Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa
File:                     3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa (raw, json)
Hash identifier:          yDljuuu9g+WLLzNK82Z86qE5Ar02bNyKw8qyXmm3Rcg=
Subject key identifier:   0B:EF:C2:57:85:98:CE:14:61:AB:28:93:5F:12:E7:52:C2:F0:83:92
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       13C141FF43D43F43C8CC7D3047CC9A995B8B1770
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa
Signing time:             Mon 15 Jul 2024 08:50:05 +0000
ROA not before:           Mon 15 Jul 2024 08:45:05 +0000
ROA not after:            Mon 14 Jul 2025 08:50:05 +0000
asID:                     46997
IP address blocks:        134.195.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:c1:41:ff:43:d4:3f:43:c8:cc:7d:30:47:cc:9a:99:5b:8b:17:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:05 2024 GMT
            Not After : Jul 14 08:50:05 2025 GMT
        Subject: CN=0BEFC2578598CE1461AB28935F12E752C2F08392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d0:65:b8:36:54:e9:a1:6d:26:85:02:46:3a:
                    ed:50:29:3e:ad:00:c0:84:da:63:92:3a:26:89:dd:
                    5f:60:da:1c:0a:8c:8c:13:94:fe:07:38:ae:55:c6:
                    c3:44:f9:8e:d6:0d:ee:9c:31:af:87:14:26:60:8e:
                    ed:90:a8:43:6d:ee:49:50:b5:a0:f5:01:a8:d1:fb:
                    72:7f:d4:7a:34:dc:9c:f7:6b:10:04:b0:6f:9e:6f:
                    0c:a3:08:58:76:46:ba:f7:01:89:67:95:68:a9:f4:
                    55:3a:ac:38:0e:b1:eb:2f:d4:20:71:eb:e4:43:47:
                    af:b0:81:05:23:e9:8e:cf:ff:b1:a9:ea:b5:17:b4:
                    ad:c6:f0:29:32:2b:e7:04:20:58:2c:b9:56:c3:46:
                    28:7d:68:83:a6:98:cc:d0:00:b7:9a:83:71:0f:15:
                    7c:cd:03:c0:bf:f4:81:ac:a9:7e:77:b9:29:9d:6d:
                    20:94:a9:86:8f:2d:cc:4b:c1:a1:3e:f6:de:3d:7e:
                    cb:47:57:f8:77:86:1d:cf:0c:30:db:e6:3b:35:9d:
                    31:89:bd:55:63:cb:f8:29:4e:16:fc:d3:e6:83:84:
                    64:ef:69:8d:37:4b:73:11:f1:15:0b:66:aa:09:34:
                    ab:89:3a:f7:fe:29:c2:3a:86:7a:40:82:ad:be:4e:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EF:C2:57:85:98:CE:14:61:AB:28:93:5F:12:E7:52:C2:F0:83:92
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:96:d2:17:ca:29:44:7f:96:d3:ed:5e:3e:ad:12:d5:ed:0f:
         42:b6:64:57:6e:7c:30:3e:c7:c7:40:63:4c:50:ea:a2:e5:47:
         33:ce:da:8c:46:3d:2f:b5:84:ee:26:ee:f4:1c:9e:57:55:bd:
         5c:a0:15:0c:ca:7e:0e:ef:b1:6f:89:38:33:43:b7:36:56:e3:
         94:3e:c2:55:12:25:1d:21:99:d6:4e:a2:26:88:64:26:83:d3:
         f1:b3:17:6e:71:7e:31:06:bf:09:99:df:d4:6f:5d:08:a3:b8:
         77:3e:2f:3a:31:48:6a:c4:83:4c:14:0f:71:26:f7:2b:3a:fa:
         6d:8d:8d:64:5f:78:a5:1f:89:7e:95:83:59:48:57:2a:ff:c6:
         c0:19:22:b5:30:7c:46:df:02:cd:c3:c8:b2:d7:44:78:5d:62:
         98:09:ff:2b:a3:ef:53:b8:f6:29:f0:d5:81:e7:9a:0d:48:23:
         2f:29:80:24:18:0a:0a:50:61:c3:7d:21:63:f8:31:d8:2f:f2:
         fe:ee:2d:9e:af:a2:8b:07:5e:77:8e:ef:94:f9:dc:e2:08:7e:
         58:d3:f4:1b:e1:3a:dd:fb:41:d3:1e:59:ee:4a:c3:bb:41:43:
         06:d0:20:cc:10:7e:07:35:44:07:76:2c:2d:99:5d:cd:37:12:
         a6:3a:23:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:02 2024 by rpki-client on console-fra.rpki-client.org