Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a333a3a2f34382d3438203d3e203436393937.roa
File:                     323630323a666564613a333a3a2f34382d3438203d3e203436393937.roa (raw, json)
Hash identifier:          eFrP4/YVnaUXcVWuzNTszqBKhzVuqcs5Bt7Q+jG4zao=
Subject key identifier:   6C:F6:29:52:F6:17:42:DD:52:3C:0E:C8:0F:DC:88:DC:97:F0:8B:54
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       209B18FC67B018F53616E37F87FBA1C5276AAD28
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a333a3a2f34382d3438203d3e203436393937.roa
Signing time:             Mon 14 Aug 2023 07:53:38 +0000
ROA not before:           Mon 14 Aug 2023 07:48:38 +0000
ROA not after:            Mon 12 Aug 2024 07:53:38 +0000
asID:                     46997
IP address blocks:        2602:feda:3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:9b:18:fc:67:b0:18:f5:36:16:e3:7f:87:fb:a1:c5:27:6a:ad:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:38 2023 GMT
            Not After : Aug 12 07:53:38 2024 GMT
        Subject: CN=6CF62952F61742DD523C0EC80FDC88DC97F08B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:d5:2d:62:dc:4f:8d:1a:09:52:6a:ba:44:
                    74:b4:bd:d6:55:33:01:d6:74:26:5d:0a:b2:56:ac:
                    df:7e:a9:b8:d7:7e:f7:d2:1b:db:ed:9c:a2:59:52:
                    9a:69:42:34:35:de:b1:df:99:bd:00:0f:e9:61:8c:
                    1c:a9:c8:84:88:b9:d3:21:96:bc:61:a4:e4:9b:13:
                    05:9b:94:e7:c0:6f:d9:e2:2f:c4:28:08:5c:3b:4d:
                    f8:82:b6:2b:49:61:3c:bf:56:d8:07:24:f7:92:13:
                    e8:4e:0d:fe:94:f6:ad:dd:b7:0d:33:fe:26:5a:4d:
                    91:cc:5f:59:e4:55:e7:99:a0:8b:9f:6a:91:dd:d6:
                    72:74:1c:7f:8a:57:77:8b:60:bf:a5:ae:26:00:ec:
                    88:06:17:38:c5:4d:36:69:a7:89:fe:b2:fd:65:6c:
                    77:5e:2c:1e:0e:fe:f1:a0:ce:8e:28:ed:c8:b2:9f:
                    fa:c3:b1:28:0e:5a:b1:64:e0:6e:8c:e9:6a:5f:0c:
                    70:e0:19:14:c1:15:66:a7:d3:01:34:0f:cf:cd:4a:
                    5d:b6:65:ed:75:9d:3b:47:33:8d:8e:3b:9c:81:a7:
                    46:c3:9d:ff:2b:54:74:0c:59:30:ee:08:03:a3:12:
                    30:5d:de:60:b3:dc:53:b7:c0:96:8f:8e:d8:ed:69:
                    7b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F6:29:52:F6:17:42:DD:52:3C:0E:C8:0F:DC:88:DC:97:F0:8B:54
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a333a3a2f34382d3438203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:01:e8:b2:3d:d0:3b:13:bd:67:4b:3c:bb:f2:35:e7:b9:a2:
         b3:22:be:95:ee:4b:e2:d7:b5:f7:46:e4:a2:2a:83:df:b5:00:
         44:f4:fd:3e:6b:5b:8b:f1:64:8e:e1:8c:41:80:e3:f5:15:f3:
         1a:a7:8e:37:e9:30:b2:42:0a:7d:ec:a6:aa:3b:f0:6c:67:60:
         8c:6a:71:f6:8a:71:04:85:c8:9f:71:f9:a8:49:df:1d:1d:2f:
         49:92:98:dd:41:be:ce:33:34:bb:0d:de:8a:9a:34:a7:38:96:
         64:2b:2f:b7:be:ec:fc:96:91:ad:38:be:fb:cc:cf:7e:93:7a:
         9e:65:eb:77:ec:02:ca:12:b8:18:9e:81:33:46:37:be:1a:2c:
         f5:53:ff:04:83:4e:09:97:6d:df:38:e4:08:ec:33:bb:a2:ac:
         c6:29:1a:37:22:a3:36:88:1d:86:13:92:d8:63:e0:82:fc:85:
         a7:ac:8c:5d:eb:00:ec:f3:60:15:49:0b:58:29:4c:ff:81:1f:
         cf:5a:3c:08:19:aa:12:2f:f9:65:8b:55:e2:05:60:0d:5d:2e:
         20:a7:bf:dd:f9:3a:ec:47:e7:85:0d:b1:d2:79:49:fd:34:56:
         43:94:ae:bc:3b:4f:bb:54:8b:72:a2:92:f8:de:06:4f:a1:a2:
         6b:d9:de:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:30:34 2024 by rpki-client on console-fra.rpki-client.org