Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6163303a3a2f34342d3438203d3e20313430393734.roa
File:                     323630323a666564613a6163303a3a2f34342d3438203d3e20313430393734.roa (raw, json)
Hash identifier:          ldyQTHxl+LNG8/4ijgi0DRu+RSl+X/WvugyWORF50vE=
Subject key identifier:   20:EB:19:80:80:98:1A:B6:2F:88:F5:65:F3:C8:1C:6C:02:68:EE:9A
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       362E13A4C32092A6E89491D7DD7EBA6A01A250DC
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6163303a3a2f34342d3438203d3e20313430393734.roa
Signing time:             Mon 14 Aug 2023 07:53:28 +0000
ROA not before:           Mon 14 Aug 2023 07:48:28 +0000
ROA not after:            Mon 12 Aug 2024 07:53:28 +0000
asID:                     140974
IP address blocks:        2602:feda:ac0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2e:13:a4:c3:20:92:a6:e8:94:91:d7:dd:7e:ba:6a:01:a2:50:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:28 2023 GMT
            Not After : Aug 12 07:53:28 2024 GMT
        Subject: CN=20EB198080981AB62F88F565F3C81C6C0268EE9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:7c:23:52:ff:44:1f:62:c9:1e:bc:72:5f:
                    62:76:50:64:73:bf:f2:78:bd:b1:e1:91:c4:e4:b2:
                    b7:b1:5f:e9:2d:34:08:be:d2:85:bd:04:7f:5b:0f:
                    d3:05:0d:3d:42:92:6b:9d:cc:d0:12:fb:82:ef:27:
                    f0:aa:e1:1a:cc:11:59:15:29:28:64:5a:0d:44:29:
                    a2:b5:af:ef:e4:96:ee:80:43:c2:41:6b:a5:56:7d:
                    ee:f1:e9:64:1f:e2:74:87:ab:0d:92:f4:a7:e4:65:
                    34:1c:af:53:67:b5:17:65:01:f7:86:14:8c:c9:41:
                    39:69:a2:85:08:76:37:db:4e:45:36:a7:cb:08:48:
                    5a:72:d0:ee:64:9b:d1:bc:3a:67:da:17:e7:a6:9f:
                    6f:e5:9f:a8:c3:cc:f3:ad:34:5f:31:6b:cb:2a:5c:
                    7f:32:bb:72:ce:f1:29:b6:a5:9b:c1:1b:99:ae:1f:
                    a8:69:00:80:1b:cc:c2:cb:c6:01:ce:8f:d3:89:1c:
                    ea:65:68:9f:b8:a1:dc:15:1f:be:57:6d:fe:58:36:
                    48:ae:11:b5:72:dc:d5:dc:87:d8:64:cd:20:7c:2c:
                    aa:2e:11:ae:fb:3a:32:b1:e7:8d:34:ea:d9:f1:03:
                    6c:53:b4:0c:fe:82:01:fb:2c:a3:1b:b0:65:af:51:
                    d0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:EB:19:80:80:98:1A:B6:2F:88:F5:65:F3:C8:1C:6C:02:68:EE:9A
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6163303a3a2f34342d3438203d3e20313430393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ac0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2b:84:06:83:ee:b2:e0:42:9b:25:6d:ce:53:c0:4f:76:93:d5:
         9b:c1:61:5d:62:ed:8e:b7:ab:f6:63:37:9c:bd:cf:37:c0:50:
         bb:10:ae:d0:79:df:1e:7d:8b:2c:27:bc:58:2b:b6:06:e0:4a:
         60:61:1c:c7:62:21:de:c5:56:20:fc:b2:ab:05:66:21:ff:2c:
         3c:e2:4c:c0:83:38:ca:94:30:25:86:45:39:64:38:96:16:5d:
         e9:11:2a:84:17:e0:91:f6:20:c0:fc:96:ce:64:45:72:90:64:
         00:74:f8:4b:22:2e:df:65:a8:32:9f:57:75:a5:2c:b9:39:e6:
         69:6c:4f:86:7c:08:c3:09:35:e1:d3:0b:7e:ba:c8:78:1d:c5:
         9f:87:af:08:38:c8:84:f4:ca:68:e2:3e:50:61:d5:be:b0:93:
         d1:06:c7:a1:3f:cc:7f:69:43:a1:d2:76:2b:11:ba:50:34:bb:
         41:d6:60:03:f7:c6:f6:7f:29:1b:86:f3:d4:bd:d8:2e:11:c2:
         ff:94:d5:a7:d9:be:b1:ac:7b:5c:1f:f1:f8:95:67:a3:74:7a:
         d3:10:60:0c:c0:85:a0:d2:ad:90:b2:1d:27:b9:ae:d7:dc:00:
         ca:8d:88:3e:a0:52:41:f5:1f:c4:9e:9a:4b:d1:04:8c:bb:7a:
         00:c6:1d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:52:00 2024 by rpki-client on console-ams.rpki-client.org