Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa
File:                     323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa (raw, json)
Hash identifier:          wsXxeXgxNvE7swYwYo3LtyVarNqpqnm1h2C7IMc3zlU=
Subject key identifier:   59:AF:63:4D:F1:23:6F:CF:DA:30:51:44:21:EE:60:13:06:59:2F:F6
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       5B93CCB031E9E59C15A57846513C51D52E5CA612
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa
Signing time:             Mon 14 Aug 2023 07:53:37 +0000
ROA not before:           Mon 14 Aug 2023 07:48:37 +0000
ROA not after:            Mon 12 Aug 2024 07:53:37 +0000
asID:                     133492
IP address blocks:        2602:feda:2d0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:93:cc:b0:31:e9:e5:9c:15:a5:78:46:51:3c:51:d5:2e:5c:a6:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:37 2023 GMT
            Not After : Aug 12 07:53:37 2024 GMT
        Subject: CN=59AF634DF1236FCFDA30514421EE601306592FF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:38:e0:d4:f1:5c:32:de:12:66:21:a1:dc:a2:
                    4a:83:bb:02:1a:0d:1f:c0:22:ce:41:37:5e:60:d0:
                    dd:14:9b:18:d4:df:68:20:b0:9d:58:01:6f:87:5c:
                    d9:72:4e:ff:93:fc:b1:f8:94:11:39:8e:0b:a1:83:
                    6b:10:d0:e4:1a:85:1b:bb:0a:97:6b:7f:c2:1e:23:
                    57:dc:66:45:c7:c7:80:8b:be:e2:ed:ae:75:4f:68:
                    6a:35:ef:84:38:a3:96:83:4f:49:53:21:9c:29:82:
                    45:7d:e4:54:10:e5:15:d7:1c:ba:53:6f:ac:e6:08:
                    9d:40:86:c9:a1:53:71:8d:dd:bb:19:59:59:de:ed:
                    02:b8:3b:ba:2a:66:64:83:57:00:db:b5:a9:66:f2:
                    9e:c9:4d:92:90:d6:57:82:7c:b0:93:36:ad:78:69:
                    20:d0:8c:a1:51:33:31:7c:f1:f1:f6:0a:9e:de:72:
                    37:ce:39:1c:e3:f4:8c:8e:5e:1c:e7:d6:59:f4:18:
                    08:8f:c4:28:59:fa:7c:2a:fc:cc:88:17:0f:64:c6:
                    9c:7a:26:7d:ac:02:bf:ca:c1:4a:78:c5:cb:f0:ce:
                    52:4a:12:e6:36:68:2f:38:96:98:57:55:8c:27:18:
                    14:f3:a9:7d:f8:9c:93:a0:9d:4c:46:2b:2a:7f:13:
                    e4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:AF:63:4D:F1:23:6F:CF:DA:30:51:44:21:EE:60:13:06:59:2F:F6
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:2d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b9:84:ca:32:26:c7:e9:a1:5e:94:48:da:7b:78:43:6a:3e:23:
         c7:8f:8f:da:e3:80:db:c8:28:8c:83:d2:1b:e6:e7:d1:d0:99:
         fe:c3:86:95:cd:9b:9a:98:00:d5:4f:7e:38:82:c0:cd:6b:de:
         8c:b4:38:ad:d8:d0:4d:2d:68:cb:c5:ba:9e:b7:8b:a2:f0:d9:
         7a:60:59:11:2e:53:49:8e:3c:d7:0e:02:48:25:24:88:e0:64:
         5e:60:6d:03:77:67:fc:c3:18:63:b2:c8:d6:3d:f8:70:0c:0f:
         34:b2:bb:ce:0b:5a:e4:83:96:b6:ad:10:4a:72:77:e4:80:53:
         cc:7a:49:d6:d6:24:92:93:d3:01:15:57:3a:7e:67:0c:c4:21:
         be:a5:49:99:f7:ed:43:39:16:49:d8:c9:a3:53:f6:91:ef:36:
         ed:72:a5:1e:ba:3e:ba:66:00:6b:09:51:ea:72:1a:aa:9f:ab:
         f6:2f:4c:7f:55:f2:ae:71:28:59:4e:be:1c:a3:4b:5b:c6:7c:
         70:ff:a7:2b:2b:06:26:e1:d6:62:ec:6a:2b:64:1c:36:79:7a:
         12:eb:f8:dd:8a:f9:98:98:ec:66:ce:f4:3e:0a:fd:89:3a:ab:
         95:a1:06:ad:75:b0:4c:ca:24:cd:12:08:9a:f8:a9:c8:c6:02:
         a2:2c:b5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:04:43 2024 by rpki-client on console-fra.rpki-client.org