Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a383a3a2f34382d3438203d3e203436393937.roa
File:                     323630323a666564613a383a3a2f34382d3438203d3e203436393937.roa (raw, json)
Hash identifier:          wbPQJ0ozZ64/ghSoPpni0QaVBIc+p3epCJU323pUkMg=
Subject key identifier:   42:1C:53:27:BD:E5:9A:EA:CD:02:40:33:92:D6:BA:B3:5D:FF:D0:4A
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       6F8EF0FDD72345AD1CA2711CCD40D1946DB7EB6F
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a383a3a2f34382d3438203d3e203436393937.roa
Signing time:             Mon 14 Aug 2023 07:53:32 +0000
ROA not before:           Mon 14 Aug 2023 07:48:32 +0000
ROA not after:            Mon 12 Aug 2024 07:53:32 +0000
asID:                     46997
IP address blocks:        2602:feda:8::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8e:f0:fd:d7:23:45:ad:1c:a2:71:1c:cd:40:d1:94:6d:b7:eb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:32 2023 GMT
            Not After : Aug 12 07:53:32 2024 GMT
        Subject: CN=421C5327BDE59AEACD02403392D6BAB35DFFD04A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1e:82:29:3e:c2:61:7e:71:a2:ab:4f:1d:f8:
                    ff:a9:28:25:43:fe:c2:4e:64:6a:38:99:1c:47:f6:
                    78:d1:96:52:f0:b2:8e:aa:40:52:ae:88:60:b2:16:
                    fd:ef:40:1c:92:6d:93:c8:5d:fe:a2:d5:78:8e:7d:
                    cd:cd:da:94:52:5b:4c:c0:44:ba:37:9b:57:84:ec:
                    23:e4:ca:8a:87:fc:c4:63:2b:b5:bc:bc:71:f6:22:
                    48:20:7e:f7:2c:d4:88:1d:b4:4f:bd:33:1a:cb:fa:
                    74:bf:78:fa:64:d0:d8:a5:af:6a:2c:a4:39:91:e3:
                    58:60:1f:38:a3:f2:c0:ed:59:3d:39:d3:ed:69:83:
                    b2:9b:f3:f8:9c:bc:ea:e8:0d:14:d0:5d:7f:01:71:
                    f3:e8:a9:61:47:a1:51:a0:62:0d:b1:82:37:ee:78:
                    6d:16:a7:a7:e3:c7:79:e6:3a:54:4b:a7:6c:f2:b3:
                    fe:5c:2e:7c:00:9d:9e:96:53:50:26:93:96:dc:f8:
                    13:d2:4e:ca:74:ee:84:ba:0f:77:3e:df:2a:eb:8d:
                    2d:6d:03:c6:2c:91:7d:23:50:98:7c:80:c7:ab:d9:
                    d4:ca:29:2e:e4:6b:94:9b:cc:c0:39:fa:b0:eb:e7:
                    56:36:c3:95:71:23:1a:2b:4b:d6:21:5b:39:9b:a9:
                    d7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:1C:53:27:BD:E5:9A:EA:CD:02:40:33:92:D6:BA:B3:5D:FF:D0:4A
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a383a3a2f34382d3438203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:a6:c2:26:eb:90:70:0d:76:a4:50:80:36:47:96:c7:aa:d4:
         44:1b:d4:bf:b2:f6:c2:db:25:0f:06:6b:ff:0e:7a:03:75:a6:
         c8:a6:a7:2a:72:71:62:d3:8f:18:ff:c7:c1:f6:c6:04:bc:08:
         3b:d5:f5:8a:79:43:06:88:5b:cf:9a:27:35:b0:80:ca:25:a1:
         3c:8b:e0:23:e5:80:98:dd:68:6c:f4:cf:4a:77:86:b7:8b:49:
         69:15:80:f0:f2:02:9d:da:c5:b2:b7:f4:43:80:15:68:b6:dd:
         74:06:32:ac:5e:c2:93:3c:a9:72:38:27:19:f1:31:48:c4:d9:
         23:c0:9d:c1:21:e6:21:11:5e:15:99:47:64:f2:62:7d:16:1a:
         05:47:87:58:13:91:45:0c:42:72:cb:dd:a5:44:ee:6a:bf:23:
         4e:c0:a5:a2:4e:41:11:2d:7d:62:38:45:3d:85:4e:bd:31:e0:
         0d:d2:85:fb:c2:6e:06:4b:76:93:62:d0:dc:05:b8:9a:e4:b7:
         8f:fa:26:06:1d:23:b1:62:97:52:f3:2c:53:7f:71:a0:b6:87:
         ba:fe:50:e7:a4:cb:6b:17:2a:1f:32:8f:48:a2:16:51:08:7d:
         a2:fb:4d:a0:ba:bc:83:f4:b5:4d:5c:dd:18:30:60:c7:c7:49:
         e7:1a:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:30:34 2024 by rpki-client on console-fra.rpki-client.org