Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa
File:                     323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa (raw, json)
Hash identifier:          l5uVvuRFXGxxzLOgrrYzWta/EOcUnYC6hyFLWE+Tc7c=
Subject key identifier:   FF:2F:CA:2D:3D:18:0C:F9:36:9B:FB:66:01:83:1F:14:FC:25:6B:21
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       2DBD18387E1B34DF1160B0DDA4B509B60B6B70F0
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa
Signing time:             Mon 14 Aug 2023 07:53:35 +0000
ROA not before:           Mon 14 Aug 2023 07:48:35 +0000
ROA not after:            Mon 12 Aug 2024 07:53:35 +0000
asID:                     137256
IP address blocks:        2602:feda:3a8::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:bd:18:38:7e:1b:34:df:11:60:b0:dd:a4:b5:09:b6:0b:6b:70:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:35 2023 GMT
            Not After : Aug 12 07:53:35 2024 GMT
        Subject: CN=FF2FCA2D3D180CF9369BFB6601831F14FC256B21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:4f:22:d4:04:90:13:3a:2c:c4:17:73:7b:
                    9e:a1:64:05:87:00:2a:a6:15:33:8f:7d:ec:b1:4a:
                    e8:60:4a:1e:bf:3b:87:ce:8b:f5:7e:4e:12:6c:7c:
                    08:52:e8:17:46:9e:bc:c7:02:fd:b4:1f:0e:cb:f2:
                    0d:08:fb:b0:0d:88:1f:60:91:4c:85:59:13:75:ff:
                    3b:3b:0b:d1:3e:3f:d3:16:db:6f:e4:34:97:c1:60:
                    b1:f2:c5:7a:4a:b5:d7:51:ab:16:c3:63:b2:3b:10:
                    bd:cb:3e:ee:72:79:55:0f:88:1d:ec:65:45:29:97:
                    4a:1e:c4:28:95:12:04:ee:e6:b8:a8:59:72:10:22:
                    f1:a8:7b:e5:a2:17:a0:0a:9b:23:08:9f:b6:73:f5:
                    53:62:0b:74:70:21:69:a3:85:be:27:0e:7a:ef:4d:
                    0a:56:57:86:26:1d:25:09:b4:9c:c1:f5:5c:57:97:
                    d2:f4:f4:7a:1d:82:d7:c2:85:50:ce:9d:d2:1f:61:
                    07:14:6c:10:fd:b2:4b:90:2a:9e:53:53:0b:bc:2d:
                    0f:be:41:49:fd:de:d3:72:35:84:b0:5e:fd:2c:24:
                    8a:0f:7a:21:59:ec:25:6f:fa:c8:de:b4:16:92:a7:
                    7c:ad:90:fc:80:c2:08:6a:4e:e5:c9:24:91:84:6a:
                    a6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2F:CA:2D:3D:18:0C:F9:36:9B:FB:66:01:83:1F:14:FC:25:6B:21
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:3a8::/45

    Signature Algorithm: sha256WithRSAEncryption
         2a:04:44:17:d1:f7:f8:dc:83:a8:6d:6f:70:7a:6f:83:27:76:
         17:ed:b3:e8:dd:9f:25:ff:87:ab:3d:f7:35:66:a2:10:e6:03:
         39:df:cd:e3:3e:45:a7:75:d6:5f:5a:03:b2:9d:64:64:80:47:
         e2:b2:3f:db:9c:d0:6f:06:6d:be:a1:3d:62:ba:dc:18:12:e8:
         66:77:26:ad:7d:1e:bc:c4:f5:de:8c:a1:fa:8a:02:0c:74:01:
         b5:9d:85:f9:5f:88:73:53:95:60:c3:15:48:a1:b1:89:d7:8d:
         a5:38:58:9a:f4:4b:82:9f:99:a9:fe:6e:e3:a5:00:b1:88:45:
         c8:4b:ed:46:c5:5e:30:0e:00:b8:d6:62:d9:f2:fa:6f:34:48:
         d1:70:63:c2:3b:5f:30:00:13:70:f7:92:9d:d4:45:5b:45:9b:
         e8:5f:7d:d0:e2:87:8d:47:2c:c0:38:00:fc:ed:3b:bd:97:70:
         cb:f7:4b:c8:b8:c4:95:19:34:18:94:60:e1:8e:29:9e:bf:95:
         07:ee:ae:88:d9:7d:32:d6:22:f5:5a:f7:81:7d:65:7f:55:58:
         8a:00:32:68:7f:3b:28:f3:b9:6a:88:ab:e8:2b:fc:2f:b7:74:
         16:7e:32:c3:b8:2b:c7:72:32:2d:45:0f:42:3a:04:9a:f3:72:
         a9:30:d2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:11:41 2024 by rpki-client on console-ams.rpki-client.org