Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/32332e3234372e3133362e302f32322d3234203d3e203436393937.roa
File:                     32332e3234372e3133362e302f32322d3234203d3e203436393937.roa (raw, json)
Hash identifier:          b6ZL9TS6cLSd0iUYqfKI+Q6cCjsN+awnUyHDvD0ydjg=
Subject key identifier:   2F:C4:97:E1:41:1B:A1:0F:52:FD:E0:45:BD:A1:D1:35:67:68:BE:6D
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       74E3C9BC158A0EBDB9F8BA759CEE5660832EF416
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/32332e3234372e3133362e302f32322d3234203d3e203436393937.roa
Signing time:             Mon 14 Aug 2023 07:53:37 +0000
ROA not before:           Mon 14 Aug 2023 07:48:37 +0000
ROA not after:            Mon 12 Aug 2024 07:53:37 +0000
asID:                     46997
IP address blocks:        23.247.136.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e3:c9:bc:15:8a:0e:bd:b9:f8:ba:75:9c:ee:56:60:83:2e:f4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:37 2023 GMT
            Not After : Aug 12 07:53:37 2024 GMT
        Subject: CN=2FC497E1411BA10F52FDE045BDA1D1356768BE6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0d:44:6c:7d:45:6f:2c:a8:85:d9:ff:d7:b0:
                    96:5a:48:27:5a:0c:5b:8d:7d:92:07:ec:4b:e5:a9:
                    5b:a2:ae:4d:29:37:76:81:2c:97:e6:ed:b5:a6:ff:
                    d5:bb:ee:bd:f3:24:ff:ac:8c:ee:03:64:ba:8b:1a:
                    ed:75:99:44:33:b9:7a:4b:e5:89:e2:b8:57:6d:da:
                    7a:fc:91:11:d7:14:f4:b4:9d:8c:3d:99:e1:66:be:
                    fe:da:2f:89:14:9e:88:8b:e2:27:b1:cd:9a:3e:c9:
                    66:17:89:96:83:13:1a:36:d8:42:ef:7d:23:ad:5c:
                    c5:1c:be:f3:46:50:54:72:fd:7d:bd:92:6d:21:5d:
                    14:da:26:8f:3a:56:46:47:9d:87:51:fe:e5:a9:42:
                    4f:29:4a:6d:85:5f:13:d5:81:b9:91:f3:12:61:8a:
                    70:d4:ec:5a:51:3d:81:34:0b:7a:11:84:97:1b:c0:
                    d7:19:de:97:36:85:1a:5d:f4:bc:d1:a7:d6:13:5f:
                    0a:f5:b8:7a:d3:ed:a0:ce:7e:0a:46:21:4e:bd:7e:
                    40:a3:1f:96:55:3e:db:3f:aa:8b:82:a9:a6:31:00:
                    07:b2:3e:23:90:8d:67:b9:e8:8c:ba:f4:42:4d:09:
                    b7:10:ee:e8:17:75:9d:74:1a:07:94:95:b1:ed:e8:
                    47:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C4:97:E1:41:1B:A1:0F:52:FD:E0:45:BD:A1:D1:35:67:68:BE:6D
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/32332e3234372e3133362e302f32322d3234203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:73:4d:cb:58:3f:55:17:ba:ec:de:13:be:6e:5a:39:5a:42:
         19:d5:ba:18:98:bb:9f:c0:3e:76:a9:c9:38:f0:c3:31:30:21:
         50:55:cb:dd:e4:91:47:d0:c7:7a:f0:de:c3:e7:c9:5d:c9:b7:
         aa:48:df:2b:e4:b0:b8:76:b4:3a:c0:47:61:fd:f8:23:65:a1:
         de:49:de:c7:1f:27:aa:d5:9c:dd:5c:58:20:5b:9d:67:c1:1d:
         ae:5a:4a:b6:bd:38:f0:32:81:63:bf:21:c2:72:ba:d1:c6:5d:
         06:68:7a:b2:e1:a4:61:f5:eb:b5:cd:87:5f:47:6f:68:f1:4f:
         6c:0d:98:a3:a2:1b:3e:d9:04:88:d9:55:31:d2:65:cb:17:a6:
         b5:23:4d:8f:2d:fd:00:c6:d3:25:67:21:1f:80:ed:34:ea:43:
         07:03:29:87:0d:6d:a9:9e:e9:24:98:43:bb:83:25:1b:87:09:
         ce:f9:da:3e:34:19:43:87:73:ff:24:0c:bd:64:89:f7:b9:b6:
         d1:6a:f3:e7:70:24:5d:01:e8:46:3b:03:e2:2b:7e:86:a3:51:
         b2:09:94:72:57:36:15:4d:8b:a2:0e:58:89:f5:c8:9e:a7:f0:
         60:40:9b:fb:0a:51:5d:51:82:6b:81:23:ae:b5:43:0a:38:b6:
         4d:f6:e3:ad
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUdOPJvBWKDr25+Lp1nO5WYIMu9BYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjMwODE0MDc0ODM3WhcNMjQwODEyMDc1MzM3
WjAzMTEwLwYDVQQDEygyRkM0OTdFMTQxMUJBMTBGNTJGREUwNDVCREExRDEzNTY3
NjhCRTZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqA1EbH1Fbyyo
hdn/17CWWkgnWgxbjX2SB+xL5alboq5NKTd2gSyX5u21pv/Vu+698yT/rIzuA2S6
ixrtdZlEM7l6S+WJ4rhXbdp6/JER1xT0tJ2MPZnhZr7+2i+JFJ6Ii+Insc2aPslm
F4mWgxMaNthC730jrVzFHL7zRlBUcv19vZJtIV0U2iaPOlZGR52HUf7lqUJPKUpt
hV8T1YG5kfMSYYpw1OxaUT2BNAt6EYSXG8DXGd6XNoUaXfS80afWE18K9bh60+2g
zn4KRiFOvX5Aox+WVT7bP6qLgqmmMQAHsj4jkI1nueiMuvRCTQm3EO7oF3WddBoH
lJWx7ehHNwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC/El+FBG6EPUv3gRb2h0TVn
aL5tMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov
L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzMzJlMzIzNDM3MmUzMTMzMzYy
ZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM2MzkzOTM3LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/eI
MA0GCSqGSIb3DQEBCwUAA4IBAQA1c03LWD9VF7rs3hO+blo5WkIZ1boYmLufwD52
qck48MMxMCFQVcvd5JFH0Md68N7D58ldybeqSN8r5LC4drQ6wEdh/fgjZaHeSd7H
Hyeq1ZzdXFggW51nwR2uWkq2vTjwMoFjvyHCcrrRxl0GaHqy4aRh9eu1zYdfR29o
8U9sDZijohs+2QSI2VUx0mXLF6a1I02PLf0AxtMlZyEfgO006kMHAymHDW2pnukk
mEO7gyUbhwnO+do+NBlDh3P/JAy9ZIn3ubbRavPncCRdAehGOwPiK36Go1GyCZRy
VzYVTYuiDliJ9ciep/BgQJv7ClFdUYJrgSOutUMKOLZN9uOt
-----END CERTIFICATE-----
Generated at Sun May 5 01:11:40 2024 by rpki-client on console-ams.rpki-client.org