Route Origin Authorization

$ rpki-client -vvvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a313130303a3a2f34302d3438203d3e20333937393538.roa
File:                     323630323a3261333a313130303a3a2f34302d3438203d3e20333937393538.roa (raw, json)
Hash identifier:          6YwzUnRVn5G5EsPL2nBaq5m6Flm3W39ReS9PsTgrh6I=
Subject key identifier:   B1:EE:1C:1F:90:C0:E4:5C:20:23:C7:28:7C:E6:6E:01:5A:F2:0E:A9
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       779ADC48A0492385C084D0D7C9A26189B9F0B3CD
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a313130303a3a2f34302d3438203d3e20333937393538.roa
Signing time:             Mon 03 Aug 2026 04:22:18 +0000
ROA not before:           Mon 03 Aug 2026 04:17:18 +0000
ROA not after:            Mon 02 Aug 2027 04:22:18 +0000
asID:                     397958
IP address blocks:        2602:2a3:1100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 02:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9a:dc:48:a0:49:23:85:c0:84:d0:d7:c9:a2:61:89:b9:f0:b3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Aug  3 04:17:18 2026 GMT
            Not After : Aug  2 04:22:18 2027 GMT
        Subject: CN=B1EE1C1F90C0E45C2023C7287CE66E015AF20EA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:e3:77:bc:26:87:33:64:d3:d5:fa:64:15:
                    60:ce:3a:8e:76:e9:8b:b6:52:7c:34:35:4e:fa:0c:
                    85:2d:ca:f9:35:8b:9c:63:1b:37:ba:ab:ff:3d:b1:
                    14:cd:b7:c7:64:0c:5d:27:2d:a7:ad:8f:34:4b:25:
                    ca:2d:14:4d:08:ae:dd:3a:dc:a7:f2:12:af:c4:08:
                    4f:90:66:d7:34:de:92:4c:0a:e2:13:57:9c:b3:7f:
                    0e:f7:69:2f:72:4a:9f:43:ea:e6:1d:9e:b5:86:5f:
                    96:36:0f:c2:d0:4d:39:d4:8c:38:92:8c:ff:09:7b:
                    5e:0a:ce:2c:e6:8b:39:41:c1:a5:58:4b:99:3f:4b:
                    c6:75:f1:3e:e0:b3:6a:1d:a0:a7:9e:06:81:87:6a:
                    ac:66:2f:a4:ef:49:69:62:a3:29:7a:17:70:d9:62:
                    91:09:dd:08:41:a8:57:2a:26:af:ea:7c:89:f1:7e:
                    4c:69:11:5d:83:76:57:d3:ff:3c:48:06:a3:81:04:
                    4c:b8:a3:1e:ae:76:9b:97:21:33:93:3e:d9:37:c7:
                    5d:04:bc:d1:00:55:e1:c8:c9:93:ae:f4:62:39:ca:
                    d2:b8:32:a8:ee:77:8e:6c:72:96:e7:fa:0f:cd:19:
                    f3:28:28:43:3c:40:38:05:d9:a4:39:90:8d:15:2c:
                    00:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EE:1C:1F:90:C0:E4:5C:20:23:C7:28:7C:E6:6E:01:5A:F2:0E:A9
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a313130303a3a2f34302d3438203d3e20333937393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         72:6d:17:f4:9c:ac:54:fc:4f:79:ff:b7:df:47:77:fe:1e:12:
         75:aa:61:26:33:9c:23:7e:a2:86:a9:bf:04:23:42:5d:f9:76:
         fb:3f:97:1c:00:bc:56:be:5b:e6:b4:8c:c6:18:86:65:2f:4a:
         78:28:a4:ef:c6:aa:57:1f:0c:1a:8e:fc:81:30:b5:9f:5f:31:
         ad:a1:3c:af:21:da:fe:e7:84:d9:46:f5:b1:8c:47:a5:6d:06:
         3f:00:dd:00:2e:20:91:16:b1:12:2c:44:06:4a:cd:51:6a:43:
         2a:d7:b7:ef:17:cf:49:02:de:6f:b1:3d:9f:51:19:a7:f8:a6:
         ef:f9:79:be:55:bf:08:bb:b0:29:d8:c3:01:32:f3:fd:0b:43:
         66:7c:7f:ae:78:17:60:cc:f5:21:c5:95:31:fe:ab:31:04:99:
         2a:c2:da:75:29:ed:60:a5:96:b4:25:b3:01:72:f7:2f:39:fa:
         6c:ce:24:08:60:7b:38:bd:58:cf:28:6e:15:33:5c:0d:f2:82:
         ec:4d:b0:f3:d9:83:94:e5:49:ca:02:00:ad:2e:59:b5:e3:83:
         33:90:87:2f:07:d5:db:3d:7b:68:d5:c4:c2:64:43:aa:71:98:
         b7:12:95:67:a6:c8:c3:63:d1:0b:e0:6a:71:ba:0b:80:d5:d7:
         8b:9b:fc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:25:11 2026 by rpki-client