Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61333a3a2f34382d3438203d3e203436393937.roa
File:                     323630323a666564613a61333a3a2f34382d3438203d3e203436393937.roa (raw, json)
Hash identifier:          +eBm5WK1Hiit7/bodJT5V5TVtNQ6ioXaofE8M1ZJgaQ=
Subject key identifier:   F6:E8:D6:9C:4C:F8:EF:D5:DF:BC:8C:58:D7:3D:17:37:A3:9A:A0:F9
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       2B01413D70E47AC07C0459102C10E501530BF9EF
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61333a3a2f34382d3438203d3e203436393937.roa
Signing time:             Mon 14 Aug 2023 07:53:37 +0000
ROA not before:           Mon 14 Aug 2023 07:48:37 +0000
ROA not after:            Mon 12 Aug 2024 07:53:37 +0000
asID:                     46997
IP address blocks:        2602:feda:a3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:01:41:3d:70:e4:7a:c0:7c:04:59:10:2c:10:e5:01:53:0b:f9:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:37 2023 GMT
            Not After : Aug 12 07:53:37 2024 GMT
        Subject: CN=F6E8D69C4CF8EFD5DFBC8C58D73D1737A39AA0F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:f8:fd:d9:db:84:51:11:b6:b9:f6:3e:d2:df:
                    d6:09:53:61:52:46:21:c5:4d:56:86:4a:b2:f0:29:
                    15:72:f1:4a:c5:b6:cd:ad:b9:73:7e:48:a5:f9:4f:
                    cf:6b:31:38:27:73:01:4b:59:33:92:df:6f:a2:2d:
                    b0:a5:5a:b9:6d:0b:83:3c:89:2f:09:3d:1c:7d:37:
                    3b:eb:f6:13:a7:7f:0d:92:9a:27:65:e9:e8:2d:dc:
                    83:9d:9f:cf:5e:cf:44:e4:41:dc:75:6f:76:98:af:
                    b1:63:c0:77:1f:fd:60:cf:b6:0d:a2:69:ea:a9:3f:
                    b5:45:3d:a7:b6:11:4f:c6:b2:82:e2:c9:68:34:fe:
                    56:3a:26:e6:3c:a6:61:0b:bf:10:ea:49:81:f2:d9:
                    5d:69:df:7b:c4:f2:01:24:8a:88:de:fa:ea:6f:9d:
                    91:aa:2f:49:97:0b:eb:c0:65:74:93:a1:3b:32:4e:
                    78:11:cc:d5:b6:ed:64:ce:4b:8a:ac:73:7d:04:ff:
                    d0:ca:e3:f9:74:3b:d9:bf:4c:a7:dc:6e:3b:f6:07:
                    57:de:6c:23:9c:c0:2c:48:ab:1c:15:54:26:e9:ae:
                    28:3a:9a:14:f5:29:3e:8f:43:06:99:31:09:0e:f4:
                    8a:32:c9:44:b4:04:b0:7c:fc:07:0f:a8:cd:1f:4c:
                    e9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E8:D6:9C:4C:F8:EF:D5:DF:BC:8C:58:D7:3D:17:37:A3:9A:A0:F9
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61333a3a2f34382d3438203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:a3::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:b1:08:2d:80:44:f8:28:22:19:01:8c:b6:ad:ac:dd:54:4e:
         51:47:1a:12:31:08:4f:ba:47:d5:b5:3f:a9:a4:a3:04:79:b9:
         39:f7:86:4e:96:d9:a1:2a:59:f7:1e:f9:4a:7b:20:21:7f:57:
         6f:7a:6e:37:97:91:e8:8b:e1:fa:21:4a:26:5e:ee:0e:8b:de:
         90:a1:39:69:c4:6b:45:18:9e:67:01:a1:31:96:b5:f8:bf:43:
         3c:6b:6d:53:0e:25:b0:3f:be:f4:2a:e5:af:d1:9c:30:53:83:
         5d:e8:38:6e:00:47:d8:a8:cf:c6:f0:da:96:e9:77:ea:83:fd:
         af:bb:47:fc:a9:06:96:94:17:67:1b:2c:f5:19:36:7b:6b:cd:
         53:00:20:e5:41:26:8a:f0:c7:09:ac:6b:d4:dc:03:d8:8c:ff:
         c5:fb:7f:fd:84:fd:03:73:7b:25:80:bf:ca:ac:50:fc:3f:b0:
         2f:c1:b7:cd:58:dc:a3:b9:00:19:0e:01:4d:17:e1:6e:1d:80:
         a0:de:ac:42:c7:26:dc:4f:c8:f0:ca:4f:d3:46:98:2d:a8:39:
         0c:1d:86:8c:50:69:18:cc:f8:44:01:c5:8e:48:4d:88:5b:90:
         db:f0:65:74:2d:46:55:da:c7:3d:53:9b:5f:ae:3b:a2:de:b2:
         c9:d0:7f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:11:41 2024 by rpki-client on console-ams.rpki-client.org