Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa
File:                     323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa (raw, json)
Hash identifier:          1vTOJpQL24bvzSp80QrqOjYu1NVOLh3jlnb+eboF2+8=
Subject key identifier:   06:52:89:6F:39:88:AE:38:67:29:2A:1C:5D:96:16:3A:DC:36:F4:0A
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       2BCEDD760DC275F3F9A93E9E67539DC60129D76D
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa
Signing time:             Mon 14 Aug 2023 07:53:37 +0000
ROA not before:           Mon 14 Aug 2023 07:48:37 +0000
ROA not after:            Mon 12 Aug 2024 07:53:37 +0000
asID:                     41255
IP address blocks:        2602:feda:ae4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ce:dd:76:0d:c2:75:f3:f9:a9:3e:9e:67:53:9d:c6:01:29:d7:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:37 2023 GMT
            Not After : Aug 12 07:53:37 2024 GMT
        Subject: CN=0652896F3988AE3867292A1C5D96163ADC36F40A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6f:eb:a4:ac:f1:39:48:30:c0:dd:73:91:a1:
                    05:ad:b2:10:5d:ac:11:0f:5c:3b:9e:46:c9:fc:f3:
                    bc:bd:d6:f0:f2:56:9f:6d:42:11:6f:45:40:f1:fb:
                    3b:37:8d:1c:f2:53:01:48:f4:dd:da:c5:51:1c:f9:
                    7a:70:6e:00:f0:d6:77:ec:ee:68:a3:78:5b:53:d9:
                    61:72:bc:49:fd:cd:d0:31:4f:37:4a:7c:45:12:a3:
                    9f:80:49:35:55:21:43:ec:31:19:52:03:75:1f:d8:
                    75:ad:f7:53:4c:ee:13:6f:85:12:0c:ae:86:f2:a3:
                    bb:38:5c:2d:01:78:3e:2b:2a:e4:4f:df:4a:1f:81:
                    a5:7c:9b:93:18:b9:19:93:78:fb:97:d2:86:74:77:
                    4f:f6:14:79:e1:c3:48:20:73:b4:d4:78:b5:b8:9f:
                    da:cf:7a:95:47:16:5d:d4:12:58:23:01:e6:d4:5e:
                    58:90:cd:9f:3a:57:c3:99:a8:f5:1d:7f:46:a7:20:
                    82:a6:0c:24:2d:2d:fa:e5:d9:98:74:e1:5d:07:e6:
                    5e:bc:46:48:bf:79:4f:b6:03:df:bf:fa:0b:f9:cb:
                    42:d4:2e:70:3e:f8:1f:77:50:20:b1:85:2e:b3:03:
                    09:5d:bb:45:db:72:3c:1c:d8:12:2d:33:84:c1:37:
                    4a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:52:89:6F:39:88:AE:38:67:29:2A:1C:5D:96:16:3A:DC:36:F4:0A
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ae4::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:c0:03:63:a3:2a:b8:94:40:53:b6:91:5d:3e:da:7b:bf:0e:
         16:e8:bf:c6:ec:bd:35:5f:b8:a9:c7:8d:57:ef:89:f3:67:4b:
         db:94:3b:b8:b3:1d:4c:1e:30:06:73:3d:7c:29:b2:a7:05:78:
         73:dd:91:8d:0d:a4:82:47:8f:01:61:51:3e:09:15:d1:41:df:
         48:cc:ac:2e:72:e8:01:ab:9a:10:67:a8:6e:69:e8:ea:3b:61:
         4b:af:e8:91:19:e3:dd:82:c8:bd:41:db:9d:ca:9c:ed:e1:58:
         32:79:9a:a0:28:57:2c:09:59:9b:97:2b:4b:49:0c:3e:af:8e:
         03:4f:01:b6:49:03:f6:02:f2:8a:3f:ff:18:e1:66:44:f3:e2:
         63:a4:59:80:0b:1b:1a:7e:1c:76:9c:bb:56:0a:e9:a0:9c:c7:
         44:9c:fa:23:26:ec:89:ad:de:91:63:45:35:29:73:ba:95:fc:
         43:3a:53:d3:4c:f8:e9:9a:f9:14:b6:56:44:d5:25:a5:26:d0:
         91:7a:10:32:8b:ab:8c:8d:b6:a0:22:37:e9:20:35:a1:c1:5b:
         1b:a4:4b:6b:bd:2e:f8:0f:46:a9:f4:1d:c2:fa:20:eb:e6:26:
         76:87:a7:e2:c2:f8:88:6a:62:9c:10:26:2d:57:40:80:2a:ef:
         78:1d:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:19:52 2024 by rpki-client on console-fra.rpki-client.org