Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa
File:                     323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa (raw, json)
Hash identifier:          VWgADQXcP/AlV05I6Ak0n5lb/Z0g16/bDTQep8Ap4ao=
Subject key identifier:   E5:16:58:06:17:C0:C6:5E:D0:46:B8:21:3F:A2:EA:8E:8C:26:41:F0
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       7C0ADE87ED86A9C946E74CF8C4EBC139229AE0EE
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa
Signing time:             Mon 15 Jul 2024 08:50:07 +0000
ROA not before:           Mon 15 Jul 2024 08:45:07 +0000
ROA not after:            Mon 14 Jul 2025 08:50:07 +0000
asID:                     133492
IP address blocks:        2602:feda:2d0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 16:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0a:de:87:ed:86:a9:c9:46:e7:4c:f8:c4:eb:c1:39:22:9a:e0:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:07 2024 GMT
            Not After : Jul 14 08:50:07 2025 GMT
        Subject: CN=E516580617C0C65ED046B8213FA2EA8E8C2641F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:45:35:df:af:d4:15:94:6d:ed:8b:1e:0b:9e:
                    6c:47:e9:2f:70:8f:c3:d1:c2:2c:8f:29:14:65:44:
                    a8:b4:ee:50:2b:c4:a2:8d:37:98:57:f8:44:79:27:
                    18:9a:c2:a1:eb:4e:e0:a3:13:f2:99:64:0a:34:22:
                    84:ac:ad:f9:4f:44:a2:60:f2:25:aa:bd:05:46:31:
                    d6:56:b6:66:31:1e:6a:d5:e3:a9:2c:dd:5e:61:5c:
                    10:e2:35:38:84:63:e5:90:1f:71:45:2e:f9:a6:26:
                    fb:3b:d3:be:81:43:9c:60:60:ac:59:f3:2f:5c:ba:
                    41:a2:f1:29:bb:36:07:bc:d1:95:7d:a2:c4:1b:25:
                    ad:85:88:de:21:e1:49:f0:03:9d:1b:ab:aa:94:28:
                    0b:95:6f:47:e9:b7:a3:ee:96:fb:df:c2:71:57:c7:
                    83:49:31:89:8a:c8:18:39:ec:6d:cd:19:e4:c9:a9:
                    60:8b:9a:04:55:b3:c8:cb:c6:e3:ba:b4:71:7e:c9:
                    ab:7b:ff:be:26:0f:a7:ac:81:2a:30:b1:6b:44:19:
                    7e:c1:52:c5:50:72:98:f4:3b:eb:33:d1:e7:e7:65:
                    e8:20:43:bf:f5:e1:33:0c:ab:1b:42:b5:51:eb:61:
                    e8:63:10:8e:3d:4d:35:d7:51:eb:5b:e9:4a:2a:f3:
                    0d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:16:58:06:17:C0:C6:5E:D0:46:B8:21:3F:A2:EA:8E:8C:26:41:F0
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:2d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         74:6c:3e:d9:bc:33:dd:d4:ff:75:e7:0b:a3:0b:fe:4f:6f:24:
         03:cd:cb:4e:71:d7:37:30:c8:06:d1:69:0f:ad:a3:ab:b4:39:
         ed:7a:bb:30:67:9a:69:93:f0:91:a5:33:77:88:e7:39:ef:c6:
         e7:f7:3f:a9:6b:b9:4a:2f:b1:49:75:1f:11:62:62:dd:82:95:
         1b:16:d1:3e:2b:02:5b:62:b1:6f:31:58:a5:c2:b1:d9:39:c0:
         c8:ff:68:6b:b6:ad:b4:a8:df:f5:b2:6a:35:68:4c:19:bb:9a:
         54:a0:55:04:53:db:da:52:6f:ac:ed:c1:6e:6c:51:44:f1:bf:
         d5:6e:1b:9e:5d:b7:98:72:b0:ef:d6:6d:1a:f6:37:88:41:44:
         2e:e4:c8:bf:62:ac:25:ca:4a:db:0e:95:ca:f9:8e:52:9c:8b:
         65:69:f6:ea:09:bf:09:24:f7:f9:81:0c:5e:0e:67:d5:71:85:
         f9:9e:e8:a7:5b:72:16:4a:d7:e6:fc:f8:c0:2f:67:63:c2:2c:
         0a:d4:72:f7:5c:ce:04:5b:25:9a:60:41:04:c4:30:d8:49:a7:
         5a:1d:85:7f:2b:04:cf:5f:d8:f1:c5:40:77:d2:13:98:86:8a:
         0c:58:34:e3:92:2e:35:b4:3e:b9:fe:ef:d5:d3:47:a9:6f:45:
         bf:33:19:97
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUfAreh+2GqclG50z4xOvBOSKa4O4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTA3WhcNMjUwNzE0MDg1MDA3
WjAzMTEwLwYDVQQDEyhFNTE2NTgwNjE3QzBDNjVFRDA0NkI4MjEzRkEyRUE4RThD
MjY0MUYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkU136/UFZRt
7YseC55sR+kvcI/D0cIsjykUZUSotO5QK8SijTeYV/hEeScYmsKh607goxPymWQK
NCKErK35T0SiYPIlqr0FRjHWVrZmMR5q1eOpLN1eYVwQ4jU4hGPlkB9xRS75pib7
O9O+gUOcYGCsWfMvXLpBovEpuzYHvNGVfaLEGyWthYjeIeFJ8AOdG6uqlCgLlW9H
6bej7pb738JxV8eDSTGJisgYOextzRnkyalgi5oEVbPIy8bjurRxfsmre/++Jg+n
rIEqMLFrRBl+wVLFUHKY9DvrM9Hn52XoIEO/9eEzDKsbQrVR62HoYxCOPU0111Hr
W+lKKvMN/QIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFOUWWAYXwMZe0Ea4IT+i6o6M
JkHwMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6
Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh
MzI2NDMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzMzMzMzQzOTMyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcEJgL+2gLQMA0GCSqGSIb3DQEBCwUAA4IBAQB0bD7ZvDPd1P915wujC/5P
byQDzctOcdc3MMgG0WkPraOrtDnterswZ5ppk/CRpTN3iOc578bn9z+pa7lKL7FJ
dR8RYmLdgpUbFtE+KwJbYrFvMVilwrHZOcDI/2hrtq20qN/1smo1aEwZu5pUoFUE
U9vaUm+s7cFubFFE8b/VbhueXbeYcrDv1m0a9jeIQUQu5Mi/YqwlykrbDpXK+Y5S
nItlafbqCb8JJPf5gQxeDmfVcYX5nuinW3IWStfm/PjAL2djwiwK1HL3XM4EWyWa
YEEExDDYSadaHYV/KwTPX9jxxUB30hOYhooMWDTjki41tD65/u/V00epb0W/MxmX
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:31 2025 by rpki-client