Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6533303a3a2f34342d3438203d3e20313437303238.roa
File:                     323630323a666564613a6533303a3a2f34342d3438203d3e20313437303238.roa (raw, json)
Hash identifier:          nvUmMXZNqlu1pWcisk+TVg3lxGDggXPe53NsHTAfMlo=
Subject key identifier:   B9:96:82:18:B4:AC:55:99:FC:7F:89:5B:93:7F:E6:50:7A:B9:0E:6A
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       52FA10295DE037FA4706E71D5308473FBBF9D076
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6533303a3a2f34342d3438203d3e20313437303238.roa
Signing time:             Mon 15 Jul 2024 08:50:13 +0000
ROA not before:           Mon 15 Jul 2024 08:45:13 +0000
ROA not after:            Mon 14 Jul 2025 08:50:13 +0000
asID:                     147028
IP address blocks:        2602:feda:e30::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fa:10:29:5d:e0:37:fa:47:06:e7:1d:53:08:47:3f:bb:f9:d0:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:13 2024 GMT
            Not After : Jul 14 08:50:13 2025 GMT
        Subject: CN=B9968218B4AC5599FC7F895B937FE6507AB90E6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:9c:5b:97:5a:25:64:a3:ea:16:63:74:e4:
                    c4:d6:88:b0:d6:46:df:4d:f2:28:18:4d:dc:75:ae:
                    63:b6:29:4d:37:46:2c:98:66:c8:3c:62:34:37:19:
                    c7:4f:cf:26:d3:ef:46:3b:bb:3f:44:ee:06:ea:f6:
                    6b:a5:b8:be:e6:fd:aa:5d:a0:15:74:5d:a0:2c:19:
                    15:dd:a6:ba:37:4b:15:55:2f:4f:e4:56:e8:f1:49:
                    d1:6f:4e:9a:f5:73:2e:29:47:25:a2:39:51:e2:66:
                    05:e5:bd:97:5e:25:6d:32:78:09:8a:1c:92:7f:1d:
                    83:55:30:ed:b0:06:6e:a2:d1:c6:d5:7b:c0:7c:ca:
                    ed:7b:fe:12:5c:42:b7:95:19:65:31:e4:c6:50:23:
                    89:87:f3:c9:2e:a9:32:ca:bf:a8:7e:dd:f8:88:f3:
                    c5:6c:06:1c:49:3a:fe:25:fd:e6:6a:ef:24:20:da:
                    7c:d6:b6:1f:42:88:45:1b:c2:9b:78:2d:13:4e:22:
                    f7:f9:e1:33:e1:98:31:1b:32:56:59:f4:14:4c:0a:
                    c1:d9:89:f7:5f:84:7a:db:da:e0:63:9c:15:4d:10:
                    df:12:32:3b:b7:44:08:73:6d:49:97:45:95:67:41:
                    f1:1c:bf:2a:14:31:c8:46:dc:b5:68:41:d6:f4:94:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:96:82:18:B4:AC:55:99:FC:7F:89:5B:93:7F:E6:50:7A:B9:0E:6A
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6533303a3a2f34342d3438203d3e20313437303238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:e30::/44

    Signature Algorithm: sha256WithRSAEncryption
         bf:7f:ee:3f:c4:c3:c7:b6:0f:d5:74:43:7c:59:2d:ae:9e:ad:
         1f:b3:fc:fb:f2:92:a5:4d:ad:66:d5:bb:e0:5a:cd:67:93:bb:
         2d:c4:41:7a:52:5a:1d:6a:ca:e8:0a:f8:a7:19:ad:51:58:73:
         52:c2:a2:90:46:b1:b3:f3:22:75:74:6c:7c:97:1f:bf:14:59:
         a4:33:85:df:23:25:a3:b1:0e:06:e7:da:8b:06:19:66:99:c9:
         6e:a2:c5:b8:ee:ac:f6:15:37:f3:82:55:41:08:c3:f3:7c:c5:
         0d:c9:37:4b:3b:34:fc:3b:05:14:8b:28:63:79:86:42:e6:ac:
         7a:26:40:02:e9:13:e9:c9:22:16:5c:4a:0d:80:f6:26:99:0b:
         0a:b2:10:c3:38:7c:5d:7a:40:e8:21:02:7c:c2:fb:25:67:6d:
         0d:d4:11:da:fd:47:c4:6d:0e:29:9d:db:04:f7:cb:fa:e8:23:
         5a:e2:57:54:ce:a5:b5:e0:04:3a:e8:0c:4e:91:f7:60:15:7b:
         bb:aa:7c:31:2a:0c:09:3f:c2:6f:81:ee:b3:e2:38:95:cb:b5:
         27:95:c3:f0:a3:31:6d:84:69:3e:2c:b2:3d:14:95:83:9b:28:
         90:8d:51:8e:d2:38:45:d3:56:df:e4:b0:a6:3e:52:66:86:6b:
         47:2d:ba:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:37 2024 by rpki-client on console-fra.rpki-client.org