Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a31303a3a2f34382d3438203d3e203437373738.roa
File:                     323630323a3261333a31303a3a2f34382d3438203d3e203437373738.roa (raw, json)
Hash identifier:          8T5NgLP+qkCQZsFolqdWhN5FmFsQvkWMgc9XdzvLZ9U=
Subject key identifier:   D1:DE:E2:63:C1:04:70:E0:94:1B:93:D1:31:7B:00:2A:AE:C1:3B:BA
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       307291FE40B492B6F81376FAE876E60AE1AD8350
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a31303a3a2f34382d3438203d3e203437373738.roa
Signing time:             Sun 22 Feb 2026 12:05:03 +0000
ROA not before:           Sun 22 Feb 2026 12:00:03 +0000
ROA not after:            Sun 21 Feb 2027 12:05:03 +0000
asID:                     47778
IP address blocks:        2602:2a3:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 01:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:72:91:fe:40:b4:92:b6:f8:13:76:fa:e8:76:e6:0a:e1:ad:83:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Feb 22 12:00:03 2026 GMT
            Not After : Feb 21 12:05:03 2027 GMT
        Subject: CN=D1DEE263C10470E0941B93D1317B002AAEC13BBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b0:a9:5e:9d:23:05:16:93:54:ea:01:77:25:
                    3e:50:f6:fa:53:cd:cb:d3:af:06:73:90:70:bf:6d:
                    6a:1f:5c:7c:be:1d:bd:24:97:d7:51:df:45:d3:d7:
                    31:2f:a3:57:b1:6f:2e:84:ea:be:f1:8c:8c:6b:4a:
                    3a:6f:e0:aa:68:d4:70:5a:88:5a:64:e4:9a:82:68:
                    f7:41:16:48:11:b9:d2:8f:1b:a0:57:8c:e9:0a:de:
                    60:c0:ef:c8:26:7f:2a:60:6f:ed:d7:67:1d:23:6d:
                    dd:03:9d:95:25:aa:f3:b7:83:bd:28:5e:83:c3:4a:
                    f3:56:dd:46:ef:cb:b0:46:94:fa:c1:05:2c:58:1a:
                    30:64:ee:71:02:7b:ca:20:83:a4:ad:a6:26:42:b6:
                    57:79:3e:16:46:35:a5:f6:e5:e5:34:7d:13:5d:b3:
                    c6:57:22:e4:cb:0e:66:8a:9c:81:f9:4b:ed:8b:47:
                    04:77:a6:70:1e:95:c8:0e:45:7e:74:eb:5a:3d:a2:
                    9b:89:93:21:2b:b9:95:ef:3e:0a:80:3e:14:ae:f6:
                    89:37:ef:86:e6:90:c0:16:ce:4a:4b:6e:53:0c:62:
                    98:7c:6c:d2:3a:61:56:49:8f:a1:f2:46:31:16:6a:
                    f9:64:1a:4c:96:21:42:8a:9a:79:50:42:54:e0:b3:
                    df:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DE:E2:63:C1:04:70:E0:94:1B:93:D1:31:7B:00:2A:AE:C1:3B:BA
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a31303a3a2f34382d3438203d3e203437373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:f1:c1:35:80:eb:40:d6:17:82:f6:b5:ce:d5:e2:9a:05:42:
         6a:b1:c9:e5:19:37:bc:15:46:96:3a:e1:7c:93:c7:ef:f7:a6:
         f5:fa:42:37:ac:53:fa:7a:22:14:b8:fb:13:0b:d6:8a:9c:07:
         99:bd:b3:54:6e:5a:1b:5b:03:4e:d9:90:dd:ef:40:98:04:6a:
         c3:0d:1b:bd:02:b4:e2:55:43:9f:8d:f1:d1:94:a8:ab:c3:ea:
         24:b9:9d:98:4e:be:8d:57:82:d9:38:8a:35:ef:06:c1:33:be:
         47:3a:b0:85:60:8b:2b:68:d1:d4:38:6b:d8:a5:7c:e8:8d:6f:
         76:db:79:ac:5f:5c:1a:a0:36:39:1a:53:32:82:c4:0a:b4:55:
         d3:9a:41:0f:df:01:4d:3a:c6:7c:84:24:e8:e0:3c:16:b0:d4:
         39:22:db:b4:de:cb:95:76:d8:bb:03:8e:7c:67:55:f8:23:23:
         3a:36:1e:b8:4c:d4:a5:ea:ae:12:a5:7a:e2:76:7f:c5:67:8a:
         56:a2:64:08:03:39:d5:00:75:79:1a:79:c1:c3:31:aa:c1:a7:
         5a:a9:b6:0f:bc:48:0f:08:33:4c:00:21:84:71:3b:45:35:f0:
         e4:e4:16:a9:27:7b:bd:37:43:cf:12:ac:05:c9:01:25:79:d1:
         ac:da:29:3a
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIUMHKR/kC0krb4E3b66HbmCuGtg1AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzIwM2RlOWE5M2E2MTM2MjRmZWJmOGNlZjg1ZWIxNzZm
ZWI1NDU0MDUxYmJmNjljM2UwHhcNMjYwMjIyMTIwMDAzWhcNMjcwMjIxMTIwNTAz
WjAzMTEwLwYDVQQDEyhEMURFRTI2M0MxMDQ3MEUwOTQxQjkzRDEzMTdCMDAyQUFF
QzEzQkJBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rCpXp0jBRaT
VOoBdyU+UPb6U83L068Gc5Bwv21qH1x8vh29JJfXUd9F09cxL6NXsW8uhOq+8YyM
a0o6b+CqaNRwWohaZOSagmj3QRZIEbnSjxugV4zpCt5gwO/IJn8qYG/t12cdI23d
A52VJarzt4O9KF6Dw0rzVt1G78uwRpT6wQUsWBowZO5xAnvKIIOkraYmQrZXeT4W
RjWl9uXlNH0TXbPGVyLkyw5mipyB+Uvti0cEd6ZwHpXIDkV+dOtaPaKbiZMhK7mV
7z4KgD4UrvaJN++G5pDAFs5KS25TDGKYfGzSOmFWSY+h8kYxFmr5ZBpMliFCipp5
UEJU4LPf2wIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFNHe4mPBBHDglBuT0TF7ACqu
wTu6MB8GA1UdIwQYMBaAFBeo6HBgiZvbhmqhD4exO4oEfKyZMA4GA1UdDwEB/wQE
AwIHgDBlBgNVHR8EXjBcMFqgWKBWhlRyc3luYzovL3Jwa2kuc3Vub2FraS5uZXQv
cmVwby9TVU5PQUtJLzAvMTdBOEU4NzA2MDg5OUJEQjg2NkFBMTBGODdCMTNCOEEw
NDdDQUM5OS5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03Jz
eW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRh
MjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00
YjAzLWJkYTctMWJlMjA0OTMzYWU1L2Q0MGU2Y2FiLWU2NmMtNGNhNy1hYjYxLTEy
NmIzY2ZjYmI4Ni83MjAzZGU5YTkzYTYxMzYyNGZlYmY4Y2VmODVlYjE3NmZlYjU0
NTQwNTFiYmY2OWMzZS5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4Zk
cnN5bmM6Ly9ycGtpLnN1bm9ha2kubmV0L3JlcG8vU1VOT0FLSS8wLzMyMzYzMDMy
M2EzMjYxMzMzYTMxMzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDM3MzczNzM4
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMw
ETAPBAIAAjAJAwcAJgICowAQMA0GCSqGSIb3DQEBCwUAA4IBAQBV8cE1gOtA1heC
9rXO1eKaBUJqscnlGTe8FUaWOuF8k8fv96b1+kI3rFP6eiIUuPsTC9aKnAeZvbNU
blobWwNO2ZDd70CYBGrDDRu9ArTiVUOfjfHRlKirw+okuZ2YTr6NV4LZOIo17wbB
M75HOrCFYIsraNHUOGvYpXzojW9223msX1waoDY5GlMygsQKtFXTmkEP3wFNOsZ8
hCTo4DwWsNQ5Itu03suVdti7A458Z1X4IyM6Nh64TNSl6q4SpXridn/FZ4pWomQI
AznVAHV5GnnBwzGqwadaqbYPvEgPCDNMACGEcTtFNfDk5BapJ3u9N0PPEqwFyQEl
edGs2ik6
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:07 2026 by rpki-client