Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e20393933.roa
File:                     3133342e3139352e3130302e302f32332d3234203d3e20393933.roa (raw, json)
Hash identifier:          EMx8t7uSCC027DKHAJVhws+cqkXDBMfABwb0sGQ7zes=
Subject key identifier:   CE:3C:22:FF:84:A2:21:45:E4:97:50:9F:8D:97:7F:BC:7C:42:30:E6
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       75A6B317BC4B2CB8A9CE1354A493DACF9CE5AA33
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e20393933.roa
Signing time:             Thu 19 Oct 2023 02:21:17 +0000
ROA not before:           Thu 19 Oct 2023 02:16:17 +0000
ROA not after:            Thu 17 Oct 2024 02:21:17 +0000
asID:                     993
IP address blocks:        134.195.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a6:b3:17:bc:4b:2c:b8:a9:ce:13:54:a4:93:da:cf:9c:e5:aa:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Oct 19 02:16:17 2023 GMT
            Not After : Oct 17 02:21:17 2024 GMT
        Subject: CN=CE3C22FF84A22145E497509F8D977FBC7C4230E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4d:dc:ad:44:64:ff:6a:f7:61:ee:8d:80:9b:
                    bc:d3:1d:04:d2:ba:7f:0c:bd:d9:b9:b0:57:da:76:
                    2e:38:16:f4:70:c1:6c:d3:22:b7:15:2f:7b:8f:66:
                    be:a9:d9:84:db:ad:a1:db:ac:e0:20:0f:16:b9:7f:
                    5e:9e:3b:8f:25:db:a4:17:dd:dc:2b:10:50:cb:15:
                    ad:e6:ac:ec:bc:36:4d:eb:c4:28:02:de:97:fa:0b:
                    16:d0:12:96:33:3d:dd:5b:b8:79:db:5a:3a:e0:ac:
                    80:63:84:c6:aa:51:ee:0c:75:6e:b8:e6:5a:d6:6b:
                    5b:1a:fa:d7:59:78:77:35:f9:33:2a:89:fd:dc:47:
                    b2:a0:93:c6:8e:ef:05:33:41:b4:46:93:cf:76:0d:
                    fc:80:1d:cf:c0:fa:ad:47:6f:45:6d:b6:0e:c2:be:
                    a5:5f:52:3d:56:a7:f8:d5:77:f2:0a:7c:9e:3c:48:
                    c3:e8:8f:9a:2e:a1:c9:a9:38:48:46:40:b1:bd:30:
                    e2:d7:38:57:57:87:62:bc:73:2d:39:58:f2:2d:8d:
                    4a:47:d0:7c:fc:f1:86:0e:4b:fa:a2:7f:20:03:50:
                    25:7d:0c:fe:cd:5e:7e:0f:fc:58:c0:a5:a7:5a:59:
                    86:74:f9:33:00:a7:9d:6a:71:a0:7d:ac:6f:fd:c7:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3C:22:FF:84:A2:21:45:E4:97:50:9F:8D:97:7F:BC:7C:42:30:E6
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3133342e3139352e3130302e302f32332d3234203d3e20393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:68:9b:5e:6c:17:1b:e1:d0:8c:79:df:72:c7:ab:34:bf:61:
         fa:67:9f:04:e0:81:47:6f:26:0e:93:69:5f:d1:d9:96:8a:f0:
         21:7f:b0:53:49:6d:a2:44:7f:a1:b6:50:7d:9f:eb:b5:cf:49:
         86:8b:86:1c:65:8f:be:54:09:31:72:6c:93:2f:4d:5f:c8:14:
         a3:ff:df:cc:e8:be:5d:72:d4:72:85:c0:79:ef:e9:37:c0:f4:
         ef:e0:e1:09:a1:ca:c3:94:42:20:9f:e2:58:63:36:1a:93:4c:
         52:93:d1:de:00:d6:98:89:6f:64:ba:0a:5a:41:fa:e1:16:66:
         85:75:40:c0:c7:8f:f4:ea:ee:18:c0:fb:6b:ff:8e:c6:e1:ef:
         4a:85:b8:89:42:82:3a:d6:18:e9:ee:e5:90:c6:ee:0d:75:04:
         79:cf:04:42:89:6b:e8:38:5d:c7:e7:a1:45:44:4a:41:0d:8a:
         e1:8b:fd:db:00:5a:0c:0e:21:3d:47:e5:6f:8a:46:d6:29:ac:
         87:5b:42:d7:e5:2e:b3:36:97:7e:f0:09:04:63:85:62:17:ef:
         3c:8d:fc:2e:cf:48:9c:56:9e:1b:2a:b2:7b:af:25:87:84:69:
         09:e5:3f:2d:01:11:0f:2b:f3:03:ae:26:56:03:0c:01:ba:8e:
         61:62:a2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:30:34 2024 by rpki-client on console-fra.rpki-client.org