Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa
File:                     323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa (raw, json)
Hash identifier:          fw6XH9mH4KVu456+1CbvBOkjc45gqxrhyZszjhgxc1Y=
Subject key identifier:   FE:E1:C6:D5:35:41:0F:CC:E4:5E:F1:42:88:D0:65:51:9D:2C:CB:8A
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       023E9743B70EB1D68A823B7A23D8BB552E422E58
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa
Signing time:             Mon 14 Aug 2023 07:53:35 +0000
ROA not before:           Mon 14 Aug 2023 07:48:35 +0000
ROA not after:            Mon 12 Aug 2024 07:53:35 +0000
asID:                     134575
IP address blocks:        2602:feda:3b0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:3e:97:43:b7:0e:b1:d6:8a:82:3b:7a:23:d8:bb:55:2e:42:2e:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:35 2023 GMT
            Not After : Aug 12 07:53:35 2024 GMT
        Subject: CN=FEE1C6D535410FCCE45EF14288D065519D2CCB8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b7:98:00:6a:04:9f:3c:32:46:9e:08:82:0e:
                    5b:44:30:e0:a9:8e:b7:82:dd:c1:ae:31:91:06:20:
                    60:e7:a1:c1:13:0b:48:af:b4:db:b7:a4:14:af:2c:
                    a7:9c:64:79:5c:61:02:75:2b:a6:f0:30:b1:a7:d2:
                    45:48:b4:48:d4:42:b0:05:71:cd:52:3e:70:be:3f:
                    7e:9c:c7:75:74:31:a7:24:a8:98:27:7a:b1:13:c9:
                    37:11:08:e7:ae:47:2a:94:8e:55:7f:55:87:4e:c6:
                    65:81:a7:01:77:65:8e:c7:2f:30:8f:68:8d:d6:60:
                    e9:f8:de:f3:63:81:8d:54:ca:a9:61:a6:fa:11:5b:
                    c5:2b:fe:29:ac:77:1b:41:4a:dc:db:ad:31:a1:52:
                    33:65:5f:08:44:83:ae:6f:77:98:8b:8b:05:b5:db:
                    ba:c8:88:e7:91:6b:e5:70:4b:15:d2:d3:06:5c:d2:
                    99:3c:87:16:a6:57:61:cf:7a:38:67:e5:aa:16:aa:
                    ca:55:2b:eb:0f:6f:3f:2c:ea:89:90:44:df:a4:96:
                    2e:19:8e:65:8a:0f:83:d6:06:70:cb:37:05:8f:e0:
                    e1:95:53:3f:f5:24:1c:42:f3:dd:60:08:94:f7:5e:
                    41:87:0d:39:80:bf:ef:da:cd:6d:e9:9d:ce:1e:20:
                    95:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E1:C6:D5:35:41:0F:CC:E4:5E:F1:42:88:D0:65:51:9D:2C:CB:8A
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:3b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         b4:59:71:eb:11:7e:6f:80:d1:36:0b:16:9f:8f:25:ae:5e:04:
         13:02:c6:b2:2c:f4:89:fc:79:e5:1d:1c:be:a8:4b:ea:c5:d0:
         39:6f:be:b0:10:03:d9:a3:57:82:4c:6a:85:ee:3d:c3:d1:11:
         50:2e:24:64:a6:fb:e3:e1:60:7f:1a:c3:86:90:bb:51:4c:44:
         a0:b5:2b:6e:46:a8:70:fd:9c:f1:cf:32:05:31:fe:13:14:00:
         72:ba:1e:6f:b1:b6:50:3a:99:e2:25:b7:c9:59:8d:f3:59:86:
         bf:28:28:6d:ff:9e:e8:53:0a:36:56:eb:fb:06:d8:f5:a7:c7:
         d6:a0:0c:c2:fd:ce:85:67:f9:42:fc:44:a0:ce:11:8c:6d:7f:
         21:c9:a3:45:31:d5:67:03:66:4e:0e:13:9b:f0:ac:6b:38:47:
         b5:06:2e:3b:21:ac:8d:e7:71:6a:5a:ed:20:d2:20:8b:39:1f:
         02:ed:e8:0b:a5:1f:cf:2c:a1:7c:68:d3:ca:25:f8:75:07:72:
         d7:b8:08:f6:d9:3f:27:c3:37:d7:32:2a:7e:b5:34:59:3d:ca:
         a4:8d:ba:71:fb:b3:f0:b6:2e:11:b2:7b:b2:a8:6f:fa:d7:4e:
         74:6b:9f:1c:3e:e0:e5:22:5a:f7:7d:9d:e6:46:90:35:e3:56:
         15:90:aa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:51:50 2024 by rpki-client on console-ams.rpki-client.org