Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e203338313733.roa
File:                     323630323a666564613a6265303a3a2f34342d3438203d3e203338313733.roa (raw, json)
Hash identifier:          a3YgJDONw/DoI0o4gNYE+f7OCDt6DIZEy/a2JaB3zTI=
Subject key identifier:   E4:49:32:BA:00:5A:93:58:E8:C9:4C:34:9A:74:E4:7F:F8:9F:1B:4A
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       227BA5229A9EA4FB02D39AC22B6D7F9F248F00CF
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e203338313733.roa
Signing time:             Mon 14 Aug 2023 07:53:31 +0000
ROA not before:           Mon 14 Aug 2023 07:48:31 +0000
ROA not after:            Mon 12 Aug 2024 07:53:31 +0000
asID:                     38173
IP address blocks:        2602:feda:be0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 00:53:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:7b:a5:22:9a:9e:a4:fb:02:d3:9a:c2:2b:6d:7f:9f:24:8f:00:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:31 2023 GMT
            Not After : Aug 12 07:53:31 2024 GMT
        Subject: CN=E44932BA005A9358E8C94C349A74E47FF89F1B4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:53:cb:f7:9c:be:3e:23:18:1f:2e:1d:f5:c6:
                    65:50:26:08:a0:81:74:9a:06:78:c4:cc:41:ad:8c:
                    09:a2:de:9a:0e:56:4b:69:43:73:38:38:1e:17:c5:
                    de:09:c0:28:f1:78:df:f7:bd:da:ca:f2:16:60:de:
                    b9:a6:5a:24:26:98:0f:80:dd:4b:5b:96:50:22:d9:
                    4c:fd:8c:23:6e:aa:2e:53:57:67:08:70:3e:21:d5:
                    77:e4:34:98:fa:b6:81:62:14:92:41:84:0e:2d:92:
                    e8:d6:c2:84:0a:38:9b:35:df:97:d4:dd:fd:09:e6:
                    c1:c8:07:c3:c1:8f:b7:a5:61:16:1c:8b:92:31:0e:
                    67:74:eb:9e:da:36:3f:38:03:34:81:e9:bb:87:a2:
                    ec:bf:9a:86:47:4e:75:da:d9:e4:d5:a8:b7:16:4c:
                    56:6d:f4:c0:be:13:17:9e:55:c3:26:7c:93:a8:a8:
                    7b:fe:30:88:cc:86:a9:35:d8:93:24:3d:ea:3f:74:
                    68:fb:08:70:21:af:a8:c0:9e:67:a7:d4:b2:0f:a8:
                    01:b3:16:db:f9:01:32:c7:79:f6:7e:50:4e:73:48:
                    e9:1e:75:7a:6a:a0:5e:ac:82:ca:6c:dc:ab:0d:48:
                    0f:12:4f:80:d1:a6:38:1f:4d:6a:14:6c:da:f1:0b:
                    83:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:49:32:BA:00:5A:93:58:E8:C9:4C:34:9A:74:E4:7F:F8:9F:1B:4A
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e203338313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:be0::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:a9:f5:37:4e:37:15:22:cf:a5:2c:40:37:18:c1:24:52:34:
         86:0c:e3:06:21:0f:35:43:5d:d1:3e:af:3c:3e:34:03:c4:84:
         cd:c4:fe:3c:45:8e:56:76:56:41:8b:f6:3f:cb:3a:b7:53:d8:
         47:c9:16:77:9c:a8:f6:e6:67:e8:75:92:5c:71:a9:3c:f0:ca:
         87:04:3f:f6:ab:34:7c:93:26:af:e7:80:6c:6a:c6:e1:05:41:
         a9:49:55:39:05:57:f2:b8:fe:56:20:c5:ca:a5:d5:f3:7e:58:
         ea:81:0e:7a:17:db:b7:9f:96:23:20:b4:0e:98:60:27:c9:5d:
         09:50:19:f2:b4:16:8a:42:f5:dd:c1:fe:03:d2:90:e0:63:7d:
         50:c3:87:b4:86:22:31:3e:c7:a7:3e:0f:b1:e8:3f:0a:63:16:
         e3:87:3e:0d:9d:ce:7b:36:c9:5a:57:61:15:18:3b:85:d3:f5:
         2e:14:33:a0:f2:58:a1:90:c5:59:d1:dc:37:d7:69:a0:e6:b8:
         3e:62:bf:18:01:1f:40:08:c2:92:7b:aa:c9:a4:e8:ac:26:8e:
         88:70:f0:98:ee:58:a4:af:a1:14:d5:d6:ef:02:a0:87:be:a1:
         1b:8c:4d:d8:f1:23:03:e2:69:0f:92:02:8d:03:78:86:a9:92:
         91:d9:6c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:51:50 2024 by rpki-client on console-ams.rpki-client.org