Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313431373036.roa
File:                     323630323a666564613a6165363a3a2f34372d3438203d3e20313431373036.roa (raw, json)
Hash identifier:          hKq+bRhLx6wqlIxUrwjhVVKet1BpHP83aRV194j1lpM=
Subject key identifier:   0E:8C:5B:61:0C:AA:FF:0E:8A:2B:BE:0E:C0:D4:68:AA:FD:CE:39:1B
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       30E01645C545C1267323661C9986CFD5AC2B37D1
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313431373036.roa
Signing time:             Mon 14 Aug 2023 07:53:40 +0000
ROA not before:           Mon 14 Aug 2023 07:48:40 +0000
ROA not after:            Mon 12 Aug 2024 07:53:40 +0000
asID:                     141706
IP address blocks:        2602:feda:ae6::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 28 Apr 2024 12:45:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:e0:16:45:c5:45:c1:26:73:23:66:1c:99:86:cf:d5:ac:2b:37:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:40 2023 GMT
            Not After : Aug 12 07:53:40 2024 GMT
        Subject: CN=0E8C5B610CAAFF0E8A2BBE0EC0D468AAFDCE391B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:46:10:85:4e:73:a5:b3:08:8d:9b:6c:94:91:
                    99:8e:35:8b:a8:8b:8d:61:37:1f:0f:65:2d:c5:1b:
                    fc:72:31:41:22:73:f5:54:cf:fb:b0:00:af:f4:06:
                    d5:ad:d1:f2:b7:aa:fc:f8:be:26:8e:ac:e2:83:d6:
                    9f:1e:00:a4:e7:c7:bb:19:33:8d:b2:bb:8a:74:25:
                    27:ea:f3:3d:5e:b0:30:2f:9a:59:33:f7:05:0b:3f:
                    12:34:33:d8:4f:35:5c:aa:d4:2d:9e:db:94:a2:71:
                    74:23:e6:e3:b3:ac:88:2b:bb:7f:cd:4e:e8:3f:1d:
                    75:37:12:99:e8:ce:c6:6c:d9:90:c6:b6:19:80:90:
                    10:5e:75:55:70:70:e3:a8:8e:cb:48:38:9c:5d:77:
                    a0:a2:91:b1:d7:f1:e1:20:cb:fa:12:bf:51:2a:af:
                    d7:29:4e:8d:f7:ff:ab:60:52:4d:6f:df:48:81:4f:
                    16:08:08:cf:bb:80:7c:46:c1:e0:22:5d:6b:13:57:
                    5b:15:ab:17:7d:58:fb:be:39:01:1f:0c:83:20:af:
                    c4:94:fb:a5:b7:83:6f:67:14:80:4f:b3:02:26:19:
                    63:e0:6a:e5:08:2f:4b:18:66:6d:e7:e6:d6:9a:ec:
                    e1:45:cb:65:e8:99:9c:67:a9:96:94:26:27:fe:8d:
                    c7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8C:5B:61:0C:AA:FF:0E:8A:2B:BE:0E:C0:D4:68:AA:FD:CE:39:1B
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313431373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ae6::/47

    Signature Algorithm: sha256WithRSAEncryption
         02:8e:3a:11:14:85:12:fa:fd:0d:b3:1a:2e:f8:08:3e:f0:23:
         c3:fb:66:76:cb:7c:27:b4:aa:e7:1d:00:eb:6c:4d:ed:7d:b4:
         e7:12:bd:03:2e:f6:29:0d:d4:93:aa:71:59:76:e3:c0:82:e8:
         ae:a6:36:15:aa:90:de:d7:05:5a:08:53:4d:cd:15:30:f5:6e:
         1f:92:d5:47:81:13:25:eb:d5:ca:79:b9:a2:bc:68:84:c3:73:
         e1:2a:58:e3:19:9b:52:3e:b7:c9:ff:07:c5:b3:ff:d5:47:49:
         ee:c6:ae:76:77:f5:fa:09:34:98:bc:ba:c0:70:d4:25:03:4b:
         4e:70:7d:a5:33:3e:db:6d:80:4a:d7:9a:da:bc:0a:e5:53:67:
         85:a0:cd:30:6e:26:c7:96:a0:51:9a:56:b0:dd:2a:cb:51:35:
         aa:3c:e4:48:b9:de:fa:9b:c0:03:ac:da:85:a3:74:73:66:0b:
         9c:04:0b:25:0d:7d:5e:6d:9d:6b:8f:53:76:56:34:7f:41:8e:
         62:2c:24:64:2d:8d:13:f5:87:e1:3d:6d:4e:32:f8:e7:b4:9e:
         ce:6b:c8:ea:31:2f:48:52:e3:93:3a:83:1c:76:44:f0:f5:49:
         02:44:99:41:b7:33:bf:69:fc:ba:9a:f5:84:3d:9b:94:98:eb:
         4e:1b:3b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:32:21 2024 by rpki-client on console-ams.rpki-client.org