Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa
File:                     323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa (raw, json)
Hash identifier:          YGPIns8BkKm/WGnGIUG7UsyvUWv381ldtkNxi+5QUvc=
Subject key identifier:   69:26:38:75:B9:8E:97:BA:72:B4:F2:61:79:52:C7:5C:CE:51:6C:DD
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       28B6DEB51682A40E0944C038176899C9F1029978
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa
Signing time:             Mon 14 Aug 2023 07:53:32 +0000
ROA not before:           Mon 14 Aug 2023 07:48:32 +0000
ROA not after:            Mon 12 Aug 2024 07:53:32 +0000
asID:                     140913
IP address blocks:        2602:feda:ae6::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 20:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b6:de:b5:16:82:a4:0e:09:44:c0:38:17:68:99:c9:f1:02:99:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:32 2023 GMT
            Not After : Aug 12 07:53:32 2024 GMT
        Subject: CN=69263875B98E97BA72B4F2617952C75CCE516CDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:cd:d9:46:c8:5a:6e:ac:6d:b7:13:63:e8:
                    66:dc:43:73:bf:69:d8:84:96:aa:8e:58:fd:18:e7:
                    78:0e:4b:7d:b4:b8:7d:f1:f2:ca:ed:bf:47:5e:d8:
                    f0:cf:68:69:f2:9a:02:30:46:6d:33:0d:a3:c8:52:
                    57:d7:44:c3:90:80:5b:9d:ff:18:cd:af:85:a5:f2:
                    0d:06:eb:31:aa:54:93:93:19:b0:45:49:a9:79:83:
                    64:ff:a8:e8:e7:ee:6c:06:71:a9:b8:c9:96:d9:b4:
                    51:ba:1d:c0:42:16:1d:8e:55:f4:58:bb:44:b6:d4:
                    e3:1d:c7:88:bd:38:85:85:32:0e:cf:3b:e7:d3:ba:
                    4b:aa:5a:bb:ff:0e:cb:45:b6:22:2e:a3:b7:24:66:
                    64:71:43:ab:c8:81:2d:51:ec:72:0b:05:5a:1d:4e:
                    26:71:20:80:07:99:74:07:d0:84:02:bd:80:fa:e2:
                    86:2e:98:3e:2c:c5:96:b3:0b:99:4a:4a:c5:3a:bb:
                    1c:cc:49:a5:40:d1:5f:6e:c1:92:86:a1:45:de:13:
                    e7:2f:2a:95:38:0f:d0:c4:d9:7a:99:7b:5a:1c:c6:
                    72:4d:2b:9b:f9:ac:3e:55:b1:3f:56:e4:12:be:28:
                    b2:bd:95:78:42:d9:30:46:ef:ce:76:99:69:e1:f4:
                    b1:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:26:38:75:B9:8E:97:BA:72:B4:F2:61:79:52:C7:5C:CE:51:6C:DD
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313430393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ae6::/47

    Signature Algorithm: sha256WithRSAEncryption
         24:94:94:d6:38:38:6a:5d:89:c4:1b:f7:47:5e:47:c3:9f:8c:
         24:f7:9b:25:c8:3b:46:09:57:3a:72:96:24:45:24:63:d3:fe:
         0d:b7:f0:60:6e:fd:5a:98:2f:42:98:12:94:52:15:ef:1a:5f:
         b0:be:99:74:87:f7:26:58:fb:da:98:18:d6:91:15:51:f2:44:
         5a:6f:e0:ba:5c:61:43:b9:b7:64:f2:d0:24:92:a6:f6:04:af:
         5c:45:f7:b8:2b:ea:0b:a7:f0:9f:c5:9f:e6:78:d7:06:a7:26:
         97:0e:61:a5:92:bf:4b:01:4f:2b:d8:bb:23:0a:ab:81:68:c7:
         9c:91:76:dd:a7:aa:59:78:8e:1a:1f:8b:9e:a3:07:80:61:97:
         c7:8d:cf:07:07:8c:01:d9:67:1b:a9:d4:49:1f:92:d7:71:ac:
         d3:5b:66:1a:8f:13:f6:bb:04:a3:ba:12:88:38:7d:dc:0f:08:
         31:c3:90:3a:29:ca:91:f7:59:dc:37:a5:40:ca:3b:f2:5d:de:
         52:d7:87:3e:6a:89:5c:58:a6:c3:33:6a:3e:e3:1f:0e:a5:79:
         6e:35:68:cd:6d:00:61:19:0e:bc:bb:8b:6e:44:26:b5:a5:af:
         dc:f6:e0:fb:3c:a0:83:15:92:fd:05:7b:dd:1a:7d:36:4e:f7:
         13:88:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:39:51 2024 by rpki-client on console-fra.rpki-client.org