7B06593092048DB
Authority key identifier: 51:74:BF:1E:2F:F3:BA:BA:9C:3B:00:43:E9:FE:F1:EB:39:BE:B8:FE
Authority info access:    rsync://rpki.sunoaki.net/repo/SUNOAKI/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/3134302e3233352e33382e302f32332d3234203d3e20323132333336.roa
Signing time:             Wed 23 Jul 2025 03:12:56 +0000
ROA not before:           Wed 23 Jul 2025 03:07:56 +0000
ROA not after:            Wed 22 Jul 2026 03:12:56 +0000
asID:                     212336
IP address blocks:        140.235.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.crl
                          rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.mft
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.cer
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f9:df:07:5c:e7:48:73:ef:a6:57:58:d7:b0:65:93:09:20:48:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE
        Validity
            Not Before: Jul 23 03:07:56 2025 GMT
            Not After : Jul 22 03:12:56 2026 GMT
        Subject: CN=1115346C596B750C0B7E73C5E84679F17C346BBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:48:ba:53:ef:f5:60:12:af:e3:3c:88:2b:
                    f6:52:17:80:fc:72:0a:30:a7:97:2f:18:77:84:5a:
                    d2:fc:75:97:54:2f:a8:3d:6a:3c:9c:b6:f0:dd:e7:
                    bb:d3:4a:64:5e:6d:f9:61:d9:2c:e1:84:17:7a:02:
                    a4:4b:a3:c7:91:19:21:5c:5e:9f:b2:83:32:08:86:
                    75:a6:f5:cc:e2:b1:13:22:ed:4d:b2:56:86:3f:31:
                    a1:bb:15:7b:f9:27:51:07:45:b8:82:89:cd:3a:c8:
                    c5:2d:47:c6:30:3c:2d:59:25:2b:9f:27:8e:65:1b:
                    02:2e:ab:d1:d1:d8:3a:56:f5:d0:c3:55:f1:4a:88:
                    a4:1d:58:92:0c:da:64:68:a6:cc:75:8e:84:3f:a3:
                    56:c9:b5:11:cc:31:a7:ba:05:da:8b:a7:e4:48:06:
                    3f:a8:7f:ab:a5:69:40:05:69:d0:cb:4f:10:34:84:
                    3f:37:5e:78:a1:16:e3:48:35:a4:37:94:03:5e:04:
                    19:8a:de:89:4e:d1:ff:45:0d:e0:b3:24:2c:7e:eb:
                    48:69:ef:3f:2d:c6:c9:ab:88:11:21:07:60:7a:a4:
                    ed:5a:41:e5:18:ec:c7:1a:32:7a:00:73:10:0d:f1:
                    9b:0a:0e:67:68:63:95:41:4b:30:d7:ee:d3:7f:7e:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:15:34:6C:59:6B:75:0C:0B:7E:73:C5:E8:46:79:F1:7C:34:6B:BD
            X509v3 Authority Key Identifier:
                keyid:51:74:BF:1E:2F:F3:BA:BA:9C:3B:00:43:E9:FE:F1:EB:39:BE:B8:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/5174BF1E2FF3BABA9C3B0043E9FEF1EB39BEB8FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/customer-bytevirt/0/3134302e3233352e33382e302f32332d3234203d3e20323132333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:d8:79:55:d1:3d:1d:3a:4d:f0:5c:9e:fc:22:5d:6f:e4:fe:
         4f:7b:fe:6e:2b:00:f4:07:21:2a:8a:74:61:09:0d:d4:ee:13:
         b0:2f:04:a6:54:bc:fc:af:22:f7:1d:fc:16:c0:9c:fb:2c:35:
         77:cb:20:32:d2:4c:c9:70:d1:0a:71:47:dc:ee:b6:9a:e6:46:
         7a:ff:ef:a3:15:a9:df:fd:88:ac:eb:c6:00:c9:ef:4e:c5:66:
         17:79:d8:a4:65:bd:bd:8a:63:74:9f:b9:03:34:be:67:cb:b7:
         29:41:da:cc:f4:7c:85:24:e9:4b:68:e1:f0:38:32:5b:39:83:
         68:b0:24:3e:61:62:08:8a:d3:07:a0:b0:ed:3c:8f:5c:4d:81:
         ae:f2:e1:52:85:89:7a:cd:97:10:d0:aa:46:ba:1b:74:8f:24:
         6f:f3:4e:32:a3:0c:5e:fa:4d:d3:cf:b7:4f:30:e0:c0:bb:1d:
         82:45:a3:72:4f:d6:65:b1:89:53:5a:bc:c7:c2:c0:da:74:46:
         1f:78:79:65:fa:90:bc:19:29:5a:f9:92:5d:4d:28:b2:41:c6:
         fd:f5:01:6c:7f:29:25:79:99:14:05:54:a9:52:82:00:30:12:
         40:c3:a3:c9:49:25:72:a5:da:79:8e:1f:a5:ab:01:4f:a9:2c:
         e2:9f:e4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:26:09 2025 by rpki-client