Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165353a3a2f34382d3438203d3e203338303038.roa
File:                     323630323a666564613a6165353a3a2f34382d3438203d3e203338303038.roa (raw, json)
Hash identifier:          VMfrzzI8myooR3XQ9/7eLsmvOhCL8550cvyyXLwgtmo=
Subject key identifier:   B0:1B:69:46:92:C4:FC:61:25:EB:90:BE:81:74:26:A1:AA:40:81:41
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       7B4963A8991F904EA871C902E742B336D001DE98
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165353a3a2f34382d3438203d3e203338303038.roa
Signing time:             Mon 14 Aug 2023 07:53:39 +0000
ROA not before:           Mon 14 Aug 2023 07:48:39 +0000
ROA not after:            Mon 12 Aug 2024 07:53:39 +0000
asID:                     38008
IP address blocks:        2602:feda:ae5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 18:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:49:63:a8:99:1f:90:4e:a8:71:c9:02:e7:42:b3:36:d0:01:de:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:39 2023 GMT
            Not After : Aug 12 07:53:39 2024 GMT
        Subject: CN=B01B694692C4FC6125EB90BE817426A1AA408141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:fc:37:89:17:51:1c:93:e3:eb:b5:1b:79:
                    c0:cd:40:76:77:fa:59:6d:be:a3:2f:4b:fa:7f:53:
                    de:1a:98:f9:da:e7:f9:fe:04:31:62:bc:3b:25:b6:
                    ea:6e:bc:85:e8:2b:6d:b3:20:70:27:dd:f6:11:49:
                    fc:3c:cb:3d:da:6d:a3:40:be:de:6e:df:29:40:2c:
                    f8:93:0f:fa:7c:5a:cc:2d:30:97:06:29:da:94:6a:
                    cc:3d:83:6f:8d:b6:44:b1:bf:56:45:13:60:54:63:
                    25:c5:3e:a0:63:5c:92:0f:a0:80:bb:bc:8c:a5:bb:
                    94:4a:3c:f7:64:b3:aa:2e:03:17:dc:f2:ff:54:92:
                    2d:b3:39:4d:7d:29:cd:eb:69:14:06:b8:30:cb:9c:
                    8c:d0:aa:cf:21:37:9d:09:cb:5e:f5:5b:84:54:bd:
                    78:ae:bb:af:39:29:c4:e5:91:13:ed:c6:23:c7:d6:
                    6d:0b:cb:6e:53:07:49:52:27:a2:56:af:a0:c8:42:
                    1c:0a:ce:8a:8d:3c:48:69:72:0d:97:08:71:cb:d9:
                    fe:3b:ab:b3:1c:3b:08:63:53:b7:0f:ee:62:5a:9d:
                    fc:f6:53:9c:07:69:c2:4c:d5:e3:f9:be:5a:4a:40:
                    66:56:ec:fc:10:1e:29:0e:34:26:23:c2:74:91:a2:
                    54:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1B:69:46:92:C4:FC:61:25:EB:90:BE:81:74:26:A1:AA:40:81:41
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165353a3a2f34382d3438203d3e203338303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ae5::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:71:a3:98:39:c7:6f:43:e3:47:ea:19:53:19:8d:5a:c6:a5:
         f8:34:ac:09:5b:be:86:29:c1:6c:53:d3:e2:58:6e:1c:85:77:
         a5:bd:4a:71:ed:48:d5:88:c9:f3:7f:ce:3f:a0:3a:b1:05:6e:
         5e:9a:ec:92:bf:2b:69:90:fc:96:ab:eb:b6:34:cb:5c:99:e7:
         1b:14:72:2d:2d:ff:23:59:a4:7d:57:da:88:82:08:da:3f:fc:
         cf:ad:7b:a7:c6:f2:98:a2:83:f4:5d:eb:c9:a2:23:b1:ba:3b:
         c1:bd:e2:55:c2:bc:50:b2:12:c0:e2:dd:02:84:81:9b:ba:c0:
         fe:9c:d0:0d:9d:d8:4a:c4:52:26:3a:cd:52:1f:a3:3b:6d:99:
         0a:bf:ea:33:c2:ec:e9:c3:df:0c:52:9a:12:3e:b7:0d:00:b7:
         21:0d:75:28:8c:4e:e5:49:45:bd:30:c6:a2:ce:ed:b2:ae:bc:
         b3:79:b3:f5:6d:2e:40:2f:e1:68:f5:87:92:a9:7b:21:87:24:
         5a:43:7f:b3:d4:0d:c9:9d:be:88:29:85:8a:b7:bf:e5:41:0b:
         e4:ca:01:49:2c:11:be:2a:e4:14:ae:93:e9:e8:4f:06:ce:c8:
         1d:1d:4a:f7:ec:d8:48:54:ba:2e:e5:d4:04:fc:04:28:b2:8b:
         37:d8:0f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:01:01 2024 by rpki-client on console-ams.rpki-client.org