Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa
File:                     323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa (raw, json)
Hash identifier:          Pw6TORuPKE+A9dMuGXwn7GJWcAy8VxXCniF1s3gXnIE=
Subject key identifier:   A2:41:4B:71:34:E2:57:A9:C0:83:63:7A:9F:C7:45:82:55:10:90:B7
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       087F0223BAB84A02E9160A7A462A540A7DD8BDC3
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa
Signing time:             Mon 14 Aug 2023 07:53:40 +0000
ROA not before:           Mon 14 Aug 2023 07:48:40 +0000
ROA not after:            Mon 12 Aug 2024 07:53:40 +0000
asID:                     142634
IP address blocks:        2602:feda:ab0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7f:02:23:ba:b8:4a:02:e9:16:0a:7a:46:2a:54:0a:7d:d8:bd:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:40 2023 GMT
            Not After : Aug 12 07:53:40 2024 GMT
        Subject: CN=A2414B7134E257A9C083637A9FC74582551090B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:87:97:35:9e:6e:01:33:b5:0f:89:51:64:
                    69:f1:8c:70:31:ab:8f:e8:43:4a:d3:bf:34:f9:45:
                    d1:a6:5a:d7:97:6a:24:5e:29:d3:43:d6:bc:08:36:
                    f9:c4:5f:a1:e1:ab:d9:85:b6:7b:e0:d7:d8:9b:17:
                    55:4d:82:b4:a7:56:d4:1a:84:b2:4d:9b:76:1b:80:
                    05:eb:40:af:9c:89:2c:40:e9:d8:5b:aa:eb:2d:54:
                    0f:fb:4d:75:62:89:a0:b3:5a:b2:93:57:65:1b:cf:
                    e3:d0:1e:c8:2c:6f:e2:48:d9:bd:a8:4e:49:b4:db:
                    57:a9:ed:d8:88:d6:26:4f:5b:7f:a1:5d:41:89:93:
                    c5:be:95:e2:63:5c:47:ce:18:5f:99:20:63:60:78:
                    ab:a0:80:d1:8f:fa:31:4f:e6:fc:68:8e:7d:06:f0:
                    15:40:f3:65:3f:b5:db:76:f8:36:9e:57:5e:28:f1:
                    82:d6:2b:a4:6c:d7:fd:42:a3:1a:5e:b2:59:ae:d3:
                    e3:b3:85:a0:7d:1f:f5:f4:d4:a0:4b:c0:27:c8:22:
                    1e:51:47:2c:0c:55:5c:6d:aa:b2:11:5f:0d:18:ff:
                    2c:b3:3f:b2:52:90:fe:6f:7c:6b:4b:d4:77:98:2a:
                    47:5e:a6:38:cb:c0:c3:49:b7:c7:f2:18:65:d9:50:
                    2d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:41:4B:71:34:E2:57:A9:C0:83:63:7A:9F:C7:45:82:55:10:90:B7
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ab0::/44

    Signature Algorithm: sha256WithRSAEncryption
         49:f8:46:5f:fd:66:e2:d7:ba:38:fc:0c:2c:1b:10:94:37:a0:
         58:ef:eb:ef:09:bc:11:78:c1:ce:7c:54:2f:d8:08:44:36:7b:
         1f:13:9f:b7:a4:04:b6:d0:34:b3:fb:f5:94:ae:2e:11:59:78:
         d5:48:64:55:1e:70:2f:2c:f1:0b:8e:84:c3:76:01:8e:dc:7c:
         f2:fe:9f:28:66:08:6d:ce:05:4c:ab:23:c3:60:e1:1f:52:eb:
         79:83:45:fb:03:07:af:df:62:5c:96:08:1c:a7:0e:42:ca:f2:
         2c:ac:19:75:e6:15:57:6d:b2:9f:51:6f:14:b7:7a:09:6c:bf:
         64:04:c2:31:fd:a4:69:38:f3:cc:72:56:28:3f:01:b9:b3:13:
         94:ae:30:f7:03:92:cb:d4:3b:1d:c3:9f:ec:ad:8d:ed:2c:78:
         c6:ad:2a:25:20:52:d1:c6:e9:79:cc:6b:08:fd:39:90:47:e2:
         9b:f2:46:7a:aa:47:b1:bd:4f:3f:01:41:31:0f:2a:c1:54:2c:
         a8:4f:11:26:91:2f:1f:89:39:7a:57:67:6e:e3:df:5f:de:8d:
         84:b6:14:18:33:2d:bc:b6:18:5a:b0:6c:d7:45:dd:c1:3d:03:
         df:af:fd:28:7c:dd:83:41:df:65:08:d7:17:5f:8d:f9:9e:9b:
         2d:61:82:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:19:52 2024 by rpki-client on console-fra.rpki-client.org