Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3266303a3a2f34342d3438203d3e20313333343932.roa
File:                     323630323a666564613a3266303a3a2f34342d3438203d3e20313333343932.roa (raw, json)
Hash identifier:          E4RNAkw+EDnBPUQ4bV2KmMfkMUpujgI1vug2dAL/E/E=
Subject key identifier:   70:82:30:C0:CB:B2:9E:FD:03:AE:A6:A5:6F:71:C2:1D:CC:DB:CA:60
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       1B6725CD6D3AADDC85A408393066661513EF65BA
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3266303a3a2f34342d3438203d3e20313333343932.roa
Signing time:             Mon 15 Jul 2024 08:50:10 +0000
ROA not before:           Mon 15 Jul 2024 08:45:10 +0000
ROA not after:            Mon 14 Jul 2025 08:50:10 +0000
asID:                     133492
IP address blocks:        2602:feda:2f0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:67:25:cd:6d:3a:ad:dc:85:a4:08:39:30:66:66:15:13:ef:65:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:10 2024 GMT
            Not After : Jul 14 08:50:10 2025 GMT
        Subject: CN=708230C0CBB29EFD03AEA6A56F71C21DCCDBCA60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cb:43:79:a5:50:ac:8b:6d:dc:b6:6b:b3:7c:
                    39:98:bb:b9:c7:ab:8e:2e:81:95:cf:bd:62:af:a6:
                    04:cb:f2:31:5a:dd:bb:4b:2f:01:66:db:7f:a7:94:
                    ef:95:85:bd:ab:ea:7a:01:a4:ae:a8:e0:71:8f:38:
                    ab:71:73:7d:d0:ec:6c:7a:1b:0b:fa:70:ad:a7:b3:
                    c7:59:a4:02:02:c3:35:e0:73:ad:88:f9:ad:82:d4:
                    19:8a:93:8a:74:ea:99:57:c7:d4:b0:73:49:dd:cd:
                    2e:82:9f:d4:e4:a6:90:a3:66:a3:d1:02:0e:77:c3:
                    28:e7:4d:50:74:78:f8:76:46:17:b3:2f:ce:81:61:
                    c2:6b:a8:78:2d:8b:75:fb:0b:f7:4f:ac:9e:bb:75:
                    7a:ec:05:f2:0f:f4:01:c1:d0:ed:73:c3:b4:fb:db:
                    e7:00:62:7e:ec:0d:95:53:5a:fc:6c:bd:04:25:8b:
                    ce:3b:a6:70:b6:80:a7:55:75:d8:10:b2:48:c0:f7:
                    37:3b:19:cd:60:7e:ce:c3:c1:f9:52:12:41:7f:c8:
                    5e:19:ca:6b:f0:38:b8:b3:5d:50:1f:46:e9:50:13:
                    8a:f8:a3:f8:2b:1b:f5:4b:9d:19:fc:50:c7:5f:80:
                    e6:2d:2a:02:76:c8:35:8e:90:9a:e9:4d:5d:ae:11:
                    f2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:82:30:C0:CB:B2:9E:FD:03:AE:A6:A5:6F:71:C2:1D:CC:DB:CA:60
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3266303a3a2f34342d3438203d3e20313333343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:2f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a6:a8:0e:8b:a2:10:1d:58:ef:28:74:16:c9:f9:bb:d9:57:fe:
         9f:e4:f4:9b:90:fd:1d:b3:eb:51:2f:14:29:13:ad:dc:0e:31:
         b9:d2:0b:8c:3b:fd:1a:a9:b2:22:31:07:bb:27:68:ac:a7:76:
         91:d1:fa:b1:a6:d9:61:d6:87:1f:e1:d3:08:63:cf:3a:8f:3a:
         f6:de:36:f0:0d:40:dd:9b:c8:94:f0:ba:a7:a8:7f:b8:6a:a3:
         39:a8:91:a1:3e:1f:16:91:be:2f:9f:bf:b4:63:6d:2f:67:93:
         e3:23:ba:79:df:13:eb:04:f7:28:14:60:8d:57:c8:90:c3:28:
         66:42:bd:43:9c:cb:9c:16:0b:ca:09:98:58:be:e1:c7:35:a0:
         e2:e2:ea:2c:9e:1c:56:9c:28:32:62:24:75:67:55:b3:83:cd:
         14:56:c6:01:cd:93:79:4c:79:4e:d2:c0:d0:d3:8b:fa:26:37:
         ee:d1:50:44:db:1d:91:b5:2c:c0:78:84:85:87:33:3c:4d:9a:
         ca:e0:08:22:a9:d5:69:7f:2a:f8:4e:32:01:c2:63:8d:99:e9:
         4c:43:61:8a:b8:23:6f:36:d6:38:c4:0a:da:4f:6e:01:92:36:
         a1:bc:b6:b1:08:35:61:7a:e9:2b:6e:34:8d:c1:cf:1e:2e:2c:
         69:58:27:b6
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUG2clzW06rdyFpAg5MGZmFRPvZbowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTEwWhcNMjUwNzE0MDg1MDEw
WjAzMTEwLwYDVQQDEyg3MDgyMzBDMENCQjI5RUZEMDNBRUE2QTU2RjcxQzIxREND
REJDQTYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMtDeaVQrItt
3LZrs3w5mLu5x6uOLoGVz71ir6YEy/IxWt27Sy8BZtt/p5TvlYW9q+p6AaSuqOBx
jzircXN90OxsehsL+nCtp7PHWaQCAsM14HOtiPmtgtQZipOKdOqZV8fUsHNJ3c0u
gp/U5KaQo2aj0QIOd8Mo501QdHj4dkYXsy/OgWHCa6h4LYt1+wv3T6yeu3V67AXy
D/QBwdDtc8O0+9vnAGJ+7A2VU1r8bL0EJYvOO6ZwtoCnVXXYELJIwPc3OxnNYH7O
w8H5UhJBf8heGcpr8Di4s11QH0bpUBOK+KP4Kxv1S50Z/FDHX4DmLSoCdsg1jpCa
6U1drhHykQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFHCCMMDLsp79A66mpW9xwh3M
28pgMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6
Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh
MzI2NjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzMzMzMzQzOTMyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcEJgL+2gLwMA0GCSqGSIb3DQEBCwUAA4IBAQCmqA6LohAdWO8odBbJ+bvZ
V/6f5PSbkP0ds+tRLxQpE63cDjG50guMO/0aqbIiMQe7J2isp3aR0fqxptlh1ocf
4dMIY886jzr23jbwDUDdm8iU8LqnqH+4aqM5qJGhPh8Wkb4vn7+0Y20vZ5PjI7p5
3xPrBPcoFGCNV8iQwyhmQr1DnMucFgvKCZhYvuHHNaDi4uosnhxWnCgyYiR1Z1Wz
g80UVsYBzZN5THlO0sDQ04v6Jjfu0VBE2x2RtSzAeISFhzM8TZrK4AgiqdVpfyr4
TjIBwmONmelMQ2GKuCNvNtY4xAraT24BkjahvLaxCDVheukrbjSNwc8eLixpWCe2
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:07 2024 by rpki-client on console-ams.rpki-client.org