Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165323a3a2f34372d3438203d3e20313338313831.roa
File:                     323630323a666564613a6165323a3a2f34372d3438203d3e20313338313831.roa (raw, json)
Hash identifier:          I7fb9EqY3RN8hl8A4YTD6n8ACi10/AF62Hdqyz7Gmxc=
Subject key identifier:   7A:46:EC:1D:13:99:A7:EC:88:32:1E:31:05:24:CC:17:7F:48:CB:CA
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       6C80AE40D2F644517D9C5FBD59AE542B7066CF84
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165323a3a2f34372d3438203d3e20313338313831.roa
Signing time:             Mon 14 Aug 2023 07:53:31 +0000
ROA not before:           Mon 14 Aug 2023 07:48:31 +0000
ROA not after:            Mon 12 Aug 2024 07:53:31 +0000
asID:                     138181
IP address blocks:        2602:feda:ae2::/47 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:80:ae:40:d2:f6:44:51:7d:9c:5f:bd:59:ae:54:2b:70:66:cf:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:31 2023 GMT
            Not After : Aug 12 07:53:31 2024 GMT
        Subject: CN=7A46EC1D1399A7EC88321E310524CC177F48CBCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:44:c4:09:32:97:d8:d8:4b:79:dc:fd:d1:
                    ae:41:29:6b:eb:a4:3d:5d:6f:45:a9:b8:74:0b:2c:
                    6f:cd:1f:28:6d:33:5d:f5:e2:24:29:6e:50:32:cd:
                    a1:c7:7d:ac:60:40:41:bc:37:d8:ac:c8:cf:42:86:
                    3d:ae:1e:a6:35:f8:62:0d:b8:2a:8e:59:56:ae:9b:
                    4f:00:e0:ad:4f:85:76:82:73:28:af:32:5b:39:81:
                    48:fe:60:45:3a:06:28:cf:9d:01:d5:37:a6:61:89:
                    c4:b5:ee:3a:16:b5:4c:85:21:4d:12:c1:35:a2:52:
                    0e:bb:50:6e:15:24:b0:94:6d:ae:7e:0e:5f:cd:ba:
                    b1:02:83:ff:a4:93:9f:b0:49:d3:d9:4c:37:91:b3:
                    9b:ed:85:6d:bc:eb:30:03:0c:51:55:3e:35:80:98:
                    a5:73:bd:f5:f3:6c:b5:ef:12:7b:59:f6:4c:72:fa:
                    fd:e4:45:98:60:60:73:3f:7f:38:03:b4:d5:9b:1d:
                    a2:1d:00:78:74:fc:5c:71:57:ff:f0:b0:39:61:d2:
                    7b:0c:7e:9f:56:79:09:88:2c:e9:53:e8:7f:0e:a3:
                    9c:29:d5:ca:a9:43:c8:32:40:ad:15:4a:8c:42:a7:
                    b7:af:f8:8e:ed:8d:23:0a:db:8c:3b:cd:2c:4e:52:
                    da:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:46:EC:1D:13:99:A7:EC:88:32:1E:31:05:24:CC:17:7F:48:CB:CA
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165323a3a2f34372d3438203d3e20313338313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ae2::/47

    Signature Algorithm: sha256WithRSAEncryption
         13:33:80:8b:f9:e7:9e:3f:f3:c2:07:db:72:e0:49:99:54:05:
         5e:1d:08:56:3f:fe:dd:d2:5d:64:e3:55:03:fd:b1:d8:44:ea:
         39:18:9f:f1:9d:74:0c:35:a1:30:0c:e9:a8:5f:59:8b:b8:95:
         f0:67:8a:c2:6f:d3:c2:6a:bf:50:90:a9:be:88:3d:e2:63:86:
         32:27:d5:5e:29:17:d9:a7:cc:94:de:68:61:18:7d:9a:59:92:
         c9:e7:59:3e:6e:44:9b:cb:72:a2:f6:5c:1f:f6:31:ac:b2:1c:
         57:78:c1:66:cd:17:2c:b3:f0:1e:25:ae:99:e0:72:73:8a:a4:
         9c:b4:0e:9f:5f:9d:82:10:95:21:bb:68:8b:a4:25:00:c0:fa:
         16:77:17:c5:49:5f:07:4a:5f:04:50:f3:8a:90:2a:dd:c6:f2:
         e2:a4:a2:d5:88:d8:b0:84:c7:fc:a2:83:6a:c3:1a:ef:16:77:
         a1:a9:02:72:78:8c:16:eb:aa:4d:70:c7:d8:b4:83:95:ee:75:
         1c:d2:ca:a0:3e:1f:2d:ee:b3:34:02:59:f6:9c:1a:03:01:94:
         68:cd:cd:df:17:c3:4b:8e:34:62:d7:35:ec:7b:78:82:ab:6d:
         80:93:46:8f:78:b6:65:4d:51:05:cf:70:93:32:f6:a8:e6:98:
         be:ed:25:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:11:41 2024 by rpki-client on console-ams.rpki-client.org