Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6433303a3a2f34382d3438203d3e20323132323932.roa
File:                     323630323a666564613a6433303a3a2f34382d3438203d3e20323132323932.roa (raw, json)
Hash identifier:          TXbz+h+yttvdKvuxA0UWLe62cDD2NHo7u6UUodAKlxQ=
Subject key identifier:   5D:AB:AF:27:9D:E6:1F:05:9D:82:3C:1D:04:11:89:26:1A:BB:1A:92
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       05568C5C294479C0B4015189A077FA6C3360572D
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6433303a3a2f34382d3438203d3e20323132323932.roa
Signing time:             Mon 14 Aug 2023 07:53:33 +0000
ROA not before:           Mon 14 Aug 2023 07:48:33 +0000
ROA not after:            Mon 12 Aug 2024 07:53:33 +0000
asID:                     212292
IP address blocks:        2602:feda:d30::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 04 May 2024 15:49:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:56:8c:5c:29:44:79:c0:b4:01:51:89:a0:77:fa:6c:33:60:57:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:33 2023 GMT
            Not After : Aug 12 07:53:33 2024 GMT
        Subject: CN=5DABAF279DE61F059D823C1D041189261ABB1A92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:58:20:48:44:e5:70:38:ef:7f:ab:27:70:76:
                    be:46:9b:b9:bf:cd:57:93:c4:75:38:6a:1f:d1:f6:
                    07:01:88:bf:8a:1f:45:62:47:a0:a2:95:23:67:64:
                    68:1c:24:2a:ba:a5:d1:bf:1b:f5:0a:25:b8:86:b1:
                    36:1f:f2:e0:d0:aa:cb:56:45:41:09:79:95:b9:d4:
                    f3:a2:93:84:10:e4:72:da:88:ef:3c:43:53:40:dd:
                    b6:e2:c7:74:a5:68:6b:34:15:02:a3:ad:59:7f:71:
                    f5:40:a5:a4:a2:f5:80:d3:65:70:3e:9e:4d:99:ac:
                    2d:26:bf:bf:17:95:35:6a:30:55:f6:8a:d6:b8:19:
                    49:30:df:c4:f9:b9:06:1c:d5:cd:c1:f2:d7:97:3b:
                    3e:59:96:2d:3a:c0:e4:bb:96:c4:5a:2b:0a:62:95:
                    cd:94:de:e9:63:d9:2b:6e:99:ba:51:06:be:cc:7a:
                    eb:6e:79:f3:59:ad:02:e6:1b:ba:de:9c:f1:9d:80:
                    6d:fe:72:74:68:b6:7c:50:8a:aa:c8:e8:35:e5:6e:
                    9e:b5:09:55:1e:06:0d:c6:c3:ab:90:47:99:54:11:
                    2c:6f:af:3e:89:af:35:69:9b:80:4f:7a:7e:6d:c2:
                    3a:6e:c1:d1:13:59:72:d7:dc:6e:22:35:50:b8:7b:
                    16:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AB:AF:27:9D:E6:1F:05:9D:82:3C:1D:04:11:89:26:1A:BB:1A:92
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6433303a3a2f34382d3438203d3e20323132323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:d30::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:d1:ad:46:db:e4:ba:67:fb:af:3c:47:6b:45:d2:0d:8a:40:
         61:c9:e6:31:64:c2:75:c4:57:32:5d:5a:81:59:8c:d3:7b:18:
         93:b8:ea:5a:d4:61:03:55:57:e9:6d:08:3b:28:2c:cc:af:15:
         09:09:9e:a6:16:85:38:c2:52:5a:85:f6:9b:c3:1d:06:c3:a0:
         c0:77:51:73:e6:6a:e4:5d:45:33:a8:10:6d:07:a6:93:9d:76:
         31:67:bc:a8:e2:84:60:05:ec:04:ff:03:b0:d2:ed:60:85:3f:
         9c:60:aa:3f:1e:18:a9:e5:0b:be:55:fa:3d:af:98:e0:e6:24:
         78:09:4a:72:a9:f5:21:c2:86:87:a0:14:e8:bb:23:d3:1a:38:
         b7:b9:f3:41:ed:1a:f8:6f:b4:fe:54:71:40:3f:0b:6f:79:42:
         64:e4:d0:fd:9a:63:09:f6:fd:f8:fa:b2:13:03:72:eb:31:c6:
         e7:f7:fd:d0:5a:e4:8e:3c:62:78:7f:9c:22:86:49:f8:66:4a:
         d2:1d:c1:78:be:2a:48:28:76:77:6d:43:47:6a:b3:4b:97:f5:
         02:0a:c6:f2:b1:ad:ab:0d:75:c8:ad:f0:57:3c:87:cb:04:44:
         65:b5:0e:9a:cf:27:51:4b:03:db:82:db:7e:33:79:f2:b4:40:
         48:f2:fe:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:58:04 2024 by rpki-client on console-ams.rpki-client.org