Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3130323a3a2f34382d3438203d3e20333936333033.roa
File:                     323630323a666564613a3130323a3a2f34382d3438203d3e20333936333033.roa (raw, json)
Hash identifier:          Z/scOIfFmkFJN88PdyyDxmFt/XxV14JeeQircAi7mwc=
Subject key identifier:   F4:F5:7E:EC:D2:4F:4A:CC:6E:D0:4C:69:7C:26:28:5F:FB:32:B3:B8
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       075AD87D164E662AE455B48F28A094D1E8718F04
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3130323a3a2f34382d3438203d3e20333936333033.roa
Signing time:             Mon 14 Aug 2023 07:53:31 +0000
ROA not before:           Mon 14 Aug 2023 07:48:31 +0000
ROA not after:            Mon 12 Aug 2024 07:53:31 +0000
asID:                     396303
IP address blocks:        2602:feda:102::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 20:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:5a:d8:7d:16:4e:66:2a:e4:55:b4:8f:28:a0:94:d1:e8:71:8f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:31 2023 GMT
            Not After : Aug 12 07:53:31 2024 GMT
        Subject: CN=F4F57EECD24F4ACC6ED04C697C26285FFB32B3B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:35:63:83:90:db:75:15:7b:42:1e:25:00:64:
                    51:74:14:9f:db:b5:41:2a:0a:60:1e:5d:86:ce:3e:
                    75:8a:21:44:94:f8:18:3e:83:e6:3a:75:9a:fa:2f:
                    d5:c1:54:c7:7f:f3:6b:55:da:7f:93:aa:31:2e:1c:
                    38:c1:98:1c:40:ea:84:53:41:49:c5:c6:e8:44:55:
                    d5:30:fc:10:33:93:96:e6:63:4d:62:59:1a:c6:cd:
                    65:8c:68:4a:26:16:03:ff:da:fb:f5:7f:40:6c:79:
                    91:9a:a2:3e:05:be:5e:f3:38:f8:2c:26:3c:fd:3d:
                    74:05:b7:d4:ab:2e:00:dd:2a:a4:f1:1d:71:f3:08:
                    b1:14:b3:3a:20:9d:0f:dd:fa:7f:a6:67:22:f0:2e:
                    e2:76:4e:05:27:dd:90:7e:21:0c:1e:09:3e:57:c6:
                    19:01:41:3e:68:9e:f0:04:ca:92:33:b6:16:7f:96:
                    b7:93:91:d2:65:99:65:e9:d4:21:35:11:30:96:9d:
                    50:a2:44:09:4e:f2:0a:36:db:9a:73:8d:91:e1:2b:
                    ef:b0:ac:0d:79:98:60:6e:d3:4a:e3:b0:81:33:99:
                    d2:6e:76:65:78:cd:d7:06:36:ca:14:98:c9:97:6e:
                    3b:25:c8:b9:31:c6:82:b6:37:23:e8:31:19:82:3e:
                    2d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F5:7E:EC:D2:4F:4A:CC:6E:D0:4C:69:7C:26:28:5F:FB:32:B3:B8
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3130323a3a2f34382d3438203d3e20333936333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:102::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:bc:b7:98:a7:ff:75:ff:50:3e:fc:12:d9:65:87:06:31:92:
         8c:0a:b3:a1:f0:03:7b:46:40:32:fa:b5:ba:9d:91:28:1d:b5:
         ba:b9:2e:d1:73:6b:a5:b9:ab:2f:98:0c:c0:37:0a:2b:03:17:
         bb:ba:99:bf:51:cf:75:17:25:31:aa:1e:bd:7c:3e:cd:7a:62:
         f9:4d:1f:b7:45:a3:c4:8d:f4:a5:e2:a1:dc:b4:a6:db:ba:88:
         af:e4:48:4e:f5:3f:7a:c3:4b:94:39:44:b9:03:ee:a3:15:27:
         d2:e3:dc:aa:6d:3b:f7:77:e2:c4:f8:aa:e1:af:84:1e:45:77:
         0b:ae:e9:34:cc:d7:d8:57:cb:cb:72:84:48:66:66:e5:d5:b3:
         bf:48:2c:03:27:8e:30:48:d4:69:69:22:e5:f4:d5:23:e9:0d:
         4e:09:47:b8:be:5c:eb:e7:87:aa:b5:42:db:7c:61:53:58:ee:
         13:72:63:60:0f:05:d9:a5:83:74:3a:12:20:ce:3d:cd:aa:df:
         2a:30:d4:d7:03:12:55:8b:5a:3c:06:ad:73:8e:66:dc:a6:e5:
         22:59:93:2d:21:5a:da:79:3b:f8:5a:4f:1f:9c:86:5e:0f:8a:
         67:5b:86:2d:54:e1:71:3b:10:44:8a:ad:99:02:46:22:8a:8d:
         26:5e:80:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:39:51 2024 by rpki-client on console-fra.rpki-client.org