Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a313a3a2f34382d3438203d3e20333936333033.roa
File:                     323630323a666564613a313a3a2f34382d3438203d3e20333936333033.roa (raw, json)
Hash identifier:          Yc5K3vFV7kp/YQfzGEfuArqUdLmVvDcLDvxENla9Edw=
Subject key identifier:   AB:70:55:01:9C:49:AE:F8:F9:E9:90:D7:0A:AC:4D:58:6A:23:3A:2C
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       0AEB9A146738162A1AB545CD96D40F152F2C3E47
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a313a3a2f34382d3438203d3e20333936333033.roa
Signing time:             Mon 15 Jul 2024 08:50:06 +0000
ROA not before:           Mon 15 Jul 2024 08:45:06 +0000
ROA not after:            Mon 14 Jul 2025 08:50:06 +0000
asID:                     396303
IP address blocks:        2602:feda:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:eb:9a:14:67:38:16:2a:1a:b5:45:cd:96:d4:0f:15:2f:2c:3e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:06 2024 GMT
            Not After : Jul 14 08:50:06 2025 GMT
        Subject: CN=AB7055019C49AEF8F9E990D70AAC4D586A233A2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:21:00:2e:1a:92:1c:c9:d9:01:0c:e1:16:31:
                    1d:26:5c:ca:e3:8a:b3:f7:f2:2c:74:d3:ef:c2:e5:
                    cf:15:10:a7:c0:c7:2d:e7:a5:07:41:e4:1e:7c:9e:
                    ee:f3:fc:9d:2c:8f:e1:3f:6e:e9:6d:c8:ca:8d:91:
                    05:0d:4a:ee:85:cc:36:99:b2:5b:c2:39:ff:59:3f:
                    2c:69:d0:9c:77:e5:be:0c:47:e6:06:5b:c1:03:a0:
                    b3:bd:4d:42:c9:b3:f9:c5:97:78:0f:9d:a9:b2:2f:
                    67:d6:c6:21:c1:83:4d:df:0f:4e:b3:85:bb:c3:9f:
                    08:61:fe:6c:62:14:a6:2f:29:44:5b:11:05:5c:e2:
                    24:39:53:60:69:f9:e3:c0:96:62:ce:81:01:48:3d:
                    d3:b1:7b:14:d5:72:a4:4e:a7:bd:49:36:6b:33:0b:
                    e9:12:ad:77:bb:ba:db:ca:c6:26:7d:49:49:dd:9c:
                    84:7e:8b:6c:49:c8:48:9b:a8:f6:c1:52:04:08:c4:
                    34:95:1e:0f:d7:69:22:02:35:d9:a0:09:51:a2:6e:
                    6a:47:0c:0e:b3:ae:49:77:a5:7b:14:93:28:66:fb:
                    d3:fd:bd:7e:a7:9f:af:0d:1d:b4:76:70:c2:6f:cf:
                    d8:ef:2c:27:9a:ac:63:43:c6:79:14:1d:34:c0:00:
                    26:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:70:55:01:9C:49:AE:F8:F9:E9:90:D7:0A:AC:4D:58:6A:23:3A:2C
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a313a3a2f34382d3438203d3e20333936333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:18:f1:a6:5e:ca:94:35:9f:a5:94:67:c7:50:9c:54:89:8d:
         a6:e7:4a:88:1f:55:d8:ca:9e:2d:c7:12:5a:b1:13:d9:7a:30:
         04:2e:9c:9d:be:4a:97:96:b1:80:1f:72:57:cc:28:6d:22:4f:
         10:eb:16:20:0f:26:8d:89:c6:2d:de:5d:8d:d3:4c:03:94:66:
         4a:63:cc:1b:a5:bc:e2:87:51:13:e0:54:5b:d1:81:55:57:f8:
         bc:2e:bf:b5:49:8b:4d:af:9c:dc:d5:63:46:a6:33:a4:9c:64:
         27:3a:d0:e4:16:80:2d:93:99:78:cd:b5:14:91:b7:50:4e:24:
         be:d7:59:ad:47:09:cc:fc:56:43:e2:ca:d7:09:aa:95:de:2a:
         ae:03:de:52:0f:97:1a:56:24:6c:88:d7:13:e7:6d:30:55:ae:
         94:1f:47:26:19:86:42:91:0a:71:1e:55:35:5e:4c:d1:0f:dc:
         c0:89:ab:9f:af:0e:b0:db:e7:3f:a9:c4:0b:0a:15:85:5f:dd:
         cb:10:5d:b8:ed:23:ea:03:65:98:2f:08:45:d8:cf:dd:fe:56:
         23:bf:d6:6d:46:9d:3b:04:8b:e4:e7:f5:f6:9a:53:0c:c5:76:
         8e:5c:ef:6d:6f:0f:bf:68:17:c3:d4:af:8f:06:ea:26:c7:5f:
         b4:80:01:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:42 2024 by rpki-client on console-fra.rpki-client.org