Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a33303a3a2f34342d3434203d3e203436393937.roa
File:                     323630323a666564613a33303a3a2f34342d3434203d3e203436393937.roa (raw, json)
Hash identifier:          ecCbxW7b9/xwWOsQZsMf9OHG3ULoimcFDxIvB8eai5M=
Subject key identifier:   9F:50:D6:6E:42:4D:DD:28:93:BE:B8:0C:D6:4E:CD:04:4C:CF:86:39
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       0A37FBE42E78BFD125690B53D0AB6B932E0A2045
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a33303a3a2f34342d3434203d3e203436393937.roa
Signing time:             Mon 14 Aug 2023 07:53:41 +0000
ROA not before:           Mon 14 Aug 2023 07:48:41 +0000
ROA not after:            Mon 12 Aug 2024 07:53:41 +0000
asID:                     46997
IP address blocks:        2602:feda:30::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:37:fb:e4:2e:78:bf:d1:25:69:0b:53:d0:ab:6b:93:2e:0a:20:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:41 2023 GMT
            Not After : Aug 12 07:53:41 2024 GMT
        Subject: CN=9F50D66E424DDD2893BEB80CD64ECD044CCF8639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c5:ea:18:d9:17:93:b5:b8:2e:f3:a0:6b:0e:
                    fc:24:2b:f0:43:0a:34:9e:8b:73:8f:08:8a:ed:89:
                    8f:63:b8:19:8f:ef:5d:84:d3:64:9e:80:fa:78:4c:
                    2c:59:1d:af:00:3a:0c:30:0a:0f:12:7f:0c:21:9a:
                    e0:d5:5d:34:ea:22:4c:b4:8b:24:95:c3:0d:49:23:
                    cd:b5:81:63:d3:3a:c3:73:a0:53:f2:d9:5f:8b:a0:
                    49:da:ff:86:71:15:53:fd:71:0c:3a:34:19:3e:a1:
                    56:fe:47:74:5e:1b:0d:60:3e:c1:4d:e3:57:b0:58:
                    95:6d:a5:6a:ac:0b:2c:d2:f7:35:22:93:40:e1:4b:
                    09:8b:60:b1:8a:1a:a4:86:12:93:90:53:3c:2c:3a:
                    89:48:73:e4:ae:b4:85:16:38:63:7f:85:ba:05:ba:
                    ac:b8:1d:fe:60:d6:4b:53:ab:40:f9:a3:1f:21:90:
                    a0:63:35:c2:cf:32:b0:b9:f7:25:f7:be:5a:9b:75:
                    bf:bc:2f:75:56:1f:eb:02:df:6e:72:04:a2:61:d3:
                    29:38:d7:6a:8f:37:e1:b8:81:4e:40:c2:79:3b:bb:
                    4e:f4:de:6e:00:9c:21:3a:03:31:9f:4e:a0:41:18:
                    b0:eb:bd:41:3f:38:d4:55:92:fc:f9:fc:ac:e5:76:
                    59:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:50:D6:6E:42:4D:DD:28:93:BE:B8:0C:D6:4E:CD:04:4C:CF:86:39
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a33303a3a2f34342d3434203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:30::/44

    Signature Algorithm: sha256WithRSAEncryption
         33:dd:7a:7b:04:08:4f:e1:d9:78:0a:ae:6f:81:27:c7:d7:11:
         64:3a:16:9a:9b:fb:cc:7b:8a:04:5b:fb:fb:b4:63:ae:c9:0f:
         fa:d1:51:c9:d8:8d:12:34:34:0b:1a:82:ab:62:47:ba:b4:cd:
         b1:d9:3c:c6:b3:00:f2:53:95:ca:db:b3:05:a2:46:ae:68:64:
         f8:2f:f2:f8:68:2e:95:42:4f:d9:97:e8:9f:ca:3d:e9:63:44:
         f6:05:0d:02:7c:a0:7a:9a:0b:2a:3f:d6:4c:9c:d3:ac:37:88:
         38:81:10:8b:91:80:7e:48:16:ab:f0:2b:8c:d2:53:19:ab:6e:
         ce:94:c1:5e:0e:2c:71:b5:ab:8d:b7:72:73:4b:e9:06:c5:f9:
         ac:7a:10:d4:e7:a6:2e:e3:be:5c:c6:67:f8:34:32:e1:8c:48:
         18:a7:c5:61:87:9b:9c:63:0c:ac:b8:09:ab:8f:fe:d5:75:30:
         cf:d9:1a:9e:88:bb:2e:c3:b5:1d:6c:dd:e0:16:d0:3e:05:22:
         6d:3b:28:ea:c7:e4:55:47:4c:30:6f:66:ad:c0:48:e3:f2:14:
         6b:12:78:ed:0f:9f:7d:a0:70:fb:bc:ca:14:b9:7b:2e:17:10:
         76:81:08:78:a8:45:bc:0a:37:50:09:47:11:17:71:a6:cc:d2:
         3b:a1:e6:0a
-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIUCjf75C54v9ElaQtT0Ktrky4KIEUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjMwODE0MDc0ODQxWhcNMjQwODEyMDc1MzQx
WjAzMTEwLwYDVQQDEyg5RjUwRDY2RTQyNERERDI4OTNCRUI4MENENjRFQ0QwNDRD
Q0Y4NjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cXqGNkXk7W4
LvOgaw78JCvwQwo0notzjwiK7YmPY7gZj+9dhNNknoD6eEwsWR2vADoMMAoPEn8M
IZrg1V006iJMtIsklcMNSSPNtYFj0zrDc6BT8tlfi6BJ2v+GcRVT/XEMOjQZPqFW
/kd0XhsNYD7BTeNXsFiVbaVqrAss0vc1IpNA4UsJi2CxihqkhhKTkFM8LDqJSHPk
rrSFFjhjf4W6BbqsuB3+YNZLU6tA+aMfIZCgYzXCzzKwufcl975am3W/vC91Vh/r
At9ucgSiYdMpONdqjzfhuIFOQMJ5O7tO9N5uAJwhOgMxn06gQRiw671BPzjUVZL8
+fys5XZZDQIDAQABo4ICZzCCAmMwHQYDVR0OBBYEFJ9Q1m5CTd0ok764DNZOzQRM
z4Y5MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwfAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzov
L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez
MzMwM2EzYTJmMzQzNDJkMzQzNDIwM2QzZTIwMzQzNjM5MzkzNy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMH
BCYC/toAMDANBgkqhkiG9w0BAQsFAAOCAQEAM916ewQIT+HZeAqub4Enx9cRZDoW
mpv7zHuKBFv7+7RjrskP+tFRydiNEjQ0CxqCq2JHurTNsdk8xrMA8lOVytuzBaJG
rmhk+C/y+GgulUJP2Zfon8o96WNE9gUNAnygepoLKj/WTJzTrDeIOIEQi5GAfkgW
q/ArjNJTGatuzpTBXg4scbWrjbdyc0vpBsX5rHoQ1OemLuO+XMZn+DQy4YxIGKfF
YYebnGMMrLgJq4/+1XUwz9kanoi7LsO1HWzd4BbQPgUibTso6sfkVUdMMG9mrcBI
4/IUaxJ47Q+ffaBw+7zKFLl7LhcQdoEIeKhFvAo3UAlHERdxpszSO6HmCg==
-----END CERTIFICATE-----
Generated at Sat May 4 08:52:00 2024 by rpki-client on console-ams.rpki-client.org