Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3a2f34382d3438203d3e203436393937.roa
File:                     323630323a666564613a3a2f34382d3438203d3e203436393937.roa (raw, json)
Hash identifier:          FXZGxnv9Uc/ymF6M4xxrKTpAKc1aP4OR9X8VmwduysY=
Subject key identifier:   5D:AD:87:0D:22:41:03:25:72:57:FB:D5:A2:26:4E:E3:CD:10:1E:2F
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       20F900E05BED7DFAEF4D3C2DFA14D6B59896D4B6
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3a2f34382d3438203d3e203436393937.roa
Signing time:             Mon 14 Aug 2023 07:53:31 +0000
ROA not before:           Mon 14 Aug 2023 07:48:31 +0000
ROA not after:            Mon 12 Aug 2024 07:53:31 +0000
asID:                     46997
IP address blocks:        2602:feda::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f9:00:e0:5b:ed:7d:fa:ef:4d:3c:2d:fa:14:d6:b5:98:96:d4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:31 2023 GMT
            Not After : Aug 12 07:53:31 2024 GMT
        Subject: CN=5DAD870D224103257257FBD5A2264EE3CD101E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:a9:2b:6f:4e:1a:d5:54:26:0c:8e:77:64:
                    a4:97:a8:45:74:4b:70:dd:89:0a:65:d1:62:a4:57:
                    4c:4b:a7:4c:ff:d2:3b:86:15:40:33:14:4b:ee:41:
                    19:95:fe:d0:a5:75:31:0a:c0:d0:87:6e:49:88:1e:
                    83:1d:7c:c6:40:13:f5:35:74:64:5e:ed:24:a1:e3:
                    9d:9e:97:70:4f:f5:df:c1:be:bb:6b:b8:b6:4d:ae:
                    99:f7:74:78:52:74:09:bc:b8:bd:70:37:dc:0a:ef:
                    b8:2b:dc:f7:cc:78:41:2d:14:5f:2f:86:fc:27:46:
                    b4:c5:99:3e:64:8f:61:2e:9b:36:f3:b9:b3:e5:47:
                    09:b2:96:0e:fb:75:08:03:a8:a6:ff:07:ab:53:07:
                    52:3b:e3:77:81:19:71:5a:f6:c1:a1:bf:d5:8e:4a:
                    f6:db:a6:78:e9:14:17:15:48:0f:3e:f6:e4:77:74:
                    f9:36:36:91:74:43:77:ed:2d:e3:5c:8a:e5:90:18:
                    49:27:39:2e:fd:76:d6:b6:26:7e:74:d7:92:9e:36:
                    d3:da:29:c3:53:a4:ad:4d:e9:de:b0:5b:6e:ee:04:
                    97:e2:c2:4e:56:0c:5b:56:90:39:0d:49:b2:57:1c:
                    7f:56:8c:dd:06:6f:5c:f0:94:03:db:06:20:79:a4:
                    ab:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:AD:87:0D:22:41:03:25:72:57:FB:D5:A2:26:4E:E3:CD:10:1E:2F
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3a2f34382d3438203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:4e:4d:d8:5f:e2:10:34:fb:90:ac:00:9b:3c:6b:22:38:12:
         f6:c7:1e:4d:64:57:f3:bf:f0:39:e6:01:3d:cd:7a:cd:b5:46:
         4f:0f:ae:59:95:58:ad:87:a0:5f:82:bf:97:2b:f1:bf:f4:1a:
         7a:1c:b7:ec:6a:c9:67:89:1b:f4:2e:ec:28:2a:44:1d:77:ce:
         de:17:93:36:90:b1:bb:65:36:93:6a:e0:08:69:db:97:03:5a:
         0a:bd:e7:6f:13:34:2e:95:a5:bb:4a:7d:9f:74:d8:58:45:ec:
         b3:00:e0:33:53:d1:4c:14:4a:48:89:3f:52:be:4b:65:02:5d:
         9f:5b:3d:ae:2b:e2:b9:28:dc:45:68:53:b6:4b:2a:87:78:fa:
         a1:44:70:1f:b3:18:54:b9:3f:ac:cd:39:4e:cd:25:60:ab:ae:
         77:c8:71:61:68:4d:a3:3d:15:82:33:9b:82:7a:5d:91:74:92:
         aa:58:62:90:41:a9:c3:30:35:98:a4:4f:68:19:51:40:e5:f0:
         49:18:88:b8:8e:e6:26:8f:9b:bf:54:1a:aa:05:12:6e:12:47:
         72:fa:79:73:19:73:53:6d:39:10:50:ba:e5:61:cf:1b:ef:d8:
         f7:df:14:0d:a7:e2:36:87:9e:49:b4:2d:5d:94:d5:a6:04:6a:
         05:69:2b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:11:41 2024 by rpki-client on console-ams.rpki-client.org