Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313430393133.roa
File:                     323630323a666564613a3361383a3a2f34352d3438203d3e20313430393133.roa (raw, json)
Hash identifier:          ZKHMiQ3FxgvOGus9fV/a6Tr6Q93KY7aoRakciD89gvY=
Subject key identifier:   EF:EF:83:E2:A3:95:3F:99:B8:BF:5D:07:4C:C7:0E:16:5B:81:D0:2B
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       018FD26ECB9A1C75742A82A8473CF88BCB03C279
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313430393133.roa
Signing time:             Mon 14 Aug 2023 07:53:29 +0000
ROA not before:           Mon 14 Aug 2023 07:48:29 +0000
ROA not after:            Mon 12 Aug 2024 07:53:29 +0000
asID:                     140913
IP address blocks:        2602:feda:3a8::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:d2:6e:cb:9a:1c:75:74:2a:82:a8:47:3c:f8:8b:cb:03:c2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:29 2023 GMT
            Not After : Aug 12 07:53:29 2024 GMT
        Subject: CN=EFEF83E2A3953F99B8BF5D074CC70E165B81D02B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:ce:c0:76:62:c4:8a:e0:8a:60:7e:f7:da:
                    9a:22:32:ba:49:1d:46:0c:75:16:8c:8d:53:d2:00:
                    00:af:83:1c:3f:8a:02:f0:d1:3c:30:7f:4f:3a:50:
                    fa:9f:7d:d8:ec:1c:ad:ea:c9:92:dd:56:1c:31:7e:
                    1c:0e:fa:46:75:36:fd:c7:2b:cc:e0:36:6c:ac:24:
                    b4:7b:fc:52:df:c9:1c:50:8d:c9:53:34:57:59:e9:
                    ec:66:ef:66:b2:1f:e4:9a:36:d5:f9:82:e1:e7:75:
                    a1:e4:0e:7e:93:d0:c2:a3:37:c5:13:21:44:b5:d2:
                    d2:8a:52:3f:b3:99:6f:01:0f:8b:bf:dc:6e:cf:6d:
                    74:e6:01:f8:47:72:20:3e:be:3d:82:63:1c:36:97:
                    eb:f4:47:c8:8f:3c:fc:b2:3a:15:3f:01:bb:e3:66:
                    61:cc:8b:93:5b:61:fd:f1:b6:35:93:62:9f:7d:66:
                    c2:0b:0b:e4:88:a5:f9:4c:40:c7:51:17:77:0c:1e:
                    53:1c:0a:2d:82:00:28:c6:c3:c8:29:9a:e3:ce:8b:
                    38:9c:7b:a0:ee:11:9b:12:9c:2d:66:77:1c:88:ba:
                    58:74:10:2b:c9:ab:e4:7c:b6:4d:fa:a0:cf:55:f6:
                    a1:0a:78:14:a9:9a:0f:be:ac:e0:75:5e:e9:a0:da:
                    7f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:EF:83:E2:A3:95:3F:99:B8:BF:5D:07:4C:C7:0E:16:5B:81:D0:2B
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313430393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:3a8::/45

    Signature Algorithm: sha256WithRSAEncryption
         8c:01:c8:9a:75:4e:d1:c4:72:6a:ff:89:a1:e0:98:b0:91:dd:
         8e:6b:7f:13:53:e5:22:11:48:a0:c8:90:5b:a4:ea:ff:ef:e0:
         54:cd:88:d5:9f:57:42:27:85:2e:65:37:6b:14:7e:52:a5:f2:
         03:98:55:c2:58:fb:ce:5c:82:47:eb:3e:48:17:1d:ae:16:d5:
         df:42:5a:20:e5:0a:be:3a:77:2c:e0:ed:ca:11:c2:41:a5:c4:
         d6:20:12:de:dc:ce:d9:9d:2a:d7:aa:a7:e8:d6:d1:c0:2e:0f:
         65:ec:6f:1a:5d:7f:c5:57:42:bb:07:d9:d2:e3:b8:d9:20:81:
         51:8d:49:6b:ea:3d:cd:5b:e0:70:dc:ee:56:80:9b:8b:19:1a:
         27:13:da:35:ec:79:6e:5c:2d:74:2c:8e:b2:9b:67:83:e1:51:
         a3:a9:a2:98:5f:82:e0:80:9d:39:66:5b:dc:e2:28:09:0b:c3:
         5d:2f:0f:88:01:62:10:f5:0e:39:37:ff:cb:93:99:3e:49:15:
         4f:c9:6d:24:92:42:28:b3:7e:68:1a:29:f9:6d:f1:f6:1c:fd:
         9a:36:f4:36:7e:fc:2f:59:85:c8:36:68:43:83:42:6e:9c:dd:
         a4:32:bf:ca:6c:af:8e:85:cb:f9:59:9d:69:78:3e:29:3b:65:
         a8:f7:ad:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:51:50 2024 by rpki-client on console-ams.rpki-client.org