Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa
File:                     3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa (raw, json)
Hash identifier:          4kKU8hjzSOtqoFNThdYnOIvGYJf+B/A0c4bRTHIduc8=
Subject key identifier:   FB:5B:CC:51:3B:39:58:CF:AF:F3:B2:4E:42:30:09:DF:82:11:C9:C0
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       056A4D2971939C9F70D3ACB658324B1A2DF6AE1F
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa
Signing time:             Mon 14 Aug 2023 07:53:34 +0000
ROA not before:           Mon 14 Aug 2023 07:48:34 +0000
ROA not after:            Mon 12 Aug 2024 07:53:34 +0000
asID:                     396982
IP address blocks:        134.195.100.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Apr 2024 17:33:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:6a:4d:29:71:93:9c:9f:70:d3:ac:b6:58:32:4b:1a:2d:f6:ae:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:34 2023 GMT
            Not After : Aug 12 07:53:34 2024 GMT
        Subject: CN=FB5BCC513B3958CFAFF3B24E423009DF8211C9C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d7:28:7f:95:be:6e:97:be:85:d0:09:6e:72:
                    63:c2:57:c2:70:f3:e1:49:18:de:6d:47:0b:4d:be:
                    7d:72:0b:5a:9e:5c:17:10:17:00:af:51:84:bb:dc:
                    a4:16:bf:50:04:71:7f:0d:89:5d:7b:96:09:b2:36:
                    8e:61:2d:8f:d0:3f:5d:d5:d8:e7:f4:d1:15:35:87:
                    cb:3f:41:5b:a9:42:14:2c:26:1b:b5:e5:19:79:46:
                    8f:a6:29:aa:f5:4a:b9:3f:82:6b:79:29:7c:0a:e8:
                    71:91:6b:58:2f:26:00:f3:ea:56:3b:62:d8:8f:cd:
                    fd:15:26:61:03:61:22:15:70:e3:d1:65:3d:9f:dd:
                    3f:55:ba:46:2b:26:2b:93:91:d8:de:b3:f5:54:3a:
                    48:bd:19:f4:11:34:1f:26:33:f9:1c:73:29:0b:3b:
                    b8:4f:6c:7e:05:c4:00:a8:a6:2f:7d:79:d7:08:9f:
                    9a:2c:0a:57:15:82:00:9e:3f:a4:34:70:4d:94:fc:
                    46:73:90:09:fe:81:ab:f9:e3:ea:4f:56:1e:eb:63:
                    82:43:cb:5c:1a:e3:41:55:97:25:61:aa:1e:e4:f9:
                    54:e5:74:33:13:c8:c0:14:c0:75:0f:b8:0c:51:2c:
                    89:99:09:fd:8c:ad:3a:d3:cd:45:21:48:24:2e:c8:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:5B:CC:51:3B:39:58:CF:AF:F3:B2:4E:42:30:09:DF:82:11:C9:C0
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3233203d3e20333936393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:0f:bd:eb:a1:d9:86:23:50:f5:aa:da:6d:4d:df:2c:f9:fb:
         1c:d9:95:ba:b6:a8:89:55:63:37:14:47:c0:07:a3:ad:5a:29:
         6a:57:dd:b5:4d:69:5e:8e:01:d4:a6:77:2e:2e:21:d8:13:ee:
         c0:cc:bc:4e:8a:e2:86:53:fb:c7:da:56:81:60:78:56:d2:9c:
         bb:97:39:3c:f8:53:df:2e:e9:65:fc:43:f1:83:4d:01:b6:62:
         8f:9a:21:1e:b5:29:c9:ef:aa:18:84:ff:43:18:a3:6f:6d:5b:
         35:4b:c4:6d:32:95:69:e1:ab:9f:9a:e8:4c:01:55:f6:32:d4:
         e0:20:06:ef:bd:c6:e6:f2:db:f6:5d:8d:9c:92:5b:17:5c:57:
         54:15:20:0e:9a:5d:a0:45:19:dd:d8:a8:fa:b4:8f:c4:e7:7a:
         05:ce:bf:bc:d2:34:04:69:0e:40:3e:da:ea:63:1c:48:fd:be:
         d3:c2:71:ac:88:4c:56:64:c7:e5:79:18:bf:14:0a:69:cf:89:
         7d:e1:42:b4:09:56:f4:83:c0:44:d4:39:0c:ef:c0:ad:17:48:
         d0:cb:1f:fc:f4:db:3b:74:b8:86:61:19:b6:11:4e:74:6b:81:
         41:e1:e3:a4:1b:c8:f5:e3:18:6c:dd:7f:d8:fa:52:17:a6:f5:
         35:a6:19:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 16:11:01 2024 by rpki-client on console-ams.rpki-client.org