Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa
File:                     3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa (raw, json)
Hash identifier:          BbP6RwD/6N29W7heV8txXJClv7XByLucN0kgT56AKu8=
Subject key identifier:   F2:6B:A6:D1:AF:29:04:20:B2:56:BE:E8:12:52:28:21:1F:F9:92:E9
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       7B45941124F2311D8F2300C20B4FAAC735646AD9
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa
Signing time:             Mon 14 Aug 2023 07:53:35 +0000
ROA not before:           Mon 14 Aug 2023 07:48:35 +0000
ROA not after:            Mon 12 Aug 2024 07:53:35 +0000
asID:                     46997
IP address blocks:        134.195.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:45:94:11:24:f2:31:1d:8f:23:00:c2:0b:4f:aa:c7:35:64:6a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:35 2023 GMT
            Not After : Aug 12 07:53:35 2024 GMT
        Subject: CN=F26BA6D1AF290420B256BEE8125228211FF992E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:d0:ed:76:2f:e9:45:c3:77:df:c3:f4:c5:
                    8d:25:46:32:ff:dc:f9:d3:08:89:52:f6:d4:a2:3a:
                    26:70:1b:92:81:f8:54:bf:80:e4:64:b0:6b:b4:3a:
                    f3:75:1c:00:80:48:ab:ea:08:ba:38:b9:34:43:46:
                    65:c6:29:ff:9b:06:28:55:25:3c:a2:45:1a:75:44:
                    5f:65:98:01:b0:e2:75:11:e2:f1:97:c0:45:49:45:
                    56:f2:76:28:47:f4:e3:ed:89:ef:3d:64:c1:6c:e1:
                    86:57:45:ee:0b:7a:33:13:f3:a4:91:0d:65:e7:4e:
                    f7:88:b4:2c:9b:8a:4b:ac:9d:06:2b:bd:2c:ac:33:
                    d4:06:b0:b0:85:34:46:9a:29:a4:ad:ea:80:2f:69:
                    bb:08:63:17:2e:62:bf:e9:db:73:48:c9:ed:33:03:
                    85:0c:47:ff:57:9e:a3:a5:29:08:21:e8:2f:a4:99:
                    fa:b8:de:fd:39:6a:19:8b:da:05:19:94:25:e5:22:
                    95:78:b4:6a:f5:1f:58:1b:7c:bd:7e:da:16:3e:70:
                    de:d6:56:3f:86:aa:79:f1:b2:95:5c:a2:55:07:8b:
                    f4:74:bb:ae:11:3e:82:5c:99:41:be:de:11:b7:94:
                    43:dc:ab:14:c7:9c:5b:47:26:9c:2f:ea:e9:f3:ae:
                    42:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6B:A6:D1:AF:29:04:20:B2:56:BE:E8:12:52:28:21:1F:F9:92:E9
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:b2:04:46:fa:cb:81:77:53:1f:19:48:85:17:3f:7d:e8:6e:
         2e:dd:4b:2e:3b:9a:6b:e5:16:71:18:ea:d2:07:31:6d:36:8f:
         fb:74:0a:e1:26:97:e3:36:69:9f:e7:89:ad:fd:be:ae:c9:51:
         47:78:d6:14:8b:ab:54:74:58:03:58:7c:4f:54:89:b1:fc:5e:
         a6:43:03:1b:40:35:71:2c:7a:de:cd:00:1b:24:fa:2b:d6:f3:
         53:1a:a7:9c:39:b1:aa:d3:59:52:f4:f6:3f:c5:9c:c8:bf:9c:
         0b:9c:0d:9f:36:2b:c3:88:72:df:9f:2b:29:53:d1:cc:7f:2f:
         55:71:a0:3e:f3:a4:43:ba:31:85:56:81:e3:d8:8f:41:d1:bd:
         d2:72:62:0b:0a:fa:62:5e:17:55:1d:44:03:60:78:f7:54:70:
         51:f2:ac:ce:cd:1a:ce:c4:1f:27:ee:aa:01:41:f8:43:4a:c5:
         d7:71:d6:3b:07:06:13:bf:fa:0e:02:42:8e:6b:ad:c8:61:a6:
         fb:be:5a:9b:d4:ac:36:7a:cf:39:a8:aa:5c:70:fa:cb:07:23:
         e5:3b:ba:95:7d:39:7f:91:70:aa:7f:df:98:95:01:90:74:bb:
         92:29:ac:7b:ff:33:bf:62:c1:10:8e:f1:d5:13:4f:51:a7:31:
         8f:71:5b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:30:34 2024 by rpki-client on console-fra.rpki-client.org