Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa
File:                     323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa (raw, json)
Hash identifier:          FgNV3nGmfjOSJ8LBO6/GQQBqM3EE8m1U41ZVMBZLmpI=
Subject key identifier:   93:AE:AC:5E:6A:F4:83:F1:C8:8B:F4:53:77:26:2A:5C:F7:4C:27:72
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       2F3F9EB5D367A0F8B0BEB5277719F4BC7116D4EE
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa
Signing time:             Mon 15 Jul 2024 08:50:12 +0000
ROA not before:           Mon 15 Jul 2024 08:45:12 +0000
ROA not after:            Mon 14 Jul 2025 08:50:12 +0000
asID:                     137256
IP address blocks:        2602:feda:3a8::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3f:9e:b5:d3:67:a0:f8:b0:be:b5:27:77:19:f4:bc:71:16:d4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:12 2024 GMT
            Not After : Jul 14 08:50:12 2025 GMT
        Subject: CN=93AEAC5E6AF483F1C88BF45377262A5CF74C2772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e2:7e:28:72:b3:a5:d0:04:58:e2:f4:6c:5f:
                    ee:8b:64:88:36:0d:20:47:7a:0f:d9:9b:1a:40:1b:
                    4f:97:e0:a4:a3:46:1f:fa:90:58:92:47:b0:39:8e:
                    02:e7:db:7d:28:23:45:47:19:e2:76:ea:e8:06:8d:
                    71:06:04:27:e2:2e:41:a9:66:65:f5:e6:a0:c7:75:
                    2f:bf:e4:27:31:54:4c:8b:a7:4c:ee:f7:c1:e5:f7:
                    51:3f:cf:f2:ca:ef:22:9e:da:e7:36:f4:78:ba:24:
                    90:03:6c:e8:d7:6a:94:5d:9e:44:ce:40:5d:be:f6:
                    df:43:a6:da:ac:53:0b:45:d4:d7:85:4a:eb:6c:ad:
                    25:ff:61:15:00:28:23:14:92:15:c2:fa:48:e1:01:
                    6b:4d:0d:cf:b5:bf:3d:34:6b:63:ce:c8:4a:4e:3f:
                    1c:93:91:6a:c4:21:01:25:2f:ba:da:fd:c8:11:33:
                    27:85:32:96:ce:51:48:7b:80:2b:6e:84:f1:ee:8b:
                    2e:57:f6:f7:1d:51:3d:23:88:73:d3:e7:d1:a1:23:
                    ce:83:c0:19:33:26:bf:f3:5e:b1:bd:73:ed:9c:db:
                    9d:0a:61:df:20:08:d3:ae:b5:92:3a:3d:76:3e:7d:
                    f5:08:5c:df:82:7c:82:c3:7e:51:fd:74:f0:65:87:
                    e1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AE:AC:5E:6A:F4:83:F1:C8:8B:F4:53:77:26:2A:5C:F7:4C:27:72
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313337323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:3a8::/45

    Signature Algorithm: sha256WithRSAEncryption
         74:20:00:f1:09:07:3f:81:4e:1c:9d:6b:ae:f9:cd:7a:57:0b:
         e7:29:57:db:bc:59:39:4d:91:f5:85:dd:02:e5:d5:a3:39:88:
         5d:a4:25:b2:0d:c0:fe:a6:80:b4:fa:a4:1b:77:42:6b:c9:5d:
         c9:42:b4:77:e5:75:a8:86:69:a8:c3:f8:d1:6d:78:07:3f:cf:
         47:7a:ac:3d:dd:2f:f4:7f:2f:77:4e:13:fe:58:4a:81:02:84:
         19:7b:10:67:86:ce:58:f5:be:d7:84:d8:f7:8b:cd:cc:e9:39:
         84:0e:1d:18:86:31:75:cd:01:5f:c1:5f:38:ac:4a:46:ff:24:
         39:52:61:29:4a:e2:8f:20:e3:b4:d7:35:40:3d:e4:8a:eb:6b:
         4d:25:29:1e:f6:8f:c2:9e:0f:31:ad:00:91:ab:80:b5:26:c3:
         e9:23:88:6e:bc:a8:ba:01:7d:56:5e:99:81:42:74:37:62:66:
         b0:84:2a:4a:22:02:e1:60:84:13:a2:ae:8f:56:58:42:8c:01:
         8a:5b:eb:84:3d:63:7e:b5:0f:7d:af:17:af:a5:aa:84:05:33:
         ba:93:3a:80:16:c0:95:11:31:37:35:52:62:81:85:c2:f8:9e:
         6d:d8:33:6b:e1:9e:e2:b7:5c:d4:86:92:0b:70:62:2d:f1:94:
         cb:97:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:07 2024 by rpki-client on console-ams.rpki-client.org