Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3365303a3a2f34342d3438203d3e20323037363332.roa
File:                     323630323a666564613a3365303a3a2f34342d3438203d3e20323037363332.roa (raw, json)
Hash identifier:          g/+65sOobxnHtJUvsgVlxo9rPARptd/f7CWKY36M6bs=
Subject key identifier:   3F:51:6C:E6:2E:0A:EE:EC:CA:27:5A:EC:44:B6:08:B6:46:6F:10:E8
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       412FDEFF1398E75E9BDEA2B68FBF5B20E4B19185
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3365303a3a2f34342d3438203d3e20323037363332.roa
Signing time:             Mon 15 Jul 2024 08:50:11 +0000
ROA not before:           Mon 15 Jul 2024 08:45:11 +0000
ROA not after:            Mon 14 Jul 2025 08:50:11 +0000
asID:                     207632
IP address blocks:        2602:feda:3e0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:2f:de:ff:13:98:e7:5e:9b:de:a2:b6:8f:bf:5b:20:e4:b1:91:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:11 2024 GMT
            Not After : Jul 14 08:50:11 2025 GMT
        Subject: CN=3F516CE62E0AEEECCA275AEC44B608B6466F10E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:03:fa:68:82:44:c3:fe:60:08:db:f9:69:
                    ce:57:0d:df:24:3c:6b:8e:e9:7f:15:61:47:0a:6f:
                    b8:98:32:d8:3b:f3:05:cc:8c:0c:1f:94:48:a3:15:
                    b2:ed:f8:44:8c:cc:4d:e9:b1:19:db:a6:68:ee:59:
                    80:96:6b:4e:7e:fd:09:db:5e:ed:88:39:49:5d:99:
                    0f:10:80:15:5c:78:67:fd:f2:d6:c3:a8:49:d6:51:
                    d2:9e:92:ef:a6:d3:54:5b:f9:81:86:e1:d8:78:45:
                    fc:fb:b4:fe:02:da:3c:c3:a7:2e:f6:03:30:3c:a3:
                    b9:03:8a:f7:4f:6f:dd:d9:8e:44:c5:50:ac:f4:c9:
                    c7:c8:05:34:43:14:a4:e5:b0:ab:a3:6b:e9:4f:a6:
                    ab:8e:40:61:47:50:e8:21:de:35:70:77:b6:a7:09:
                    aa:9d:f3:4e:e6:88:06:a1:5b:01:11:eb:48:fb:84:
                    2a:27:d0:8f:3c:b0:bd:18:56:d4:e7:7c:0d:b0:62:
                    dd:c1:26:c3:3c:9e:ca:a5:0f:8b:1e:bf:00:65:b4:
                    5f:c9:1f:c9:49:38:77:c6:bc:39:59:b6:14:6f:38:
                    c8:37:26:8d:06:e3:da:d4:c2:55:39:75:72:81:f2:
                    01:a0:c8:e8:11:e4:66:4a:6b:68:24:40:9f:12:49:
                    25:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:51:6C:E6:2E:0A:EE:EC:CA:27:5A:EC:44:B6:08:B6:46:6F:10:E8
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3365303a3a2f34342d3438203d3e20323037363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:3e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c7:39:70:2d:a9:67:4f:0a:bd:ce:ef:1b:42:b6:5f:41:a3:56:
         27:56:dc:1b:8a:f7:19:22:b5:52:0e:58:7f:32:ad:c6:3f:56:
         3e:e1:82:38:a8:4c:6f:43:76:e5:cc:d7:d2:5c:3a:e8:2e:80:
         f4:73:95:a7:40:aa:56:af:f9:fc:47:a7:7e:9c:67:da:30:ae:
         90:f2:63:dd:aa:13:f2:01:0b:7b:f3:a6:6f:cd:d6:2f:06:6f:
         16:67:2f:b6:ca:f9:dd:a9:15:23:9a:9c:ca:58:67:b8:b7:5b:
         fb:cd:8b:d3:2c:4c:e3:a9:03:2a:31:7b:84:6a:0c:3a:04:be:
         8b:d2:37:78:d8:da:89:51:7f:a6:34:68:68:7d:f1:c8:51:b7:
         76:67:3e:71:21:6d:0e:9d:b7:14:ef:0e:b0:f6:4a:c3:43:cd:
         9f:38:8a:d5:ae:38:51:40:10:87:76:07:26:38:ed:aa:0c:14:
         fa:e9:44:4c:68:62:17:93:3e:92:5c:74:39:10:31:24:bc:8e:
         cc:e0:72:0d:46:65:77:d5:3a:61:77:4f:13:80:b6:74:be:9f:
         d2:21:f4:d0:77:18:25:89:66:d1:e9:7c:5b:c5:5f:87:86:5c:
         3e:22:4d:0f:1e:ab:12:e1:aa:6d:d7:d0:65:51:51:a8:2f:f5:
         9e:71:84:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:07 2024 by rpki-client on console-ams.rpki-client.org