Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6163303a3a2f34342d3438203d3e20313430393734.roa
File:                     323630323a666564613a6163303a3a2f34342d3438203d3e20313430393734.roa (raw, json)
Hash identifier:          jSJM6W/y+4YO1L49ihkAxqcKtI8cOKsBpuA2yLkRuaM=
Subject key identifier:   20:1C:AA:2C:5D:0B:2D:AA:D3:D9:24:C5:F7:BE:13:BB:F1:19:1C:8C
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       59DDBBA08303FDFA9A4D34D3760D75F9F89506B8
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6163303a3a2f34342d3438203d3e20313430393734.roa
Signing time:             Mon 15 Jul 2024 08:50:13 +0000
ROA not before:           Mon 15 Jul 2024 08:45:13 +0000
ROA not after:            Mon 14 Jul 2025 08:50:13 +0000
asID:                     140974
IP address blocks:        2602:feda:ac0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:dd:bb:a0:83:03:fd:fa:9a:4d:34:d3:76:0d:75:f9:f8:95:06:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:13 2024 GMT
            Not After : Jul 14 08:50:13 2025 GMT
        Subject: CN=201CAA2C5D0B2DAAD3D924C5F7BE13BBF1191C8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6d:01:9c:96:e2:3f:91:73:c8:21:69:a8:e5:
                    7c:05:7f:f0:0d:cf:89:be:94:53:0a:b9:77:69:86:
                    dc:60:7a:a2:0e:f0:44:41:3b:83:d9:44:9b:8b:9a:
                    49:0a:78:c8:85:d8:3b:fd:d4:75:15:ed:5b:5d:8c:
                    51:c8:2a:13:96:02:94:20:d1:67:18:c4:ea:d3:3a:
                    5a:99:46:bd:49:08:76:32:83:04:10:12:b6:50:96:
                    95:4b:2d:2f:86:12:cf:70:64:a2:81:ff:d0:20:31:
                    4a:21:f1:49:d5:d0:72:96:a1:fb:77:06:2d:66:22:
                    5c:f9:58:93:d6:54:b2:50:a9:d3:b4:1c:e1:4f:33:
                    f6:18:70:90:70:c1:0a:b9:a5:d6:47:f5:6c:32:70:
                    ac:40:d4:35:d0:f1:bd:49:2f:40:f2:56:78:bc:37:
                    5b:3f:c2:d4:cc:fc:34:49:06:d2:5b:14:1f:07:df:
                    fc:45:07:c2:0e:9b:b3:a0:66:40:93:1b:ec:7e:a4:
                    81:69:58:95:eb:c6:51:83:e7:54:d2:8e:98:89:bb:
                    f6:23:b1:0b:54:b0:5c:64:05:a5:92:5a:62:66:51:
                    6f:7a:a1:e9:9f:55:1a:89:02:e5:75:e7:b2:10:da:
                    f1:6c:13:74:ed:88:0c:95:6d:41:82:9c:5a:3f:d7:
                    32:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1C:AA:2C:5D:0B:2D:AA:D3:D9:24:C5:F7:BE:13:BB:F1:19:1C:8C
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6163303a3a2f34342d3438203d3e20313430393734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ac0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4b:75:61:c6:06:ff:23:aa:d2:5d:91:a5:5e:c8:69:c8:bd:30:
         00:55:7d:32:73:9f:3d:7d:a6:97:f0:cd:b8:f0:4f:56:c1:bb:
         89:61:a6:c4:4d:c7:21:a4:63:d8:e4:b0:db:eb:53:a8:c5:24:
         a6:7b:b5:cb:3c:55:56:9e:eb:c2:fa:b8:48:6a:31:1e:70:57:
         3b:f6:b9:9b:1e:96:02:38:af:e1:52:a4:20:b2:de:8a:a0:09:
         b0:b6:11:b5:20:45:b9:46:12:61:57:89:dd:ac:96:b6:e2:60:
         b7:34:23:1d:8b:30:44:e1:0b:39:c9:a6:cf:92:8a:8a:ad:58:
         51:0d:fd:22:c2:97:0c:e7:ce:5d:86:44:2a:af:b5:e6:ab:ae:
         c9:39:90:07:10:02:54:f1:dc:57:e1:9e:2b:a2:37:04:aa:41:
         4d:95:c5:4f:52:3e:6a:4f:d8:e9:01:60:59:e4:e7:df:aa:bd:
         b7:b9:f7:ee:8a:e3:d6:4d:bf:93:8e:4b:ff:a7:95:d8:07:0e:
         16:22:c6:c6:47:25:45:5e:36:85:9d:b4:8f:22:48:68:3e:27:
         e2:cd:5b:72:30:05:a0:61:5f:c4:b9:9e:f8:f7:b8:e4:5c:e6:
         6d:35:b4:99:a2:95:3c:12:fa:d4:ce:bd:98:9a:12:d6:a1:b0:
         41:5f:d8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:02 2024 by rpki-client on console-fra.rpki-client.org