Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3139303a3a2f34342d3438203d3e20313432303235.roa
File:                     323630323a666564613a3139303a3a2f34342d3438203d3e20313432303235.roa (raw, json)
Hash identifier:          w+LzbdaR1hI4sfpFyMUDhL7CmLeXrPYH6KDMy6O03tw=
Subject key identifier:   03:0D:AD:E6:15:10:94:60:DE:82:56:A1:18:F2:4D:5F:90:1F:98:F6
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       786BCBE9D497FA66164B2DA73B197D7B5182F3E1
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3139303a3a2f34342d3438203d3e20313432303235.roa
Signing time:             Mon 15 Jul 2024 08:50:10 +0000
ROA not before:           Mon 15 Jul 2024 08:45:10 +0000
ROA not after:            Mon 14 Jul 2025 08:50:10 +0000
asID:                     142025
IP address blocks:        2602:feda:190::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:6b:cb:e9:d4:97:fa:66:16:4b:2d:a7:3b:19:7d:7b:51:82:f3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:10 2024 GMT
            Not After : Jul 14 08:50:10 2025 GMT
        Subject: CN=030DADE615109460DE8256A118F24D5F901F98F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:33:e9:c2:6f:6f:63:31:3d:dd:b4:87:c5:
                    03:e3:06:03:b1:0e:52:3f:92:fa:89:9f:c9:e8:0e:
                    90:35:60:98:54:52:d7:51:41:e1:a3:95:5c:df:98:
                    0c:9e:54:fb:9d:ad:69:81:98:b2:14:ff:4e:e9:b1:
                    3d:d9:bf:a7:21:57:c8:10:50:b2:30:4b:a7:42:5d:
                    44:d3:81:d1:2e:86:18:9e:67:fd:da:2f:ef:05:f1:
                    b9:fd:5d:60:a3:6d:3e:38:a6:eb:8d:6c:ab:73:03:
                    03:fe:ea:65:56:b0:f3:76:ce:d5:bb:aa:e6:8c:f3:
                    7c:5c:9b:53:0b:cc:75:b1:a8:88:f3:df:22:6f:1e:
                    af:b0:09:ab:7a:93:8a:22:b5:c1:e6:31:6e:cd:f8:
                    01:5c:c3:61:d4:5d:3a:63:94:a9:fa:87:d8:21:62:
                    82:d3:d7:1c:6c:1d:18:17:f9:05:5a:0c:c7:25:b7:
                    0f:b0:68:b8:3d:32:a3:12:81:25:16:cb:06:cf:81:
                    2b:79:99:3e:98:53:fc:53:c3:17:06:91:a5:78:c0:
                    eb:d0:94:1a:7a:8a:e1:20:e2:f7:54:24:2c:7e:49:
                    04:da:da:de:bb:03:af:6e:cd:76:20:38:d3:33:7a:
                    57:a3:3f:d3:14:cf:61:a8:ed:80:95:b2:76:03:d5:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0D:AD:E6:15:10:94:60:DE:82:56:A1:18:F2:4D:5F:90:1F:98:F6
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3139303a3a2f34342d3438203d3e20313432303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:190::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:b6:41:a1:71:85:06:39:04:cf:e2:8e:08:5f:c4:5a:81:31:
         98:8e:e4:fc:e3:d1:55:af:f1:a1:ba:c9:de:4b:eb:2c:0c:20:
         e8:9b:7a:23:13:29:73:ae:e2:4c:04:55:18:8f:c5:00:23:8c:
         93:7b:cc:f1:67:66:58:69:0a:1a:a8:8f:68:fa:99:90:24:30:
         ba:70:ff:a1:c7:69:51:e4:5e:1f:47:4e:e6:5d:ee:74:69:ac:
         aa:57:cb:75:78:44:47:19:ae:e4:73:a7:ab:11:cf:9c:17:db:
         fe:53:b4:e2:b5:0d:97:03:36:95:6c:66:49:6b:1a:fe:23:8e:
         8c:6c:b0:02:f8:2f:1d:cb:c4:0f:dd:71:ef:dc:e6:b9:30:28:
         54:e6:5a:f2:86:8a:1d:24:1a:fc:ea:01:7e:d4:ec:c6:54:07:
         1b:ad:6c:86:aa:80:54:64:81:88:24:c0:19:d1:ef:7b:fa:e7:
         d9:7a:65:70:98:f9:0c:10:b7:c7:ce:2e:11:cd:65:dd:3d:10:
         32:51:60:6b:45:0d:6c:2c:9b:e6:35:7b:ff:d3:b5:cc:77:67:
         d8:4e:79:c1:fc:95:56:a8:f5:b4:38:1b:89:f4:6d:72:8c:c9:
         02:92:bf:78:87:63:bd:e7:9a:2e:20:0d:50:c1:21:22:e0:b7:
         bd:33:f3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:37 2024 by rpki-client on console-fra.rpki-client.org