Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3138323a3a2f34372d3438203d3e20323131383433.roa
File:                     323630323a666564613a3138323a3a2f34372d3438203d3e20323131383433.roa (raw, json)
Hash identifier:          aXh2WnIZsTUtfTw//pDUPCq4snRv47aJUyM0GRauWsI=
Subject key identifier:   DE:C3:3B:6B:8C:B3:E7:DD:61:F8:F6:BC:A3:36:C3:02:C5:0D:15:94
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       50ED6F284D1896BCE7DD3D111B7B00C4D61321EB
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3138323a3a2f34372d3438203d3e20323131383433.roa
Signing time:             Mon 15 Jul 2024 08:50:14 +0000
ROA not before:           Mon 15 Jul 2024 08:45:14 +0000
ROA not after:            Mon 14 Jul 2025 08:50:14 +0000
asID:                     211843
IP address blocks:        2602:feda:182::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:ed:6f:28:4d:18:96:bc:e7:dd:3d:11:1b:7b:00:c4:d6:13:21:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:14 2024 GMT
            Not After : Jul 14 08:50:14 2025 GMT
        Subject: CN=DEC33B6B8CB3E7DD61F8F6BCA336C302C50D1594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:3a:ad:85:a3:1e:77:9f:91:5d:49:75:91:
                    f2:40:39:bb:c3:83:c5:7a:3c:dd:b9:3e:4c:8b:4c:
                    53:d1:0d:70:45:e0:ab:1a:fb:e3:14:1d:89:21:bb:
                    5a:d7:52:8b:e3:6c:78:c0:52:6e:82:d6:93:2d:9b:
                    1e:1d:f3:e3:1d:19:0f:df:27:ac:63:5a:79:5b:c4:
                    0f:f1:2b:31:5f:ec:fe:75:78:14:d8:12:d7:15:92:
                    96:ec:13:5f:c2:06:5b:df:85:e3:23:84:a0:68:7c:
                    a4:47:cc:93:e4:1c:ad:ac:1a:a7:d4:26:3a:c2:87:
                    1b:2e:4a:a4:b2:94:46:6b:7f:98:b4:de:b6:dc:4b:
                    3d:2d:60:a7:54:4e:c4:8c:22:2d:c7:6d:a7:db:6a:
                    45:67:a9:8b:7e:f9:da:09:94:63:31:6e:46:1c:9e:
                    07:7c:5d:97:2f:84:5e:bb:cc:b9:23:23:1d:b5:09:
                    6f:a4:fa:c3:99:80:7b:38:12:64:45:fc:98:a6:09:
                    ab:dc:04:2c:1b:f2:43:fc:e2:3d:c4:d0:0f:ad:f8:
                    14:78:91:5d:90:8d:3e:4d:19:13:31:cb:18:45:80:
                    6b:d9:be:02:ce:c0:28:72:13:16:3c:55:3c:4e:12:
                    27:e8:c6:2d:54:ef:bc:0d:60:df:d5:f4:7a:91:ef:
                    83:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:C3:3B:6B:8C:B3:E7:DD:61:F8:F6:BC:A3:36:C3:02:C5:0D:15:94
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3138323a3a2f34372d3438203d3e20323131383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:182::/47

    Signature Algorithm: sha256WithRSAEncryption
         61:c5:6d:4f:51:13:49:b4:9e:e0:4e:7e:30:44:c1:c2:93:6b:
         51:e0:60:c1:12:97:12:14:df:04:82:08:b0:40:ba:a3:da:e5:
         18:71:eb:c0:6e:39:34:42:51:df:db:57:56:fd:e3:c5:97:74:
         54:22:28:c8:ca:22:46:0e:1b:f4:92:89:d1:05:fe:2b:44:79:
         99:7c:73:c7:48:07:0f:bc:42:f5:46:08:b1:42:ce:4f:cb:20:
         ca:77:38:fe:7b:5b:ce:3e:f5:53:97:81:90:88:3d:e2:40:48:
         9f:21:9e:47:0d:08:fe:38:db:30:8f:03:cf:0d:34:76:28:d7:
         8d:83:e7:0f:63:c2:d7:b1:58:4b:e3:53:4b:ff:2f:0f:5a:03:
         6d:90:c7:78:a9:69:88:0f:9a:2d:1b:28:f0:d8:14:d1:a9:f9:
         57:40:dd:15:1a:29:c3:9b:e0:45:71:a0:1e:e0:d6:66:ee:98:
         40:34:e7:29:90:f5:68:f4:a5:c6:51:6e:a6:07:19:5d:46:a4:
         52:d0:3d:f2:48:e9:d3:ef:85:9c:c4:ce:36:1b:60:5f:c6:59:
         b9:39:c3:7a:a9:6b:da:16:0d:45:a9:13:37:e2:94:37:c5:41:
         6a:a5:12:10:64:f6:dd:8f:5e:ac:e3:8c:81:60:19:ff:bb:3c:
         51:dc:94:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:01:48 2024 by rpki-client on console-ams.rpki-client.org