Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313431373036.roa
File:                     323630323a666564613a3361383a3a2f34352d3438203d3e20313431373036.roa (raw, json)
Hash identifier:          groU/IZe6pROmS70llbgtsChGN/Lz4T31AvSgpaUrXg=
Subject key identifier:   F8:72:40:7A:96:61:A8:92:53:2F:60:A2:0B:AF:F8:6B:24:2C:2E:8F
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       6373D60815E395D84C10002056113F5C79A68AB6
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313431373036.roa
Signing time:             Mon 15 Jul 2024 08:50:05 +0000
ROA not before:           Mon 15 Jul 2024 08:45:05 +0000
ROA not after:            Mon 14 Jul 2025 08:50:05 +0000
asID:                     141706
IP address blocks:        2602:feda:3a8::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:73:d6:08:15:e3:95:d8:4c:10:00:20:56:11:3f:5c:79:a6:8a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:05 2024 GMT
            Not After : Jul 14 08:50:05 2025 GMT
        Subject: CN=F872407A9661A892532F60A20BAFF86B242C2E8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:78:5a:3f:09:d2:bd:e9:7e:9e:df:a4:7c:48:
                    67:51:7f:16:db:1c:e2:10:65:7f:01:68:88:45:29:
                    a2:8e:83:8a:68:72:26:52:fc:4d:99:38:d1:66:fb:
                    67:bf:c0:59:aa:eb:5c:d9:e2:ff:64:0a:35:2c:99:
                    0f:74:c0:46:11:b9:bd:87:6d:93:d4:ee:4c:26:e5:
                    ea:d4:e8:28:75:56:f4:8c:35:d8:33:b0:6a:e6:f9:
                    eb:66:5a:54:28:de:53:8c:01:32:1d:ca:04:87:f9:
                    d7:ea:db:37:7f:19:ca:57:b0:03:24:59:44:f1:45:
                    bb:77:09:1e:85:46:4e:a7:64:41:24:b1:d6:d0:3f:
                    e1:a5:a3:6f:5c:f8:5e:d4:ef:e7:c3:90:ba:0a:ac:
                    22:5e:7a:53:a8:41:32:3b:e0:d5:78:32:29:2c:9f:
                    ff:6c:e8:30:a1:f7:dd:a8:4f:d9:0d:a9:3d:05:eb:
                    86:64:76:52:3e:1b:a8:3a:ae:db:1e:d9:81:a1:3b:
                    45:1f:d4:56:9c:ae:f8:d0:50:50:dc:1a:30:d6:89:
                    87:53:3c:36:40:cf:cc:b4:1a:aa:d0:c4:6a:f1:ef:
                    a2:d9:82:82:01:68:0f:a4:4e:9b:99:bf:c3:a0:1f:
                    8d:9d:0b:d4:53:13:05:ca:43:e6:d8:d4:82:d8:e4:
                    38:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:72:40:7A:96:61:A8:92:53:2F:60:A2:0B:AF:F8:6B:24:2C:2E:8F
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3361383a3a2f34352d3438203d3e20313431373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:3a8::/45

    Signature Algorithm: sha256WithRSAEncryption
         0d:8b:72:80:81:95:e3:39:05:26:a3:32:9d:e1:4e:52:3b:1d:
         45:ba:be:fd:47:aa:83:09:ea:9d:06:8b:ec:b5:37:36:2e:a4:
         40:f6:1c:61:ec:a7:36:ba:9d:d9:37:b7:5a:bf:c6:dd:5b:94:
         db:42:f1:f8:b8:3b:bf:a0:04:45:dd:44:30:3b:ec:93:25:d1:
         79:b4:6b:50:53:4b:23:ef:be:6f:34:57:54:ee:45:e0:e3:18:
         4d:9d:51:84:d4:dc:19:eb:ab:7c:02:c3:c7:27:20:75:9f:80:
         b6:ea:0e:8a:19:64:45:da:57:5b:e5:89:ae:28:45:12:01:4c:
         22:41:ab:53:09:8c:ec:d2:62:3e:0c:13:1b:1d:74:df:ca:a0:
         34:19:b8:3c:dc:63:37:17:e5:c5:8c:80:35:ff:28:cf:c8:d6:
         df:97:47:7c:a3:4a:08:2c:58:55:c2:53:1e:36:f3:84:9f:d9:
         aa:29:44:1d:a0:c0:5d:22:96:91:ef:26:18:12:f1:cd:5a:7a:
         ae:d0:7e:05:43:37:15:96:c6:0a:d7:55:54:e1:c2:08:00:63:
         a0:8a:88:ff:36:9b:e3:a8:4e:65:e0:01:e1:39:fb:c9:3a:79:
         30:23:9e:d4:d0:c4:ea:55:99:6a:c8:a8:19:13:84:84:98:f1:
         63:a3:cc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:02 2024 by rpki-client on console-fra.rpki-client.org