Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3162303a3a2f34342d3438203d3e20313333383436.roa
File:                     323630323a666564613a3162303a3a2f34342d3438203d3e20313333383436.roa (raw, json)
Hash identifier:          sSeT4izSwqAHai7XlvQZd9OgMRt2G4LAH0zdOK63elo=
Subject key identifier:   A4:F9:62:88:51:1E:7D:94:C3:9F:44:0C:53:6D:E1:E5:4B:76:DC:6B
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       69E4EB13B3729C661276874CE520C6216148B389
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3162303a3a2f34342d3438203d3e20313333383436.roa
Signing time:             Mon 15 Jul 2024 08:50:13 +0000
ROA not before:           Mon 15 Jul 2024 08:45:13 +0000
ROA not after:            Mon 14 Jul 2025 08:50:13 +0000
asID:                     133846
IP address blocks:        2602:feda:1b0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e4:eb:13:b3:72:9c:66:12:76:87:4c:e5:20:c6:21:61:48:b3:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:13 2024 GMT
            Not After : Jul 14 08:50:13 2025 GMT
        Subject: CN=A4F96288511E7D94C39F440C536DE1E54B76DC6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c8:3e:29:9c:a2:76:95:a5:69:d1:8d:06:cc:
                    2d:9e:d1:43:2f:35:3f:2c:ba:d2:3c:fd:45:2b:93:
                    6e:7c:58:1b:9a:ce:f8:63:87:2d:99:0d:04:28:74:
                    e5:68:ae:94:f3:26:62:26:9d:54:df:93:91:c0:83:
                    47:d3:30:4a:cb:cc:74:fb:da:90:d9:f2:4d:bc:ff:
                    23:8d:dd:d0:93:67:26:d8:49:bb:c4:e4:e0:24:fb:
                    5c:3a:ed:dc:c8:2a:fb:83:f0:c7:0e:ed:a2:87:74:
                    cc:c3:0d:94:95:2d:3b:30:7a:39:87:21:d5:48:60:
                    5e:16:ad:76:d5:ed:b5:a1:10:9d:05:91:1b:b9:8c:
                    65:b1:2b:de:4a:c9:66:a4:0f:04:47:16:04:43:37:
                    ac:4f:d1:82:07:e3:01:88:8f:42:39:84:2a:a1:c1:
                    68:a3:9f:1a:ad:11:7a:60:01:20:3f:c5:c9:5b:e9:
                    44:c7:81:8b:c5:e7:f9:ce:08:29:6f:fa:07:62:f0:
                    84:bb:95:20:41:c2:6c:7b:9c:91:81:f2:ea:3c:7f:
                    bf:cb:05:37:81:3a:39:4b:24:c0:2d:32:8e:15:5c:
                    54:82:bb:79:05:92:6a:6b:5b:c1:d4:dd:31:e4:f5:
                    08:9d:d0:a3:d4:2f:7f:f1:f9:04:9c:24:e8:bc:80:
                    f8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F9:62:88:51:1E:7D:94:C3:9F:44:0C:53:6D:E1:E5:4B:76:DC:6B
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3162303a3a2f34342d3438203d3e20313333383436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:1b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         63:d8:72:ca:6d:69:06:10:dc:58:e7:4c:c5:ca:67:e5:e8:61:
         55:35:19:f7:14:a5:6b:af:29:2b:0e:bb:1d:d6:1a:f4:c6:ee:
         de:c5:ec:c0:e4:90:d4:aa:46:b1:3c:c3:0e:cd:a4:4f:25:cf:
         29:bb:d5:93:a4:92:a8:09:b7:63:4d:80:9f:f4:dd:ed:3b:aa:
         97:09:85:f5:04:a0:35:29:66:77:b5:36:08:98:7a:26:21:bf:
         b3:b4:e8:d9:f2:68:de:4e:68:cb:c4:b7:00:a1:10:99:4b:ca:
         41:c9:d4:b7:13:1f:3e:d0:21:36:db:f7:b4:0b:61:7c:55:ac:
         0d:24:40:81:d6:52:fb:8d:3d:b0:37:0d:95:b5:a8:fe:13:b5:
         9d:5c:d1:12:ee:74:9c:47:92:fe:33:8c:d0:fe:8f:c5:d0:5b:
         d5:79:5f:6c:68:22:8b:5d:80:4b:30:bb:36:f6:32:93:ec:bd:
         f6:95:6b:08:f6:16:5f:2a:79:2a:c3:7c:18:d4:64:5d:0c:69:
         06:2e:77:9b:1a:07:26:69:a5:21:33:d3:c9:31:10:9e:5e:aa:
         b8:ba:a7:d3:a0:46:3c:fe:ee:f2:f5:c9:40:ef:e7:7a:c7:49:
         92:c5:d3:90:87:bc:98:6e:45:a9:f6:57:b2:de:cb:00:01:dd:
         c8:eb:30:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:37 2024 by rpki-client on console-fra.rpki-client.org