Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a313a3a2f34382d3438203d3e20333936333033.roa
File:                     323630323a666564613a313a3a2f34382d3438203d3e20333936333033.roa (raw, json)
Hash identifier:          E6fr8r56jRfF/LQRR7QMRIJqkSLdr06YlfMcHV/Dq3c=
Subject key identifier:   E7:84:28:3D:C3:84:4C:BE:B3:75:B6:BC:26:3B:B4:8E:84:31:D1:51
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       434FC4408E1F00414E0094F3A5AA0EC46BE38FCE
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a313a3a2f34382d3438203d3e20333936333033.roa
Signing time:             Mon 14 Aug 2023 07:53:32 +0000
ROA not before:           Mon 14 Aug 2023 07:48:32 +0000
ROA not after:            Mon 12 Aug 2024 07:53:32 +0000
asID:                     396303
IP address blocks:        2602:feda:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:4f:c4:40:8e:1f:00:41:4e:00:94:f3:a5:aa:0e:c4:6b:e3:8f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:32 2023 GMT
            Not After : Aug 12 07:53:32 2024 GMT
        Subject: CN=E784283DC3844CBEB375B6BC263BB48E8431D151
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:b2:56:27:94:fa:fe:ff:82:b4:09:17:e8:
                    91:0e:4a:81:23:fd:93:6f:87:79:cf:06:93:e9:fc:
                    ff:69:f3:e6:c2:23:a7:2d:f5:49:a3:7d:cd:66:0e:
                    7a:8e:63:ad:f7:a6:df:ca:e3:a2:aa:9f:3f:2c:5f:
                    d1:7e:7a:e6:3c:d2:62:f2:f5:49:2e:ce:ca:4d:00:
                    17:db:c9:a9:bc:65:ff:82:66:35:23:69:62:b5:93:
                    06:7b:48:84:cd:ca:b2:20:ee:06:7b:a2:e2:80:d9:
                    2f:5b:14:d9:f2:ad:65:47:56:19:16:1d:d9:29:14:
                    85:c4:6a:81:8a:15:ad:39:83:62:2f:28:57:27:87:
                    3f:12:cc:29:3a:10:f8:30:31:9a:7e:90:c6:cc:30:
                    17:67:64:9c:07:f0:d8:1d:4c:01:2d:2b:28:dc:0b:
                    fd:d5:ee:c6:3d:3a:b3:a6:1f:78:1a:2b:56:ad:fa:
                    15:6f:9a:07:01:d1:1b:83:aa:38:d5:1c:7f:f9:33:
                    00:c5:6e:61:c2:1e:7e:66:0c:c5:3c:37:64:c5:c1:
                    2c:62:d9:4d:9a:45:f2:43:64:1c:16:bb:f4:04:62:
                    18:44:37:50:bf:49:73:f5:3a:bd:26:79:b0:79:b8:
                    fd:e2:30:03:27:eb:a9:17:59:15:e5:9c:76:be:f3:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:84:28:3D:C3:84:4C:BE:B3:75:B6:BC:26:3B:B4:8E:84:31:D1:51
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a313a3a2f34382d3438203d3e20333936333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:d4:88:b5:f8:a2:41:5e:8f:33:8d:c2:a4:6d:77:8f:f4:40:
         29:4d:bf:be:f1:21:8b:51:5c:5f:fe:d4:92:72:35:3d:71:23:
         43:b6:3b:5b:08:4e:8b:55:e4:6a:ff:0e:1a:b7:f5:a6:37:e4:
         55:1d:b9:26:ab:31:72:16:20:ac:e7:47:c4:0c:b7:1f:f3:53:
         bf:30:82:28:75:a4:e0:e8:c0:59:58:50:db:36:fc:33:2b:ef:
         d6:1c:20:34:33:cb:43:75:08:0d:5d:59:ac:3a:c7:63:99:53:
         b4:aa:31:ae:09:c6:da:9e:42:52:77:b6:f7:2a:e0:71:a1:33:
         18:fd:71:b2:89:92:a5:bb:27:cd:cd:92:e4:b5:7b:91:0e:fa:
         08:9a:5b:68:5a:22:8f:e8:96:cc:76:ad:92:03:25:58:f5:96:
         c1:00:b8:30:64:46:d7:4c:e3:4a:8b:fd:e2:a6:db:9a:18:9b:
         38:e5:3e:72:8b:f6:ad:52:bd:28:c9:d5:ab:05:d2:9f:89:6b:
         65:29:3e:61:52:94:55:a7:be:30:da:7c:b5:11:cd:44:41:45:
         d7:20:24:e5:a2:0f:2d:26:86:fb:97:8a:ae:e8:d6:1e:d4:67:
         5d:35:a2:a4:91:0d:56:96:9f:48:34:a9:21:ca:e5:22:8a:2d:
         cb:67:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:51:50 2024 by rpki-client on console-ams.rpki-client.org