Route Origin Authorization

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a383a3a2f34382d3438203d3e20333937393538.roa
File:                     323630323a3261333a383a3a2f34382d3438203d3e20333937393538.roa (raw, json)
Hash identifier:          oLLwQE7UQHz4lmf9Dg/2QorRtTkUoxOsvRFKyrxgNCw=
Subject key identifier:   14:CB:34:5D:5B:A3:BE:A8:1C:B7:91:A4:D9:6A:5B:E3:12:EB:8F:D3
Certificate issuer:       /CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
Certificate serial:       216D99CC326D33C1539665A4D9E8C479C38E7C9D
Authority key identifier: 17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a383a3a2f34382d3438203d3e20333937393538.roa
Signing time:             Mon 16 Feb 2026 16:58:42 +0000
ROA not before:           Mon 16 Feb 2026 16:53:42 +0000
ROA not after:            Mon 15 Feb 2027 16:58:42 +0000
asID:                     397958
IP address blocks:        2602:2a3:8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 01:25:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:6d:99:cc:32:6d:33:c1:53:96:65:a4:d9:e8:c4:79:c3:8e:7c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e
        Validity
            Not Before: Feb 16 16:53:42 2026 GMT
            Not After : Feb 15 16:58:42 2027 GMT
        Subject: CN=14CB345D5BA3BEA81CB791A4D96A5BE312EB8FD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:95:76:bd:77:81:3c:e9:b9:3e:50:b4:8f:54:
                    da:f6:3c:a3:3a:9b:b5:34:b5:97:4b:b0:82:87:a8:
                    bf:8f:50:4a:50:d6:2b:fe:06:fe:99:75:be:e2:3c:
                    0e:9e:f7:2f:eb:41:6c:4c:e4:4a:15:25:b3:06:3e:
                    83:0c:fc:14:93:8f:40:99:14:d7:d5:3a:79:ce:a2:
                    c2:f6:e3:21:d8:2a:13:53:33:10:a0:2e:60:a0:7b:
                    f5:8d:39:7b:be:11:28:38:b1:45:76:bc:06:b8:ed:
                    ae:78:68:64:3d:8b:3e:e1:2f:f5:9e:38:42:1f:15:
                    4c:ad:df:09:b9:53:5e:94:03:87:fc:57:50:dc:af:
                    ff:81:08:7a:bf:82:16:dc:14:f1:e1:3c:92:d8:d7:
                    08:03:25:54:a9:d2:2c:39:55:77:78:14:09:61:bc:
                    4e:ce:99:ce:78:ce:5d:4e:cd:d1:27:6e:57:33:9e:
                    63:de:0e:a1:d9:19:ab:23:74:86:3e:c8:03:19:4a:
                    e5:ff:d0:15:92:4e:31:d5:93:84:e5:88:c0:17:c8:
                    9d:eb:79:9c:ef:d4:9e:a8:33:ce:d8:f4:70:c8:eb:
                    bc:54:82:59:23:43:68:b3:69:b8:12:1d:ad:f7:3f:
                    11:b5:42:27:c5:df:51:e4:53:2e:07:63:f8:32:5e:
                    16:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CB:34:5D:5B:A3:BE:A8:1C:B7:91:A4:D9:6A:5B:E3:12:EB:8F:D3
            X509v3 Authority Key Identifier:
                keyid:17:A8:E8:70:60:89:9B:DB:86:6A:A1:0F:87:B1:3B:8A:04:7C:AC:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/17A8E87060899BDB866AA10F87B13B8A047CAC99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d40e6cab-e66c-4ca7-ab61-126b3cfcbb86/7203de9a93a613624febf8cef85eb176feb5454051bbf69c3e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/0/323630323a3261333a383a3a2f34382d3438203d3e20333937393538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:2a3:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:de:85:4b:da:52:3e:20:74:4c:da:87:54:4c:86:9d:a4:06:
         3a:ba:32:d9:46:d6:84:c4:5e:1f:fa:d0:ad:e0:bb:4e:4c:24:
         0f:8f:1e:f8:29:f4:01:70:45:84:9c:43:96:21:ef:24:cd:4e:
         ee:b2:ac:ca:e6:d4:0d:c2:42:c5:42:a1:96:c9:ac:44:ae:24:
         65:78:2d:23:8b:6e:04:04:81:1c:11:54:23:ec:b7:1b:56:14:
         12:47:d5:5a:b5:e7:28:2b:20:44:05:59:38:cf:81:d7:75:06:
         a9:e9:b1:c6:6e:ba:dd:a0:39:f7:74:14:8f:f5:e8:0c:a8:db:
         75:9d:e5:67:fc:d2:04:b2:36:8b:7e:d6:39:03:8b:57:f7:4d:
         8a:69:b2:bf:4d:28:df:dc:d9:18:db:f5:b4:94:21:55:4e:c6:
         b3:86:86:7f:c5:48:94:f9:8e:e1:cb:35:7b:a4:bc:8f:13:6c:
         03:3a:fa:48:31:79:ed:47:64:1e:56:e9:7e:10:3a:f9:ea:bd:
         e2:15:9d:04:7b:e3:be:66:7d:3a:31:d9:50:f2:0f:d9:1c:5a:
         c0:19:b4:78:9f:f4:3c:de:f3:c8:3a:57:20:7b:20:c8:7b:7c:
         27:37:cb:9b:82:09:03:68:0b:61:ef:17:00:75:10:2d:77:36:
         46:79:03:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:30:21 2026 by rpki-client