Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313431373036.roa
File:                     323630323a666564613a3361383a3a2f34352d3438203d3e20313431373036.roa (raw, json)
Hash identifier:          EXxhrPtaiI7rbD7hrqxPW2tZt4oPlLff4XSNoWbbqks=
Subject key identifier:   BD:7D:36:C4:E0:5D:6C:27:7C:1D:CA:CD:97:41:FF:67:82:75:AC:DE
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       6544CD13A7112DA510D1440A0A31712D747F305E
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313431373036.roa
Signing time:             Mon 14 Aug 2023 07:53:31 +0000
ROA not before:           Mon 14 Aug 2023 07:48:31 +0000
ROA not after:            Mon 12 Aug 2024 07:53:31 +0000
asID:                     141706
IP address blocks:        2602:feda:3a8::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 12:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:44:cd:13:a7:11:2d:a5:10:d1:44:0a:0a:31:71:2d:74:7f:30:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:31 2023 GMT
            Not After : Aug 12 07:53:31 2024 GMT
        Subject: CN=BD7D36C4E05D6C277C1DCACD9741FF678275ACDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:52:ea:0f:de:16:d8:11:87:c3:5c:c1:ad:
                    96:ba:e6:a7:98:d6:39:8a:26:7d:a5:cb:3b:c1:ec:
                    d1:30:98:cf:5d:3c:0a:9b:c1:60:fd:fa:6b:3b:12:
                    8c:af:98:4b:8d:44:09:9f:a8:de:e2:77:b4:bc:e7:
                    ff:b8:24:ed:42:8e:ff:4b:ad:55:78:23:7d:7a:77:
                    fd:4d:6b:d0:52:eb:3f:c0:2e:fc:ea:c8:c4:5c:51:
                    12:5f:8e:2a:6b:b7:60:e6:f2:b9:92:ec:b2:f0:d9:
                    b5:ef:c4:cb:e1:b9:b9:b1:c4:76:27:e6:7c:f1:69:
                    fe:f9:f1:f9:64:89:72:b2:aa:0d:89:30:5a:6e:c3:
                    99:d3:c8:6b:77:34:b4:41:83:20:4d:f1:98:b9:db:
                    0d:00:88:3b:9e:4f:5d:6c:0f:fe:65:17:d3:df:b7:
                    fa:b3:56:a8:b9:cc:1e:be:d9:b8:bb:80:c2:1f:be:
                    13:49:eb:3e:db:41:61:54:ae:d9:00:ae:32:87:64:
                    33:a9:b4:d6:23:61:f4:1d:1d:0e:16:e2:d2:1c:0d:
                    20:b8:bb:1b:f9:e0:21:e9:d4:67:91:d1:bf:45:18:
                    11:1d:52:76:3d:ee:f8:3a:9a:6d:0f:3e:90:0e:2f:
                    73:5a:76:b1:51:ee:11:b7:ba:1a:87:fc:1e:49:45:
                    1c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7D:36:C4:E0:5D:6C:27:7C:1D:CA:CD:97:41:FF:67:82:75:AC:DE
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313431373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:3a8::/45

    Signature Algorithm: sha256WithRSAEncryption
         a0:18:33:19:74:95:24:b5:4e:99:6f:dc:43:98:6c:55:20:d6:
         af:ee:bb:7c:59:37:16:40:dd:5e:a0:bf:01:bf:34:3b:93:93:
         d9:0e:a2:64:80:9e:7c:a2:17:00:dc:0f:22:fe:6e:42:c4:0a:
         ff:54:be:37:04:1b:2c:8c:8d:46:e3:b2:5b:bb:59:82:a4:53:
         0d:c1:c9:e5:5e:95:4c:45:c5:cc:69:e5:b2:ef:a9:d5:5a:4f:
         07:1b:07:c9:44:9a:e6:99:1c:f0:e0:a5:90:7a:cf:2f:27:17:
         8c:3f:82:31:6f:74:b0:d7:f1:ab:c7:37:f7:9f:3d:b3:83:6d:
         cf:f6:42:57:98:b8:d4:6d:9f:62:da:e8:ba:50:07:c7:6e:31:
         d2:52:f8:c4:31:ba:ab:67:97:ea:fd:36:f0:65:c5:9f:65:41:
         d0:c6:96:28:f9:2f:b8:6b:06:79:06:15:9a:b4:dd:f6:66:14:
         82:8f:67:f7:f2:72:38:8c:1d:09:e5:16:f6:c9:7e:07:99:44:
         0c:98:e7:38:66:c3:c9:66:8a:0b:f0:b5:95:1e:f5:5c:08:92:
         dd:89:f2:57:99:71:a1:25:41:81:b2:19:27:c7:b0:d9:2f:98:
         28:40:26:11:48:2c:78:19:11:82:0e:48:07:9e:49:0c:dc:4d:
         f8:b8:32:2f
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUZUTNE6cRLaUQ0UQKCjFxLXR/MF4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjMwODE0MDc0ODMxWhcNMjQwODEyMDc1MzMx
WjAzMTEwLwYDVQQDEyhCRDdEMzZDNEUwNUQ2QzI3N0MxRENBQ0Q5NzQxRkY2Nzgy
NzVBQ0RFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lxS6g/eFtgR
h8Ncwa2WuuanmNY5iiZ9pcs7wezRMJjPXTwKm8Fg/fprOxKMr5hLjUQJn6je4ne0
vOf/uCTtQo7/S61VeCN9enf9TWvQUus/wC786sjEXFESX44qa7dg5vK5kuyy8Nm1
78TL4bm5scR2J+Z88Wn++fH5ZIlysqoNiTBabsOZ08hrdzS0QYMgTfGYudsNAIg7
nk9dbA/+ZRfT37f6s1aoucwevtm4u4DCH74TSes+20FhVK7ZAK4yh2QzqbTWI2H0
HR0OFuLSHA0guLsb+eAh6dRnkdG/RRgRHVJ2Pe74OpptDz6QDi9zWnaxUe4Rt7oa
h/weSUUc7QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFL19NsTgXWwnfB3KzZdB/2eC
dazeMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6
Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh
MzM2MTM4M2EzYTJmMzQzNTJkMzQzODIwM2QzZTIwMzEzNDMxMzczMDM2LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcDJgL+2gOoMA0GCSqGSIb3DQEBCwUAA4IBAQCgGDMZdJUktU6Zb9xDmGxV
INav7rt8WTcWQN1eoL8BvzQ7k5PZDqJkgJ58ohcA3A8i/m5CxAr/VL43BBssjI1G
47Jbu1mCpFMNwcnlXpVMRcXMaeWy76nVWk8HGwfJRJrmmRzw4KWQes8vJxeMP4Ix
b3Sw1/Grxzf3nz2zg23P9kJXmLjUbZ9i2ui6UAfHbjHSUvjEMbqrZ5fq/TbwZcWf
ZUHQxpYo+S+4awZ5BhWatN32ZhSCj2f38nI4jB0J5Rb2yX4HmUQMmOc4ZsPJZooL
8LWVHvVcCJLdifJXmXGhJUGBshknx7DZL5goQCYRSCx4GRGCDkgHnkkM3E34uDIv
-----END CERTIFICATE-----
Generated at Sat Apr 27 13:32:21 2024 by rpki-client on console-ams.rpki-client.org