Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166373a3a2f34382d3438203d3e20313338393139.roa
File:                     323630323a666564613a6166373a3a2f34382d3438203d3e20313338393139.roa (raw, json)
Hash identifier:          +zQjdgXiAY6D7yqxg79/2j7JpaysoqX7r0mMK2PGFQw=
Subject key identifier:   81:77:58:99:2D:D3:4B:35:C8:2F:8B:05:12:81:5D:55:14:8B:B1:BD
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       62B7882E9FECEF5CE60CC10AB47E9C15066B629A
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166373a3a2f34382d3438203d3e20313338393139.roa
Signing time:             Mon 14 Aug 2023 07:53:42 +0000
ROA not before:           Mon 14 Aug 2023 07:48:42 +0000
ROA not after:            Mon 12 Aug 2024 07:53:42 +0000
asID:                     138919
IP address blocks:        2602:feda:af7::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 20:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:b7:88:2e:9f:ec:ef:5c:e6:0c:c1:0a:b4:7e:9c:15:06:6b:62:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:42 2023 GMT
            Not After : Aug 12 07:53:42 2024 GMT
        Subject: CN=817758992DD34B35C82F8B0512815D55148BB1BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a0:eb:c2:0f:69:67:6d:1a:d6:6b:be:55:26:
                    b1:9e:90:e3:08:cc:4c:6c:ec:2d:56:3c:cd:cf:9d:
                    a2:31:3a:15:04:0c:e8:2f:48:6e:4c:e4:e3:2b:97:
                    f3:69:68:a3:6c:f7:db:2b:19:38:c8:2f:b6:ba:b4:
                    3e:96:47:db:5a:23:6b:83:e7:00:e2:d5:c0:85:53:
                    5e:9a:f4:87:21:20:e7:65:8f:01:57:51:67:76:5f:
                    e9:08:3e:15:0b:ca:ee:bf:37:1f:14:64:e9:d8:dd:
                    a0:fc:f7:72:b0:ed:e0:ba:95:08:f9:13:1c:c7:52:
                    4a:1e:d9:7a:5c:ec:cf:ac:96:c3:20:79:6b:ef:35:
                    0b:9a:90:b4:02:ec:33:79:bd:05:71:e5:53:10:ed:
                    e4:dd:56:2b:fb:db:49:96:b8:cf:5e:8a:20:84:ea:
                    c6:5c:13:c7:de:73:af:7d:c9:9f:ea:9c:39:c0:e5:
                    e0:71:25:de:ca:d9:4c:b7:d2:95:68:95:a4:86:85:
                    ec:51:fa:ed:61:11:e2:3b:fa:ba:1c:d2:98:cb:ae:
                    a3:96:e2:38:57:1b:a0:fb:1b:0c:86:48:ac:90:e2:
                    c8:24:9a:2f:ac:bb:31:b0:ac:53:aa:2a:21:f8:97:
                    58:77:2a:16:65:71:08:f9:7e:c3:1b:5e:28:90:c2:
                    3f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:77:58:99:2D:D3:4B:35:C8:2F:8B:05:12:81:5D:55:14:8B:B1:BD
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166373a3a2f34382d3438203d3e20313338393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:af7::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:59:b1:ee:d1:cc:96:7d:83:26:b9:4e:42:aa:ef:83:e0:85:
         0a:fc:eb:97:cc:94:1b:12:6d:2f:e0:26:06:cb:82:89:39:4c:
         54:69:e4:c5:33:cd:66:7b:e3:2c:d5:4e:d1:06:43:c0:3f:d5:
         41:73:5c:23:26:28:13:e7:53:32:30:b9:af:71:76:89:8e:b6:
         37:59:9d:ea:57:4d:51:19:2d:3e:26:7f:24:77:58:da:15:1e:
         21:ae:c0:98:9b:34:c2:e1:b0:be:ff:e0:6a:10:54:55:1c:96:
         4d:9c:f8:64:e9:b4:7a:fa:be:b8:ae:7f:1a:8d:0d:8f:8e:12:
         f8:e5:7c:23:27:36:2b:13:20:19:97:22:9a:28:e5:6d:15:e6:
         e7:ec:25:50:77:0d:d5:e5:b5:b5:6e:45:4c:a2:e8:62:dd:e2:
         2a:49:5d:69:3a:d1:89:01:74:9a:4f:df:4c:52:d9:05:0b:72:
         13:7f:e6:0f:5d:51:d6:fc:ee:74:60:11:cb:4a:3b:dc:63:54:
         77:f8:85:80:f5:7e:79:29:90:4c:ed:41:a8:98:c1:18:9f:f2:
         2d:64:b1:ad:d2:f6:98:0a:e3:b5:2b:a9:41:8e:8f:86:6f:69:
         42:a9:db:8f:2e:37:63:c6:42:2e:34:18:98:24:19:e6:c9:89:
         19:ab:0c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:39:51 2024 by rpki-client on console-fra.rpki-client.org