Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a353a3a2f34382d3438203d3e203436393937.roa
File:                     323630323a666564613a353a3a2f34382d3438203d3e203436393937.roa (raw, json)
Hash identifier:          EOVu2ZOIO6jzvY5eUNIj95Gmzp4S6CoWV/9BbfbvS4Q=
Subject key identifier:   EF:B3:AE:AA:FE:58:9C:E7:33:DB:F5:5A:9C:3B:E1:C5:51:87:87:EE
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       58EAC29A7E679FA6252753BF8F4F4EA420F53121
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a353a3a2f34382d3438203d3e203436393937.roa
Signing time:             Mon 14 Aug 2023 07:53:35 +0000
ROA not before:           Mon 14 Aug 2023 07:48:35 +0000
ROA not after:            Mon 12 Aug 2024 07:53:35 +0000
asID:                     46997
IP address blocks:        2602:feda:5::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ea:c2:9a:7e:67:9f:a6:25:27:53:bf:8f:4f:4e:a4:20:f5:31:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:35 2023 GMT
            Not After : Aug 12 07:53:35 2024 GMT
        Subject: CN=EFB3AEAAFE589CE733DBF55A9C3BE1C5518787EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:51:05:b3:b9:6d:0b:be:da:62:c0:fd:72:67:
                    58:e3:08:81:a9:18:34:01:ef:22:69:d8:27:ca:8f:
                    e4:96:cc:00:b0:08:b2:35:a6:61:68:37:e4:d1:09:
                    70:75:a9:2b:23:ca:08:33:5d:8c:78:85:f4:99:60:
                    34:df:85:a6:d8:65:0d:46:69:31:26:5d:6a:95:8d:
                    6d:4b:73:a9:be:20:78:55:65:93:7f:fd:fa:3f:0e:
                    62:4a:a2:79:5a:d3:9f:0e:1d:b0:0e:5e:9a:46:d2:
                    ba:c7:f5:f6:54:8f:2d:fb:11:58:39:35:1e:9e:2b:
                    4c:7c:7f:b1:11:8e:66:00:66:d1:21:c2:7f:70:d6:
                    61:7e:f2:75:35:6d:fd:05:22:44:52:74:e6:a9:22:
                    10:e6:a0:04:6b:61:6a:b6:a4:c7:e4:f7:ec:73:37:
                    9e:d1:d8:da:83:ff:62:00:05:25:91:84:39:7f:35:
                    4c:b7:d4:a1:bc:a2:0f:b8:ba:7a:62:57:c2:ed:1b:
                    64:1f:c7:bc:0d:37:9e:01:6a:24:24:9c:a1:0e:e8:
                    f9:df:7b:60:56:1a:74:ad:9f:1f:2b:7d:5e:49:f3:
                    7f:d6:9e:c9:36:fe:0d:ce:68:38:d6:ba:e5:6c:03:
                    8c:87:63:a6:97:d9:23:ae:82:90:4c:2e:1f:7c:74:
                    1c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B3:AE:AA:FE:58:9C:E7:33:DB:F5:5A:9C:3B:E1:C5:51:87:87:EE
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a353a3a2f34382d3438203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:46:d7:e6:38:1d:65:c8:73:e0:a3:b4:44:8a:c1:05:13:ce:
         07:f0:70:5f:7c:ae:c0:da:ab:76:62:d2:70:3f:26:93:3a:f0:
         05:70:8b:dc:a3:13:df:43:e4:da:f1:58:50:b6:ab:e9:f8:92:
         d5:59:f0:67:06:5f:0f:5d:6e:8b:c0:45:19:e8:91:2a:fc:e3:
         47:85:ad:1e:3d:9d:6b:20:c9:ee:51:7f:5a:a9:40:a8:d1:94:
         d4:4f:9e:49:c5:3d:f6:ab:6e:1c:67:6a:39:58:9b:87:94:95:
         a0:8f:29:33:81:3f:47:ea:e4:10:35:c1:86:5f:ba:03:57:82:
         6a:a1:b9:3e:c5:8a:56:2b:61:a7:c2:21:57:8d:57:ff:49:0d:
         e5:93:4a:55:a3:3c:1b:31:4e:33:42:c8:dc:0a:0f:b2:e4:5f:
         17:12:11:3e:05:b4:28:91:ec:5c:e3:fb:96:42:2a:0f:ea:1f:
         6b:78:c2:6c:2d:8d:20:7b:53:a3:1d:0a:ea:23:e3:8d:d0:84:
         91:c4:02:f8:4d:6f:74:49:85:91:0c:bc:41:df:5e:01:d6:9e:
         9a:6a:8d:b4:90:ef:ea:f1:31:37:a2:db:d3:14:92:2f:b4:a7:
         a1:5b:cf:9b:29:83:a8:30:31:5a:56:36:f9:8a:b5:0e:22:3f:
         1f:c7:c6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:11:41 2024 by rpki-client on console-ams.rpki-client.org