Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3364303a3a2f34342d3438203d3e20323133333631.roa
File:                     323630323a666564613a3364303a3a2f34342d3438203d3e20323133333631.roa (raw, json)
Hash identifier:          4Fg24rHsJ9JNSWoOmXgJqOYnIKxEZMF6DCNp/mHSZYw=
Subject key identifier:   CF:69:08:4F:57:8C:9B:33:28:05:B0:8D:6F:41:F2:8E:52:7B:0C:E1
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       46DD0452E9C1A9ABC401E0DE397A2D547845D721
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3364303a3a2f34342d3438203d3e20323133333631.roa
Signing time:             Mon 14 Aug 2023 07:53:30 +0000
ROA not before:           Mon 14 Aug 2023 07:48:30 +0000
ROA not after:            Mon 12 Aug 2024 07:53:30 +0000
asID:                     213361
IP address blocks:        2602:feda:3d0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:dd:04:52:e9:c1:a9:ab:c4:01:e0:de:39:7a:2d:54:78:45:d7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:30 2023 GMT
            Not After : Aug 12 07:53:30 2024 GMT
        Subject: CN=CF69084F578C9B332805B08D6F41F28E527B0CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:55:aa:84:f1:02:20:be:79:f1:1c:05:5a:
                    92:6e:bb:c9:e8:85:43:13:0b:c3:7b:68:29:1a:94:
                    10:9f:b9:fd:37:75:65:a0:77:ad:e6:9a:9c:38:c6:
                    c6:45:a6:27:2e:54:7e:1d:5b:61:77:50:a5:94:ed:
                    d7:7d:63:64:1b:79:91:c9:c2:09:35:b9:d8:ab:20:
                    17:c9:84:cc:5a:cb:85:47:72:42:0d:ee:4d:74:03:
                    3b:90:c8:6e:93:dd:fb:73:e3:6c:33:fd:51:13:99:
                    3c:d4:90:99:21:2b:61:57:44:a0:01:90:9c:f1:23:
                    7a:56:d9:73:ea:27:d9:9c:f6:23:7c:dd:ae:6d:9d:
                    01:28:d6:02:09:b9:ce:c6:0b:52:7d:9f:ef:80:a3:
                    e1:cb:bb:bb:37:41:a5:e2:f6:9d:ca:f9:09:bb:2d:
                    30:e8:76:1d:61:47:f5:0a:7f:e4:52:e6:88:6b:c3:
                    e0:1a:a1:6e:3e:52:be:d7:60:9a:31:4a:fa:f0:6b:
                    0b:0b:90:ff:3f:fe:c6:d8:5f:c6:93:c1:76:17:7f:
                    3d:a0:fa:42:00:a0:33:5b:b4:14:93:05:ec:de:b5:
                    d0:c5:06:70:df:3b:38:d9:13:33:e8:32:42:42:75:
                    2f:83:1a:5f:11:19:42:b5:3e:2e:16:90:af:f0:99:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:69:08:4F:57:8C:9B:33:28:05:B0:8D:6F:41:F2:8E:52:7B:0C:E1
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3364303a3a2f34342d3438203d3e20323133333631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:3d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:1b:4a:8f:3d:c7:3e:ba:21:11:ce:48:0e:aa:05:de:c9:2d:
         7c:e3:71:c5:20:d2:a4:85:f0:71:a4:55:0c:27:da:ca:7d:f0:
         a1:46:20:4e:d2:a7:d7:4f:32:19:70:6b:6f:dd:0d:fe:18:5a:
         d8:96:04:2e:a7:f4:11:d9:7f:50:0c:ff:8f:a5:84:35:b3:37:
         f4:4e:a6:08:7f:22:ef:4d:2d:b3:5a:33:1c:15:f1:33:3f:60:
         2c:0e:f0:44:4b:6d:5b:c0:73:c5:04:31:8f:24:4e:ce:6f:c6:
         4a:71:0d:26:fe:fd:9e:c5:c1:bd:c1:bf:d8:ee:e0:cc:15:a6:
         e1:25:eb:be:65:fe:36:97:de:71:d8:50:a8:41:6a:66:90:53:
         31:25:23:44:74:56:3a:3b:64:59:28:f9:da:9d:5f:d2:54:c0:
         9a:89:0b:e1:5a:8c:4f:dc:87:d8:18:e5:dd:c4:d4:92:e1:e6:
         e4:29:ab:30:53:44:71:02:58:6e:52:46:63:73:95:22:0d:a3:
         38:3b:fb:4b:ca:d6:b7:0d:ee:58:65:01:ed:68:7c:6c:1c:79:
         e7:94:19:5c:1f:75:8c:45:f1:2a:24:65:5c:0a:26:eb:54:5d:
         9d:5a:be:4e:67:f2:59:5e:36:50:45:8a:4d:78:78:5e:f1:34:
         3d:dc:63:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:11:41 2024 by rpki-client on console-ams.rpki-client.org