Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e20323035303538.roa
File:                     3134312e3139332e32312e302f32342d3234203d3e20323035303538.roa (raw, json)
Hash identifier:          HM4PqEyFGAuIWn6Jkl0AwQBMn99BZYOhIkl9WzIff8A=
Subject key identifier:   9B:5A:7E:8A:9D:3B:D0:57:62:4F:AB:07:00:B0:27:77:38:44:EE:BD
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       521BA004B0EFF0719858B0028C585C8EFB7D423A
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e20323035303538.roa
Signing time:             Wed 17 Jul 2024 21:28:14 +0000
ROA not before:           Wed 17 Jul 2024 21:23:14 +0000
ROA not after:            Wed 16 Jul 2025 21:28:14 +0000
asID:                     205058
IP address blocks:        141.193.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:1b:a0:04:b0:ef:f0:71:98:58:b0:02:8c:58:5c:8e:fb:7d:42:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 17 21:23:14 2024 GMT
            Not After : Jul 16 21:28:14 2025 GMT
        Subject: CN=9B5A7E8A9D3BD057624FAB0700B027773844EEBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2e:e7:ce:04:3e:f8:f3:17:b2:87:d0:76:31:
                    db:77:b2:cf:08:99:22:e2:60:6a:1e:d4:ac:ce:27:
                    9d:73:24:ad:6a:18:83:69:eb:2c:38:92:7d:63:4a:
                    cd:76:07:9c:bd:fc:40:74:d5:af:d0:8f:3b:2e:b0:
                    25:7b:51:ec:66:69:12:26:d8:ea:8c:b0:09:07:e0:
                    a4:03:ec:2c:71:a2:82:19:f2:2b:67:f1:c6:b6:cb:
                    36:31:28:02:98:4c:63:b1:d0:bd:9c:30:66:89:67:
                    3f:0b:1b:c8:d8:84:f3:6c:8d:17:f6:72:5c:26:f5:
                    10:09:1f:01:47:56:46:a7:8e:96:79:59:ad:86:1d:
                    40:d3:39:ab:72:9b:c7:2a:09:60:40:e2:93:42:04:
                    81:44:4f:97:24:32:d5:d1:f3:eb:33:61:c5:96:bd:
                    1e:3c:b6:99:c3:9b:23:52:f2:11:11:74:30:87:74:
                    2f:e1:55:46:77:b9:ce:9e:c6:80:76:7b:3a:e6:ef:
                    da:96:86:0a:9f:e8:44:24:56:c8:4f:2a:a7:72:75:
                    1a:c1:40:07:b4:b9:b8:6b:84:14:c4:be:98:55:5c:
                    c8:dd:90:a8:4a:27:d0:84:b4:8e:f5:2f:66:70:9c:
                    c7:89:c0:a0:0d:a6:28:29:f1:97:28:0d:75:d8:93:
                    cc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:5A:7E:8A:9D:3B:D0:57:62:4F:AB:07:00:B0:27:77:38:44:EE:BD
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/3134312e3139332e32312e302f32342d3234203d3e20323035303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:d8:30:4d:9e:5d:c8:1a:40:bf:ec:02:72:79:16:37:b8:7a:
         1b:89:e3:96:8a:a5:98:f6:8c:48:79:cd:e5:29:75:ba:0a:c5:
         b0:b0:e8:74:53:68:de:29:f4:cc:08:82:8f:e2:fc:02:b6:28:
         a3:c2:9e:3e:2a:90:a9:bc:af:ed:d1:0f:04:a9:88:22:90:ce:
         5f:be:44:2a:f7:fd:17:68:11:af:7a:8c:7c:cc:0f:ad:e2:87:
         bf:9a:1b:b2:10:1d:6a:b3:ee:3e:9f:66:b0:b9:86:a3:10:94:
         18:02:11:45:49:e0:bc:18:2e:8d:55:82:71:0e:ef:05:cb:f6:
         6a:2d:97:87:3f:b1:bf:bb:83:98:b2:a1:25:bc:36:06:2d:38:
         a7:c8:80:33:b4:38:3e:5f:a2:82:b5:c6:d4:ab:92:48:5a:06:
         ed:69:13:32:e3:f3:95:fb:b4:2d:c2:f4:43:c7:d4:d5:5c:ad:
         5e:4e:ab:3e:91:03:dd:b0:ec:62:6f:b5:96:12:93:b2:32:74:
         7c:00:4b:4e:1d:c9:e4:82:98:20:50:68:3d:75:e1:5e:fc:75:
         e0:bf:cd:64:29:58:be:4f:d0:9c:f1:0d:1b:d3:0d:95:4b:75:
         3e:d3:b3:eb:6b:dd:a9:9d:f0:81:e8:8b:61:e2:ed:24:36:45:
         ef:d6:0f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:07 2024 by rpki-client on console-ams.rpki-client.org