Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa
File:                     323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa (raw, json)
Hash identifier:          oTVRwFNe5Ep18JEM/VxH56QmJe/NlwiJPHxC61zxfCI=
Subject key identifier:   6E:C7:7D:E3:4F:C4:3B:47:AD:3C:59:76:B6:31:2A:6D:C3:FB:C2:8E
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       43AF347DCFEA4793D779D5DBECA902304EA63114
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa
Signing time:             Mon 14 Aug 2023 07:53:33 +0000
ROA not before:           Mon 14 Aug 2023 07:48:33 +0000
ROA not after:            Mon 12 Aug 2024 07:53:33 +0000
asID:                     140727
IP address blocks:        2602:feda:afa::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 18:28:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:af:34:7d:cf:ea:47:93:d7:79:d5:db:ec:a9:02:30:4e:a6:31:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:33 2023 GMT
            Not After : Aug 12 07:53:33 2024 GMT
        Subject: CN=6EC77DE34FC43B47AD3C5976B6312A6DC3FBC28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:ac:df:51:45:86:8c:9a:3d:30:89:57:c6:
                    16:a2:58:8a:cc:1f:b1:d2:c9:60:6b:55:83:dd:62:
                    46:7d:2d:02:4c:03:54:e3:1e:9d:b1:ea:d4:1f:1c:
                    4e:72:84:7b:e3:96:a4:c8:5e:12:2d:7d:6e:54:a8:
                    af:79:2d:ec:f7:31:4e:da:5f:03:79:27:01:60:f7:
                    db:0c:3f:02:51:de:1f:d0:c0:ee:bd:21:25:11:c2:
                    b4:92:0b:07:0b:db:6e:94:aa:03:0b:8a:cc:01:a4:
                    06:39:99:f4:c7:6c:41:48:ec:26:26:6d:a3:39:25:
                    b4:26:f5:f7:0f:43:62:37:5a:e6:d0:c8:d6:fe:e3:
                    23:5f:81:fd:d0:48:b1:5c:d9:33:a0:8c:d7:8d:eb:
                    c8:77:de:4d:36:27:f6:af:74:93:b7:52:68:2d:75:
                    33:ac:0f:37:da:a4:1b:eb:05:54:88:2d:9d:8c:b3:
                    98:3e:9f:30:d7:66:63:19:6f:96:3a:4e:2f:fc:ed:
                    a2:88:a5:b0:b5:0e:4e:ed:c3:69:c8:c0:3b:22:85:
                    fa:81:28:3f:f7:87:4c:81:07:45:e5:19:b4:0b:a8:
                    48:f3:9e:d6:58:23:27:13:44:c6:90:78:32:7d:a6:
                    fe:07:22:da:6c:be:b7:51:1c:0a:00:06:9f:14:1d:
                    e8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C7:7D:E3:4F:C4:3B:47:AD:3C:59:76:B6:31:2A:6D:C3:FB:C2:8E
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166613a3a2f34382d3438203d3e20313430373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:afa::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:62:94:bf:44:40:33:8c:f7:4b:3e:24:da:5f:5d:d8:de:69:
         a1:0a:b0:d1:6e:70:f4:4a:66:44:bd:8b:4e:c3:45:2f:49:78:
         7f:8d:af:c4:c5:f2:cc:7e:dc:ea:b9:63:6a:1b:79:bc:e9:a6:
         d4:21:65:c8:f6:36:38:ba:29:80:e2:4b:99:6f:ca:9d:d0:e0:
         d6:4f:1b:35:cf:22:39:7e:66:0c:b1:67:0c:cd:61:99:0c:22:
         14:c1:c2:be:45:d0:b8:e4:a0:e2:37:ab:6e:30:66:62:4b:ad:
         ca:5f:f6:c4:b6:b1:2f:32:3e:a2:49:86:f9:db:22:71:0a:75:
         6f:f6:e2:62:85:18:06:97:3d:fa:0b:f7:c3:8b:fc:11:44:23:
         5c:f5:53:c1:37:4e:c8:76:b6:9b:e9:74:8a:81:da:f1:06:13:
         82:85:a5:45:90:74:42:b4:85:d2:70:2d:79:d3:f9:f7:e9:d7:
         4c:60:a8:31:79:3b:73:7f:f5:4e:2e:66:31:06:e2:63:01:a9:
         42:30:e2:ea:72:3a:a1:36:66:32:f8:b6:77:53:4d:aa:54:8d:
         96:c5:76:b9:a7:34:40:78:83:b9:32:e8:dc:32:eb:94:05:d4:
         23:46:17:63:04:c3:bf:2b:6d:15:22:08:b5:ab:26:12:87:c2:
         b1:72:ed:17
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUQ680fc/qR5PXedXb7KkCME6mMRQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjMwODE0MDc0ODMzWhcNMjQwODEyMDc1MzMz
WjAzMTEwLwYDVQQDEyg2RUM3N0RFMzRGQzQzQjQ3QUQzQzU5NzZCNjMxMkE2REMz
RkJDMjhFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsASs31FFhoya
PTCJV8YWoliKzB+x0slga1WD3WJGfS0CTANU4x6dserUHxxOcoR745akyF4SLX1u
VKiveS3s9zFO2l8DeScBYPfbDD8CUd4f0MDuvSElEcK0kgsHC9tulKoDC4rMAaQG
OZn0x2xBSOwmJm2jOSW0JvX3D0NiN1rm0MjW/uMjX4H90EixXNkzoIzXjevId95N
Nif2r3STt1JoLXUzrA832qQb6wVUiC2djLOYPp8w12ZjGW+WOk4v/O2iiKWwtQ5O
7cNpyMA7IoX6gSg/94dMgQdF5Rm0C6hI857WWCMnE0TGkHgyfab+ByLabL63URwK
AAafFB3oCwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFG7HfeNPxDtHrTxZdrYxKm3D
+8KOMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6
Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh
NjE2NjYxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNDMwMzczMjM3LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAJgL+2gr6MA0GCSqGSIb3DQEBCwUAA4IBAQC1YpS/REAzjPdLPiTaX13Y
3mmhCrDRbnD0SmZEvYtOw0UvSXh/ja/ExfLMftzquWNqG3m86abUIWXI9jY4uimA
4kuZb8qd0ODWTxs1zyI5fmYMsWcMzWGZDCIUwcK+RdC45KDiN6tuMGZiS63KX/bE
trEvMj6iSYb52yJxCnVv9uJihRgGlz36C/fDi/wRRCNc9VPBN07Idrab6XSKgdrx
BhOChaVFkHRCtIXScC150/n36ddMYKgxeTtzf/VOLmYxBuJjAalCMOLqcjqhNmYy
+LZ3U02qVI2WxXa5pzRAeIO5MujcMuuUBdQjRhdjBMO/K20VIgi1qyYSh8Kxcu0X
-----END CERTIFICATE-----
Generated at Sun May 5 17:20:19 2024 by rpki-client on console-fra.rpki-client.org