Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e3132382f32362d3236203d3e20323035303538.roa
File:                     3134312e3139332e32312e3132382f32362d3236203d3e20323035303538.roa (raw, json)
Hash identifier:          ETfy0Rn91o426G0oukMEI4IWEas7X8ISErwdg/x3fKM=
Subject key identifier:   CE:46:E7:61:AC:81:E5:AC:8F:25:B3:05:F2:7D:12:2E:B2:03:F2:19
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       4390216E9DB04443131DFFE44D797DF8ACAD78D2
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e3132382f32362d3236203d3e20323035303538.roa
Signing time:             Mon 14 Aug 2023 07:53:40 +0000
ROA not before:           Mon 14 Aug 2023 07:48:40 +0000
ROA not after:            Mon 12 Aug 2024 07:53:40 +0000
asID:                     205058
IP address blocks:        141.193.21.128/26 maxlen: 26

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 May 2024 04:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:90:21:6e:9d:b0:44:43:13:1d:ff:e4:4d:79:7d:f8:ac:ad:78:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:40 2023 GMT
            Not After : Aug 12 07:53:40 2024 GMT
        Subject: CN=CE46E761AC81E5AC8F25B305F27D122EB203F219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9c:5b:34:ba:a3:1a:00:68:7b:12:97:58:b2:
                    c6:71:b0:4e:89:7d:49:f0:a4:11:3e:2f:a0:da:c1:
                    c6:48:0a:ed:2d:31:48:58:d2:95:16:37:79:49:7b:
                    97:f2:c7:70:dd:56:4d:0f:77:3d:ab:f1:89:26:03:
                    23:3b:1c:3c:7b:2f:e4:bd:f0:6f:6e:e1:f4:4a:ec:
                    da:c2:c5:c2:6b:72:89:64:5c:91:41:15:0a:53:e0:
                    1c:da:98:3c:ee:4f:92:4f:1b:c1:0c:3c:9a:64:af:
                    d3:b7:dc:1d:f7:1f:66:1c:b3:a5:85:80:61:ba:64:
                    3e:91:d4:4f:68:63:a8:ec:a3:0b:a6:d6:fd:45:4b:
                    f7:bd:a1:a1:77:ff:9f:6e:a5:20:00:ee:fc:e1:41:
                    88:9d:4b:fc:4f:40:0c:85:46:4d:01:86:78:db:89:
                    04:e1:08:a5:6b:9f:1c:84:38:e6:08:da:a9:c4:fc:
                    66:9c:7f:d2:c6:ff:cf:dc:f5:8b:d1:b0:91:9c:e7:
                    64:d0:13:de:17:de:f2:49:f2:e8:fd:22:3c:4c:db:
                    7a:eb:31:49:49:43:c1:53:69:4e:78:1d:6e:51:90:
                    50:b6:46:85:13:3d:80:f3:ff:3b:4b:f8:19:ad:3c:
                    31:e6:41:91:a4:7f:74:ae:3b:e8:4a:bf:00:d5:a4:
                    42:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:46:E7:61:AC:81:E5:AC:8F:25:B3:05:F2:7D:12:2E:B2:03:F2:19
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e3132382f32362d3236203d3e20323035303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.21.128/26

    Signature Algorithm: sha256WithRSAEncryption
         ac:8e:97:9b:47:68:3a:4b:4f:c8:f4:49:9f:8b:0c:25:e8:b2:
         75:84:c7:ac:34:7b:dc:39:6a:ff:5f:21:89:05:7b:03:fb:88:
         eb:09:ec:b9:a0:90:6e:96:23:0a:cb:38:b4:8a:54:81:78:f6:
         26:26:9f:6f:b1:db:d1:a3:55:53:1b:32:49:c1:16:c5:e7:7e:
         1d:58:4c:bb:0c:02:08:6f:7d:aa:bb:4d:72:28:e1:25:36:2f:
         c7:01:24:0b:18:5c:9b:4e:f3:11:dc:ef:18:89:d5:7d:24:00:
         4a:38:1b:3e:5a:c8:25:c1:2d:d6:eb:2f:c6:8b:0e:d4:84:74:
         1f:a7:90:ff:29:b1:96:7d:d8:fc:16:9b:97:7b:6a:b1:6d:c2:
         6b:8e:92:7c:e5:23:0e:77:f5:f2:11:8a:c4:20:bb:14:51:f1:
         04:22:2e:83:7b:80:95:19:80:53:76:f1:8b:31:63:b7:b7:9e:
         59:c6:61:e6:ac:a6:ff:9e:ed:3a:65:a3:45:7a:62:8a:7b:17:
         1b:b7:4e:92:cb:1a:38:12:4e:16:88:5b:44:b0:e5:2c:a0:a7:
         5b:41:06:03:77:e2:23:21:14:fa:ed:2e:c2:17:54:e2:13:2d:
         6b:56:43:63:ff:37:81:38:c5:37:2b:de:30:51:c4:7b:74:28:
         11:33:2d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 04:27:27 2024 by rpki-client on console-ams.rpki-client.org