Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa
File:                     323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa (raw, json)
Hash identifier:          8UpVyqZFk/k88V6tmE9dqp+KnRlmEXMhn3inyJf1R5U=
Subject key identifier:   A9:D2:F0:C4:B8:0A:6C:DD:FA:0B:50:24:AC:F8:AB:6E:EA:ED:F7:0E
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       0E6EBC5DDBB3E91F3795C1B40750FCDB9343CE9B
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa
Signing time:             Mon 15 Jul 2024 08:50:10 +0000
ROA not before:           Mon 15 Jul 2024 08:45:10 +0000
ROA not after:            Mon 14 Jul 2025 08:50:10 +0000
asID:                     134575
IP address blocks:        2602:feda:3b0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 27 Nov 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6e:bc:5d:db:b3:e9:1f:37:95:c1:b4:07:50:fc:db:93:43:ce:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:10 2024 GMT
            Not After : Jul 14 08:50:10 2025 GMT
        Subject: CN=A9D2F0C4B80A6CDDFA0B5024ACF8AB6EEAEDF70E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d3:36:6d:47:25:3e:d9:44:c5:c6:ad:34:f9:
                    99:29:ee:f7:d8:9b:24:f8:c1:20:e2:09:3f:76:c2:
                    01:eb:4e:a1:4e:37:d4:00:e0:64:05:f0:5e:3e:c1:
                    cd:1f:00:f4:5a:8e:0b:27:90:7f:30:74:6e:96:54:
                    29:f3:c0:74:7d:96:0b:4a:e9:a8:76:ee:7b:75:2d:
                    42:9e:bd:4b:c8:0b:7f:63:36:62:49:08:d8:d5:50:
                    bc:ae:b2:1f:de:90:03:f5:3d:45:35:20:33:1a:5f:
                    91:dd:eb:da:9a:a5:dc:97:7a:0b:45:e4:92:f6:f3:
                    f1:22:a6:54:11:f4:f3:93:0c:62:c3:55:c5:8b:f1:
                    18:1f:70:b1:30:41:0c:52:0c:84:f1:e9:22:74:f1:
                    4c:e2:95:3d:a2:92:23:d2:49:88:a6:20:4e:f3:5d:
                    b0:fc:f2:80:6c:d3:28:2c:89:33:71:dd:ea:2f:ba:
                    6e:c3:10:40:01:de:9a:3b:54:9a:de:11:ae:18:84:
                    58:d2:d1:fe:84:24:66:f5:58:88:7f:85:ca:51:d2:
                    72:6a:b9:5a:73:d0:24:53:00:48:e8:7b:a0:35:25:
                    c3:1c:bd:68:9f:70:dc:4c:03:db:30:53:54:30:e3:
                    f1:82:5b:c8:10:d5:cc:1d:0d:6d:66:4e:99:46:bd:
                    3c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:D2:F0:C4:B8:0A:6C:DD:FA:0B:50:24:AC:F8:AB:6E:EA:ED:F7:0E
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3362303a3a2f34342d3438203d3e20313334353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:3b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         bd:8f:4d:9e:d6:f9:6f:0f:6d:ce:90:01:a4:f3:b0:d6:37:e1:
         e5:3f:bc:28:68:64:53:cf:5b:a7:9c:80:ef:2c:0d:74:be:42:
         13:0d:64:70:73:41:16:d4:c7:1b:ac:81:45:87:07:59:e2:c2:
         60:81:8d:61:4b:dc:00:4a:8d:78:ca:e7:87:3c:10:0e:a3:65:
         19:83:ab:20:32:29:73:71:61:49:ea:5e:5e:14:f0:99:25:76:
         fa:c6:e4:6e:eb:9f:dc:16:5a:33:b8:13:86:65:f6:7b:d8:a6:
         7b:d2:39:71:d4:da:70:ee:5e:85:79:7d:92:71:54:2c:de:c4:
         a3:96:ae:d3:79:65:4b:8f:79:c4:98:78:b6:ab:83:46:1b:1b:
         44:cf:be:76:4f:00:38:a5:fc:fa:54:6b:11:3b:fb:20:fd:20:
         a9:29:61:c3:b6:26:3b:a9:2a:75:45:39:74:9f:35:7a:59:f2:
         4e:f0:f7:96:ae:43:74:bc:ef:ed:35:d0:c9:c3:46:c3:c5:58:
         bb:6c:cf:22:c8:1c:40:ed:ec:31:d5:f1:d7:ac:e0:1b:87:92:
         8d:7f:b4:b2:e0:32:31:83:d2:0c:29:47:d2:41:d9:ea:f1:aa:
         7f:44:34:7f:bb:12:ef:cd:57:06:88:c7:d6:d5:82:7a:53:77:
         ba:6f:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:43 2024 by rpki-client on console-fra.rpki-client.org