Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa
File:                     323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa (raw, json)
Hash identifier:          jEi0KloNVx89JbpuId53B/yQj3ZsCHYDO3G3KLa8B6A=
Subject key identifier:   C2:18:3C:7F:A3:1E:31:79:72:D6:4F:95:CB:26:19:86:8C:0A:D4:BC
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       10256AC5A7163FB3377CADB743CD812059DD2FB9
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa
Signing time:             Mon 14 Aug 2023 07:53:33 +0000
ROA not before:           Mon 14 Aug 2023 07:48:33 +0000
ROA not after:            Mon 12 Aug 2024 07:53:33 +0000
asID:                     47158
IP address blocks:        2602:feda:ab0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:25:6a:c5:a7:16:3f:b3:37:7c:ad:b7:43:cd:81:20:59:dd:2f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:33 2023 GMT
            Not After : Aug 12 07:53:33 2024 GMT
        Subject: CN=C2183C7FA31E317972D64F95CB2619868C0AD4BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a6:fa:73:fe:92:12:59:b5:01:d0:ff:5a:cd:
                    b9:33:91:05:a2:52:0e:5f:64:ed:cb:ce:ca:5d:0a:
                    72:fc:8c:b6:6b:e1:28:c8:8d:6b:9a:b3:40:be:2a:
                    8d:94:8d:49:d1:31:76:3d:60:e0:18:08:cd:c9:02:
                    ba:5c:58:e7:b7:59:66:ff:f4:80:22:8f:be:af:a2:
                    75:f1:dd:3d:18:58:e9:ce:db:0a:5b:67:6c:6d:53:
                    76:ab:58:64:45:8e:a1:6a:9e:fd:c1:ef:2e:98:21:
                    01:6a:74:a4:40:69:7e:af:c8:ea:cd:07:10:d2:e7:
                    13:df:3b:7c:fe:5e:03:7b:01:ab:e9:7b:c2:5c:b0:
                    25:aa:a0:f8:79:8a:0c:ce:ba:6d:c7:73:cc:e2:97:
                    d0:90:d9:15:1e:81:1e:16:f8:cf:93:f4:e0:2d:d4:
                    61:9c:6b:5f:fe:61:c0:bd:6c:24:60:89:45:67:42:
                    1e:ed:0a:9a:0a:77:45:f2:da:29:76:a0:5a:93:c4:
                    39:e9:82:18:8b:42:27:5b:eb:a6:17:89:31:96:bf:
                    54:8a:eb:0f:e0:d0:ef:b1:b6:f3:69:fb:8c:8d:c2:
                    f8:f0:ab:76:e4:56:8b:d3:9b:aa:4f:e2:ec:1e:c4:
                    79:dd:17:16:28:b8:08:68:98:b9:2c:8e:d0:a2:a5:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:18:3C:7F:A3:1E:31:79:72:D6:4F:95:CB:26:19:86:8C:0A:D4:BC
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ab0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:d7:99:43:65:eb:20:ad:d7:d1:e2:71:80:c9:9e:61:d6:
         03:9b:50:a1:4f:32:7a:8d:17:37:87:31:b4:08:1a:cd:41:21:
         f0:48:db:5d:e9:4c:3f:75:ad:3c:fe:25:bb:09:8d:e7:4b:79:
         b3:57:18:96:4f:94:32:e5:3c:a9:ca:9b:de:2e:f7:23:9c:90:
         88:73:f7:50:9f:99:2c:48:f1:ab:3e:db:75:cd:41:9a:4d:d4:
         eb:82:7c:b8:72:c4:d0:4a:6a:1e:7a:1b:70:3b:3b:48:68:49:
         ce:59:f9:ee:9d:a0:2c:ea:5d:ac:dd:9a:a6:ed:1b:8e:3c:c8:
         35:7c:46:8d:01:e2:ce:d9:ae:0e:11:df:a4:74:ce:69:2f:7e:
         6d:ae:51:45:1d:af:8b:17:25:cb:e0:c0:a2:4f:5d:78:d1:dd:
         30:56:ef:ad:5c:9d:26:2f:a5:b9:bb:85:c4:e1:20:78:d6:ce:
         c6:40:38:c3:e2:da:14:19:cb:1c:ef:3e:e2:bf:fc:fe:3c:4e:
         11:28:7d:d8:39:c7:4f:6f:c7:26:5c:3f:dc:06:65:77:23:7c:
         ba:da:b2:c6:d0:27:07:3a:16:56:77:af:fe:1d:d8:e9:ea:e4:
         70:e6:5c:3f:37:c0:ce:28:37:44:2d:03:51:2a:aa:95:1e:55:
         ff:ed:68:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:19:52 2024 by rpki-client on console-fra.rpki-client.org