Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6339303a3a2f34342d3634203d3e20323132333630.roa
File:                     323630323a666564613a6339303a3a2f34342d3634203d3e20323132333630.roa (raw, json)
Hash identifier:          UhqxeDvmY7MrCmWWj75CiIgxQeJuYn/xL+6fVRySbKA=
Subject key identifier:   CF:3D:93:C7:B0:ED:A2:2A:01:CE:6D:8A:02:8C:C7:21:EE:7F:9D:7F
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       5CBF5ED6F8B08A449BB82DBC908D42B352D4A072
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6339303a3a2f34342d3634203d3e20323132333630.roa
Signing time:             Mon 14 Aug 2023 07:53:37 +0000
ROA not before:           Mon 14 Aug 2023 07:48:37 +0000
ROA not after:            Mon 12 Aug 2024 07:53:37 +0000
asID:                     212360
IP address blocks:        2602:feda:c90::/44 maxlen: 64

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 03 May 2024 20:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:bf:5e:d6:f8:b0:8a:44:9b:b8:2d:bc:90:8d:42:b3:52:d4:a0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:37 2023 GMT
            Not After : Aug 12 07:53:37 2024 GMT
        Subject: CN=CF3D93C7B0EDA22A01CE6D8A028CC721EE7F9D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:66:a3:de:2b:1e:c1:50:95:72:9e:64:5c:f3:
                    31:51:b8:d1:af:3d:9f:6c:8b:43:d7:e8:04:06:1c:
                    fe:33:08:10:b5:cc:35:64:91:bf:cd:21:10:ad:72:
                    77:b0:72:ec:a1:b2:2c:38:63:0a:b0:21:44:5e:fe:
                    42:32:96:19:bb:90:f3:a3:2a:38:f5:99:4c:41:6a:
                    5b:1a:8c:f5:ba:88:1d:42:dc:53:3c:2b:68:df:69:
                    9f:a8:5a:93:43:ba:bf:b6:c7:a6:14:5c:68:07:cc:
                    29:42:28:45:83:70:54:ee:84:d4:7a:c8:67:d3:b5:
                    15:b2:89:f1:21:91:28:b7:ec:8b:4a:65:21:78:aa:
                    0b:69:0d:08:69:fc:e8:e3:df:57:15:0d:40:b9:82:
                    dd:6d:1d:22:2b:22:a7:64:b6:00:4a:52:b1:b2:b8:
                    25:1b:ad:9d:d8:c9:58:35:af:9c:93:9f:a3:99:6e:
                    e3:c7:45:5e:7e:c0:99:50:45:f0:70:80:de:61:78:
                    d2:da:c4:9d:60:3b:4c:e3:5c:46:50:30:7d:d1:4e:
                    c7:dd:f0:20:a8:43:ac:57:e4:94:82:7f:31:9b:a9:
                    c6:e2:e2:c8:b1:3e:5d:34:fa:18:73:44:1f:e8:d3:
                    42:a0:b0:cf:c2:c6:e4:28:3e:0f:bd:be:c2:77:04:
                    1e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3D:93:C7:B0:ED:A2:2A:01:CE:6D:8A:02:8C:C7:21:EE:7F:9D:7F
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6339303a3a2f34342d3634203d3e20323132333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:c90::/44

    Signature Algorithm: sha256WithRSAEncryption
         59:ea:c8:47:f0:fe:aa:af:dc:a2:a3:49:19:17:7c:58:5f:e1:
         6a:a9:4b:3e:60:59:4e:af:ba:c4:8c:bd:2f:b8:ce:38:26:18:
         fa:b0:6c:c9:3d:b8:65:0a:5e:43:18:c8:ea:f5:db:5d:49:01:
         c9:d1:0d:f1:3f:6e:29:6c:32:6b:e2:09:1f:c3:b3:a0:15:72:
         e1:cf:8f:ed:d2:46:b8:9b:4c:4c:00:1a:82:c1:4f:d4:e2:6d:
         78:43:59:1c:b3:c3:4d:78:6f:bf:25:4d:e6:84:b6:35:f2:b2:
         56:02:5e:02:ad:b5:9f:db:61:ba:30:92:91:d9:6b:2c:01:b6:
         3e:52:24:cc:00:b8:62:87:f7:c1:c8:3e:cd:50:1f:19:1f:86:
         1c:f7:2e:46:d9:87:47:a5:c9:97:e8:10:26:f7:c1:56:a3:61:
         88:52:4d:b8:4c:10:ca:8b:10:be:19:35:7c:40:0c:5c:83:c7:
         45:1f:65:46:7d:0c:f6:91:f1:80:2b:a0:be:88:5c:ff:b2:03:
         8f:fc:1b:8b:91:b2:0c:8d:e9:75:c3:b6:ea:b2:88:d8:49:6c:
         17:83:5b:3f:7f:d6:fa:5e:f2:e7:1b:49:51:5c:aa:c6:25:6e:
         00:0b:30:2b:46:7f:8a:6b:52:7d:65:20:88:ae:87:d5:10:93:
         1d:c2:31:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:39:51 2024 by rpki-client on console-fra.rpki-client.org