Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a313130303a3a2f34302d3438203d3e20333937393538.roa
File:                     323630323a3261333a313130303a3a2f34302d3438203d3e20333937393538.roa (raw, json)
Hash identifier:          KlQCcwxuwWYisIpjuzgBrzc2CuN3wpUJnZza4Rl2NlU=
Subject key identifier:   A4:1C:8A:93:8A:C7:4B:A6:B8:48:86:C2:D7:BC:D0:17:44:88:B7:FB
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       47E01635164E7640E00056C6785B24CBF4AADC38
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a313130303a3a2f34302d3438203d3e20333937393538.roa
Signing time:             Mon 01 Sep 2025 04:08:34 +0000
ROA not before:           Mon 01 Sep 2025 04:03:34 +0000
ROA not after:            Mon 31 Aug 2026 04:08:34 +0000
asID:                     397958
IP address blocks:        2602:2a3:1100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 21:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e0:16:35:16:4e:76:40:e0:00:56:c6:78:5b:24:cb:f4:aa:dc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Sep  1 04:03:34 2025 GMT
            Not After : Aug 31 04:08:34 2026 GMT
        Subject: CN=A41C8A938AC74BA6B84886C2D7BCD0174488B7FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:18:99:c7:73:87:9f:d2:f0:8a:33:74:40:2e:
                    c6:92:06:9f:1f:76:3a:29:9d:dd:c9:48:b8:aa:ba:
                    95:3d:a8:ca:65:b5:dc:be:c6:c3:99:f5:71:e4:d6:
                    3c:9e:1a:d8:e7:78:58:4c:a7:1b:1f:6d:89:54:2a:
                    b6:e5:09:61:57:e4:02:df:8b:2d:aa:d2:24:00:96:
                    1e:3c:e1:c6:55:9d:ec:87:95:e2:83:9e:9e:d7:05:
                    1d:38:b3:89:9c:0e:8c:a3:f9:78:0b:25:85:e2:a8:
                    0a:31:2d:50:e1:b1:f2:a8:c7:5b:6d:ae:1a:bb:61:
                    19:33:e6:b5:9e:3c:11:c1:cf:f6:17:66:2c:68:85:
                    56:2c:e3:7f:7f:a9:a6:b8:58:ab:24:04:c0:e8:cd:
                    ff:bc:d3:0f:61:3e:58:44:83:b1:0d:16:3a:0f:37:
                    2f:66:a3:3f:b5:72:f8:b9:4c:c2:46:ab:bd:62:10:
                    46:ca:df:f0:96:e8:12:d2:8f:eb:db:ba:8f:c7:6f:
                    29:b2:0c:74:a0:5e:67:91:f2:e6:8b:af:a1:1c:e8:
                    96:de:30:18:33:0a:b2:44:77:ca:4e:a0:35:8e:ab:
                    89:6b:4c:4a:ce:d9:b0:42:69:c3:b7:27:25:85:d3:
                    fb:39:80:38:da:0e:f7:53:4e:84:0f:b6:f2:4b:77:
                    61:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:1C:8A:93:8A:C7:4B:A6:B8:48:86:C2:D7:BC:D0:17:44:88:B7:FB
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a313130303a3a2f34302d3438203d3e20333937393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:1d:09:ce:a2:64:ab:fd:8e:1d:ed:93:de:66:95:76:e0:92:
         2d:6d:12:16:43:1d:78:9c:92:67:04:9d:9f:f6:06:80:d1:93:
         d9:da:dd:00:8b:31:00:cf:d8:0e:a8:8e:f3:9f:7b:b2:53:07:
         45:3d:91:d0:60:01:5d:b6:af:34:7b:9f:1b:f9:37:0d:ae:27:
         0a:e0:38:c3:48:71:57:33:67:59:6c:68:7c:2b:f0:30:a1:67:
         0e:83:e2:29:5f:94:ce:41:0c:a2:f2:75:60:ca:b3:44:b7:59:
         40:61:cc:99:39:03:5a:50:0c:20:2c:ca:46:e8:84:19:3c:5f:
         0e:16:a5:5b:7d:46:ff:4c:ea:bd:17:e5:c1:74:6c:6c:ee:e7:
         d2:f0:69:6a:28:15:d1:ee:10:36:11:94:2a:0c:06:fb:53:87:
         c8:0e:12:8e:cc:7e:db:8e:4d:8a:d8:2e:35:91:18:4a:55:37:
         05:9e:1c:21:f6:c6:e0:16:35:94:7b:56:eb:16:4e:44:9e:75:
         5f:5f:ee:3a:31:a8:ab:b7:b8:a8:f7:48:69:3f:dd:18:bd:f7:
         1d:59:a3:82:5e:53:57:4b:3a:34:ce:c0:77:ac:15:c9:cb:87:
         70:1a:7f:eb:db:ce:ff:d7:1a:ed:fb:b9:e6:d2:b1:f6:77:c2:
         1d:0d:b5:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:26:34 2025 by rpki-client