Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313430393133.roa
File:                     323630323a666564613a3361383a3a2f34352d3438203d3e20313430393133.roa (raw, json)
Hash identifier:          AOSJbO77g7l15kDLxx76FdkkukuddgmoWKhXOB6XoTM=
Subject key identifier:   1F:B5:ED:BF:28:74:39:23:15:02:5C:CF:70:DE:BA:E7:A9:7B:F2:54
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       309221ADF77D07B2C98D02986E907CD30120D1D4
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313430393133.roa
Signing time:             Mon 15 Jul 2024 08:50:05 +0000
ROA not before:           Mon 15 Jul 2024 08:45:05 +0000
ROA not after:            Mon 14 Jul 2025 08:50:05 +0000
asID:                     140913
IP address blocks:        2602:feda:3a8::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:92:21:ad:f7:7d:07:b2:c9:8d:02:98:6e:90:7c:d3:01:20:d1:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:05 2024 GMT
            Not After : Jul 14 08:50:05 2025 GMT
        Subject: CN=1FB5EDBF2874392315025CCF70DEBAE7A97BF254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:87:25:af:cd:19:0d:6c:03:49:cd:88:25:6e:
                    b6:e8:2b:f0:cf:35:97:6f:be:7e:96:51:2c:1b:1d:
                    59:05:1b:92:c8:ff:d2:c8:7a:78:31:f4:da:44:5d:
                    0b:fe:40:4d:47:77:03:ed:60:28:df:6d:5d:d4:51:
                    cd:d2:42:b7:d1:2e:9f:c4:b5:fa:0b:9e:6f:b1:26:
                    31:6d:36:e8:13:da:03:23:5c:7d:bf:b0:53:9e:05:
                    90:fb:c8:33:a3:a7:7d:c0:aa:77:70:6c:5a:f0:7c:
                    eb:20:71:bd:bf:19:f8:f4:17:d6:6e:23:43:d8:78:
                    16:e3:51:f0:61:fc:44:2f:89:80:7a:d8:c2:ab:8d:
                    84:00:2b:30:30:0d:9a:ab:38:7e:69:c5:6f:58:e1:
                    69:02:58:c3:18:51:ed:88:05:57:34:4c:f6:15:73:
                    2b:43:0c:5d:68:68:b9:56:d2:d4:8a:59:5b:21:20:
                    e4:f9:44:90:34:d1:42:66:0c:ac:bb:f2:8e:57:fd:
                    d3:60:02:3a:f7:d3:f9:41:fd:7a:33:2b:3d:cc:cd:
                    50:5a:d6:b3:6e:93:d6:ad:3a:6f:e6:f2:b2:6b:30:
                    d4:fe:d9:0c:af:09:bc:ee:da:01:aa:c0:f8:11:2b:
                    6e:23:96:75:ab:77:22:40:4e:c8:c5:d4:87:de:c9:
                    f3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B5:ED:BF:28:74:39:23:15:02:5C:CF:70:DE:BA:E7:A9:7B:F2:54
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313430393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:3a8::/45

    Signature Algorithm: sha256WithRSAEncryption
         25:d7:ab:6e:9f:89:45:6f:29:7a:01:58:76:8b:7a:4e:93:f7:
         14:e0:bb:c1:b3:1b:6b:10:55:e0:5b:be:89:e2:c7:c5:93:26:
         fb:e0:ab:c6:77:72:64:60:77:c2:3c:45:89:23:be:76:fb:91:
         37:77:6c:e2:0e:90:74:c7:94:ab:eb:09:99:6e:84:f0:70:88:
         1d:c7:41:5e:44:fd:c3:ac:a0:e9:6c:79:3c:47:9b:49:da:ce:
         d9:e7:5b:42:89:62:9e:2d:1c:ab:7d:ce:c0:54:49:27:0a:f3:
         4a:5e:5a:7f:6c:28:17:88:6c:ee:a2:d7:bd:92:b9:69:b9:7f:
         41:b1:a1:06:a1:e8:c8:3b:77:6f:42:1a:be:18:f7:be:02:89:
         b3:12:ce:4b:19:22:1b:b2:b1:50:a3:f9:5e:50:79:d0:19:5c:
         2b:e8:a4:bf:c3:33:50:c8:2e:2f:c9:cc:08:0a:9a:07:be:03:
         38:b9:8c:6b:ca:e4:a5:67:df:24:b6:46:c3:b2:a8:b0:f0:da:
         9f:8e:a1:95:04:25:02:65:8c:ca:f3:8c:70:35:01:ff:89:ef:
         8c:b3:60:b5:49:c2:4d:f5:07:90:5f:21:3d:6c:c6:2e:f8:1d:
         9e:d2:c1:57:d8:7f:ab:77:e5:59:97:6b:7a:12:95:85:3e:14:
         26:f9:c6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:02 2024 by rpki-client on console-fra.rpki-client.org