Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3130353a3a2f34382d3438203d3e20333936333033.roa
File:                     323630323a666564613a3130353a3a2f34382d3438203d3e20333936333033.roa (raw, json)
Hash identifier:          V/I2PNGA/RZ2oPRv6NMbVcqs01PDkjlK8qJxUjUkunA=
Subject key identifier:   E4:8F:73:11:8C:23:37:0D:0E:5E:DD:84:AC:DC:DA:A9:5D:A8:4A:EF
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       3F5AE01542EC0E585CED43420BE336103B780E5A
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3130353a3a2f34382d3438203d3e20333936333033.roa
Signing time:             Mon 14 Aug 2023 07:53:39 +0000
ROA not before:           Mon 14 Aug 2023 07:48:39 +0000
ROA not after:            Mon 12 Aug 2024 07:53:39 +0000
asID:                     396303
IP address blocks:        2602:feda:105::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 20:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5a:e0:15:42:ec:0e:58:5c:ed:43:42:0b:e3:36:10:3b:78:0e:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:39 2023 GMT
            Not After : Aug 12 07:53:39 2024 GMT
        Subject: CN=E48F73118C23370D0E5EDD84ACDCDAA95DA84AEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:30:54:a7:42:46:94:4d:28:78:fe:06:75:3b:
                    62:bd:9f:a1:b7:12:2f:4b:49:f7:8d:3b:bd:24:1a:
                    7e:2a:3c:06:b6:1b:9d:02:b2:b8:36:09:b6:3f:86:
                    38:b7:89:9a:5b:db:0f:fb:03:11:33:f3:76:7a:94:
                    63:58:a3:7e:0e:d5:34:56:b7:6d:25:5d:11:58:74:
                    20:6d:e1:bc:72:be:da:cf:40:4f:0d:0b:3a:41:7a:
                    1d:a7:cc:5e:71:2a:c5:c3:1d:2e:c5:30:43:5a:e6:
                    c7:7d:90:f3:82:e4:db:86:45:0e:e3:f0:ae:14:7a:
                    97:e1:3f:79:9a:11:d4:25:2d:e2:e0:e4:86:64:d5:
                    97:be:68:3f:cf:51:1a:5c:15:29:7b:8e:1e:aa:b3:
                    a8:ae:0a:6c:da:ba:9b:0e:52:a1:a3:d1:5e:d9:c8:
                    d9:49:63:7a:11:e3:d8:6e:a1:4b:81:1d:f1:8c:80:
                    86:e9:33:de:fd:0a:8a:d7:03:d2:9e:d7:07:a8:c8:
                    4c:1b:6e:0b:81:4a:3e:14:3c:a2:29:16:fc:58:9e:
                    64:2c:a1:66:50:d2:7b:c7:d0:37:b0:2e:91:b7:11:
                    b9:79:b0:68:fe:03:23:ca:6e:01:c6:af:3d:e5:16:
                    f8:25:61:85:11:34:cc:5f:1b:53:6c:3a:89:c9:e1:
                    7f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8F:73:11:8C:23:37:0D:0E:5E:DD:84:AC:DC:DA:A9:5D:A8:4A:EF
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3130353a3a2f34382d3438203d3e20333936333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:105::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:24:ac:a0:fc:c7:26:b2:70:88:d4:f5:55:cf:9e:ef:2e:31:
         51:c1:27:22:b7:7b:83:cc:2f:f5:6d:fe:2e:50:bf:e2:e8:24:
         00:26:13:e2:68:29:e7:62:e4:86:5d:9e:86:11:6c:60:e0:f9:
         43:27:99:82:1a:d3:aa:ac:38:7a:86:42:e4:19:b9:2f:76:be:
         fc:e5:cc:be:4d:2b:e8:6c:d6:c8:3d:06:85:af:bb:b4:ab:77:
         68:26:7a:ff:6b:60:92:94:ff:af:51:0d:f9:e5:71:c3:5e:68:
         23:af:9f:02:f4:bf:98:8f:8f:cb:47:ba:44:08:09:b2:a9:1b:
         8a:e2:3d:da:db:c4:86:03:36:19:d2:9c:cb:32:7a:b8:6d:7d:
         70:09:1a:ad:0c:22:89:6a:74:5c:55:55:7b:a6:03:7a:ec:47:
         d4:cc:ee:34:3d:cd:c9:5a:24:06:d9:1a:68:e8:42:82:a0:7e:
         9d:5d:7c:9c:54:8a:3c:bc:e6:1e:a6:0e:74:4b:56:24:29:8d:
         ca:93:32:fe:b0:dd:d3:73:8f:dd:b6:a2:ad:62:a7:dc:37:28:
         4c:56:75:03:10:5d:e5:d4:95:93:55:7e:71:f5:44:cd:f6:76:
         1c:13:a7:b8:12:60:82:70:1c:97:5c:d1:db:5a:d5:98:54:8c:
         b6:09:25:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:39:51 2024 by rpki-client on console-fra.rpki-client.org