Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa
File:                     323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa (raw, json)
Hash identifier:          JP3bVWo2Q7cGY7XOSQXslepuX5y0eZ3aoxoBeRsWIrA=
Subject key identifier:   A3:DF:C2:0A:C6:FE:DB:E8:26:02:F0:45:6A:CA:05:C9:BC:78:04:47
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       42F7D3460E8955FD819A7FDA78DD518818DAE5A6
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa
Signing time:             Mon 15 Jul 2024 08:50:14 +0000
ROA not before:           Mon 15 Jul 2024 08:45:14 +0000
ROA not after:            Mon 14 Jul 2025 08:50:14 +0000
asID:                     142634
IP address blocks:        2602:feda:ab0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f7:d3:46:0e:89:55:fd:81:9a:7f:da:78:dd:51:88:18:da:e5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:14 2024 GMT
            Not After : Jul 14 08:50:14 2025 GMT
        Subject: CN=A3DFC20AC6FEDBE82602F0456ACA05C9BC780447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:6a:d3:ff:82:4a:49:c1:1b:ee:fa:7b:29:
                    84:fd:b9:4a:44:d4:ed:11:90:52:23:3e:a1:1d:0d:
                    59:ba:43:9c:81:d6:47:e4:55:b4:40:e6:c1:c1:2a:
                    45:1f:b1:80:c5:03:38:3f:2f:75:e1:16:ae:0e:0f:
                    c4:80:2c:f1:14:ab:67:c0:c6:ca:90:1f:ba:c4:4f:
                    76:c6:47:4a:4e:24:39:e1:07:ba:ee:d8:cf:30:93:
                    76:c3:6d:0d:66:57:7a:90:23:17:85:d2:39:37:a9:
                    a3:30:39:e0:57:80:78:fa:7a:a3:b5:06:10:e6:f8:
                    bf:0d:75:95:8d:4a:b9:5a:bb:7a:73:0d:29:ab:94:
                    b5:20:4f:cc:99:29:f3:b2:d2:48:f2:76:5b:8f:07:
                    c8:87:b5:ce:5c:e2:15:03:37:10:11:58:78:a0:7e:
                    c9:e8:cb:7b:f4:66:fe:1a:dd:7c:29:b1:c7:31:fd:
                    7e:7b:44:4c:62:27:04:36:1a:59:20:32:b5:da:12:
                    d6:21:d7:15:28:24:b6:db:52:48:3f:88:bb:99:86:
                    4a:63:34:73:4e:6f:4d:86:e0:cf:dc:8f:06:cf:0e:
                    98:a6:4d:63:e2:77:7d:4e:8f:f2:b6:e7:1e:03:42:
                    8f:2f:44:9e:73:28:ea:dc:9f:0a:5c:bc:70:e1:d7:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DF:C2:0A:C6:FE:DB:E8:26:02:F0:45:6A:CA:05:C9:BC:78:04:47
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ab0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:85:93:4a:7d:e5:f6:e8:6c:03:4e:2e:f8:cf:b3:7f:1a:2e:
         75:39:56:bc:b6:77:5c:ba:b5:ef:38:a9:42:e0:3a:f1:7d:29:
         db:4b:60:4e:55:14:3a:07:fe:af:0b:73:2a:f7:5b:47:73:b0:
         05:8a:64:89:68:6a:1c:ea:3a:88:2d:da:31:cd:7b:97:e9:b2:
         ed:49:44:a5:79:9b:4a:70:9e:fe:a6:8b:fc:2b:80:dd:b3:4e:
         75:05:bc:08:4d:d8:b9:3d:62:78:3b:c8:c2:55:5e:0c:3d:ac:
         77:9f:e2:c6:e8:44:94:f6:e5:a7:34:13:ef:42:35:5b:fb:93:
         f0:c1:d6:95:6d:17:28:48:59:16:67:3a:37:45:0d:1d:60:2d:
         89:9d:87:58:cf:82:5a:df:22:9e:05:15:d8:88:44:54:9f:46:
         1a:cd:ba:ce:20:4a:e5:ab:ae:24:11:6b:9f:f9:6f:56:8f:8a:
         83:98:80:d7:e7:15:c6:f8:db:a8:04:36:28:c4:e3:65:a4:8a:
         1b:47:83:20:85:97:59:13:5b:97:34:47:f4:bd:de:c6:1c:15:
         6e:b8:41:62:d6:3c:47:7a:ff:67:db:99:41:4a:c3:01:8f:93:
         8e:f8:a9:31:d3:78:20:9e:bb:6a:78:fa:27:d8:ad:47:7a:d1:
         33:64:77:78
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUQvfTRg6JVf2Bmn/aeN1RiBja5aYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTE0WhcNMjUwNzE0MDg1MDE0
WjAzMTEwLwYDVQQDEyhBM0RGQzIwQUM2RkVEQkU4MjYwMkYwNDU2QUNBMDVDOUJD
NzgwNDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIpq0/+CSknB
G+76eymE/blKRNTtEZBSIz6hHQ1ZukOcgdZH5FW0QObBwSpFH7GAxQM4Py914Rau
Dg/EgCzxFKtnwMbKkB+6xE92xkdKTiQ54Qe67tjPMJN2w20NZld6kCMXhdI5N6mj
MDngV4B4+nqjtQYQ5vi/DXWVjUq5Wrt6cw0pq5S1IE/MmSnzstJI8nZbjwfIh7XO
XOIVAzcQEVh4oH7J6Mt79Gb+Gt18KbHHMf1+e0RMYicENhpZIDK12hLWIdcVKCS2
21JIP4i7mYZKYzRzTm9NhuDP3I8Gzw6Ypk1j4nd9To/ytuceA0KPL0Secyjq3J8K
XLxw4ddhyQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKPfwgrG/tvoJgLwRWrKBcm8
eARHMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6
Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh
NjE2MjMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDMyMzYzMzM0LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcEJgL+2gqwMA0GCSqGSIb3DQEBCwUAA4IBAQBvhZNKfeX26GwDTi74z7N/
Gi51OVa8tndcurXvOKlC4DrxfSnbS2BOVRQ6B/6vC3Mq91tHc7AFimSJaGoc6jqI
LdoxzXuX6bLtSUSleZtKcJ7+pov8K4Dds051BbwITdi5PWJ4O8jCVV4MPax3n+LG
6ESU9uWnNBPvQjVb+5PwwdaVbRcoSFkWZzo3RQ0dYC2JnYdYz4Ja3yKeBRXYiERU
n0YazbrOIErlq64kEWuf+W9Wj4qDmIDX5xXG+NuoBDYoxONlpIobR4MghZdZE1uX
NEf0vd7GHBVuuEFi1jxHev9n25lBSsMBj5OO+Kkx03ggnrtqePon2K1HetEzZHd4
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:07 2024 by rpki-client on console-ams.rpki-client.org