Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa
File:                     323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa (raw, json)
Hash identifier:          oi3Htstu/SCGL3OGfNgXdH7uNF3chzEpyJ8Ew/PZTOw=
Subject key identifier:   26:F4:F6:1F:24:45:A0:76:31:31:70:51:C2:82:3B:55:D5:38:32:54
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       1F2C2572B3406D08939BC180B5F267FA5109F9AC
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa
Signing time:             Mon 14 Aug 2023 07:53:40 +0000
ROA not before:           Mon 14 Aug 2023 07:48:40 +0000
ROA not after:            Mon 12 Aug 2024 07:53:40 +0000
asID:                     35251
IP address blocks:        2602:feda:180::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 26 Apr 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2c:25:72:b3:40:6d:08:93:9b:c1:80:b5:f2:67:fa:51:09:f9:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:40 2023 GMT
            Not After : Aug 12 07:53:40 2024 GMT
        Subject: CN=26F4F61F2445A07631317051C2823B55D5383254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4d:fe:7e:19:66:8a:12:af:34:0e:52:54:1f:
                    7a:ba:f2:3a:9b:97:90:52:19:cb:88:d2:bc:79:15:
                    5c:2a:53:45:45:0f:74:dc:99:51:19:bc:74:27:14:
                    ea:de:a3:95:3d:8d:91:24:0c:d9:a4:bd:06:e1:7c:
                    47:3c:0c:44:6b:72:36:f6:6d:8e:0d:71:9b:4d:5f:
                    47:48:a9:91:8b:5d:fb:b6:b7:96:70:57:75:92:21:
                    ff:ac:21:85:a6:54:ee:93:1f:4b:b6:6a:d2:ef:30:
                    f6:d4:03:80:03:2f:a2:ce:c8:d9:41:fb:6a:3c:13:
                    c9:24:a5:14:56:54:ac:12:f4:4e:0a:26:96:5a:07:
                    54:ab:e2:ac:b9:85:d1:47:db:a8:47:a7:27:ab:a4:
                    7d:e7:f9:7b:c3:52:ae:76:a6:0e:d5:98:ea:28:8d:
                    80:f8:bd:b3:c3:fb:c5:03:13:f8:61:6b:e0:e9:28:
                    cf:4b:04:5a:4d:d8:b3:d3:3c:0e:06:41:72:49:4b:
                    6b:32:c8:af:2f:a1:53:f7:18:68:23:e2:56:b4:78:
                    01:f9:0e:59:66:90:fa:1f:75:7f:89:53:d4:76:d9:
                    9b:08:79:3c:63:d5:45:29:01:1c:35:33:22:66:5c:
                    31:24:3d:72:ac:12:64:9f:9c:d6:54:b8:4d:0f:07:
                    db:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F4:F6:1F:24:45:A0:76:31:31:70:51:C2:82:3B:55:D5:38:32:54
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:180::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:ad:65:c9:2b:8f:6d:92:4d:bc:bb:3d:15:a1:6a:fb:28:17:
         32:4e:b0:2d:83:f3:50:b9:0d:67:45:e1:2e:de:17:fc:d4:3a:
         0a:eb:87:d6:04:96:59:a0:1a:3f:0b:7b:e8:19:a4:73:78:1d:
         c4:fa:16:4e:d9:7c:30:eb:c8:8f:d0:8f:fa:58:92:21:6a:d7:
         c7:8c:f1:f1:8c:20:ad:e8:ac:c9:26:81:d7:14:9b:7e:84:e6:
         26:e3:fd:9c:9c:76:98:ef:8a:29:48:c0:a8:d6:ec:28:a3:11:
         32:2d:1a:f7:b2:6f:20:55:22:2a:b1:71:63:74:55:e8:fa:ad:
         a0:1c:80:a3:c1:e5:f6:66:6c:56:d8:8a:b9:b7:0e:c1:c1:69:
         1a:a1:00:06:e3:e3:ff:2d:04:b3:91:13:d6:e0:9e:ca:44:13:
         c7:80:33:8b:56:cc:75:40:02:fd:4a:a9:32:25:63:5b:00:a6:
         89:67:5b:f3:28:6d:02:4b:16:1a:84:ee:cb:ae:c1:29:ea:34:
         82:c8:c2:33:db:23:44:c8:77:3f:5c:2c:79:5a:f7:c5:7a:de:
         9c:44:48:ab:e6:42:3c:31:9c:1e:3c:65:a6:59:a9:34:3e:36:
         de:7a:2d:ad:e1:6c:cb:b1:cb:d9:17:b8:44:d5:93:8c:39:9f:
         92:e7:00:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 21:25:07 2024 by rpki-client on console-ams.rpki-client.org