Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa
File:                     323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa (raw, json)
Hash identifier:          drHoXp4J5BqnmXxZ1FssjyWIu8fYTJ1QImrQP3oPx3Y=
Subject key identifier:   26:8C:46:C4:9A:3F:70:1C:E9:16:78:43:26:21:CC:26:CC:1D:22:00
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       43312709BB0A7CDB901FB923B1BE1B92791C50D4
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa
Signing time:             Mon 15 Jul 2024 08:50:06 +0000
ROA not before:           Mon 15 Jul 2024 08:45:06 +0000
ROA not after:            Mon 14 Jul 2025 08:50:06 +0000
asID:                     41255
IP address blocks:        2602:feda:ae4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:31:27:09:bb:0a:7c:db:90:1f:b9:23:b1:be:1b:92:79:1c:50:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:06 2024 GMT
            Not After : Jul 14 08:50:06 2025 GMT
        Subject: CN=268C46C49A3F701CE91678432621CC26CC1D2200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3d:78:ba:79:11:3c:47:68:a2:cd:09:0a:84:
                    75:04:df:32:eb:b8:a9:95:6b:70:2d:b3:59:ef:f7:
                    49:c4:5b:c4:ba:56:1b:15:86:0c:af:29:6c:2b:be:
                    77:f7:34:77:2d:60:70:0d:1f:cd:4a:5a:e7:ed:d3:
                    e2:70:4a:79:20:ba:0b:7a:00:17:f3:02:bf:0f:f2:
                    eb:7e:a7:a6:b5:69:95:fa:ba:eb:29:51:3a:2f:a4:
                    9e:c7:e2:3c:50:84:e5:b2:cd:a7:f2:91:4a:83:15:
                    e8:0d:71:09:8d:08:2d:7d:34:07:14:8d:33:d2:3e:
                    09:04:e8:62:c0:aa:00:b6:44:3e:6e:2d:77:dd:91:
                    26:f1:c7:f7:76:16:78:31:ec:4f:cc:eb:fa:38:59:
                    68:36:2b:e9:92:da:23:2e:6c:26:3e:ea:cd:32:e0:
                    71:76:97:02:08:b0:86:69:db:79:6b:78:fb:29:22:
                    30:29:15:7e:06:ca:21:a4:7b:d0:bf:56:3e:d6:11:
                    49:ab:45:79:1d:9b:7a:83:a0:eb:27:f0:1c:b7:98:
                    8e:2d:6a:e8:e9:71:cc:ad:f6:ed:c5:16:45:02:0c:
                    97:60:4f:7b:4b:b5:42:6d:4f:7d:50:5b:58:2c:ed:
                    32:c3:4d:f2:24:32:63:db:33:e9:10:7c:90:3e:d3:
                    c2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8C:46:C4:9A:3F:70:1C:E9:16:78:43:26:21:CC:26:CC:1D:22:00
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165343a3a2f34382d3438203d3e203431323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ae4::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:5d:3e:8d:6b:f1:71:a2:60:39:1d:7b:95:6f:f7:b0:68:df:
         5e:25:d5:65:38:9e:7c:91:11:3e:17:6d:02:1a:3b:2b:d9:e3:
         2c:40:eb:12:01:9b:54:c9:d4:a1:71:ad:ea:64:a1:11:f6:80:
         34:f5:be:fe:86:e5:0f:11:0c:72:4a:a9:82:86:5f:91:43:72:
         ea:f3:dc:c5:6a:b0:16:6f:ec:b7:bb:84:7a:7c:5b:c9:f9:a0:
         54:00:a0:ed:d3:5b:cc:d5:ee:6a:56:0f:a1:4a:ea:da:08:3e:
         74:6b:dd:b9:5a:78:01:d3:d9:78:c1:86:85:df:0c:e9:63:01:
         f7:68:cf:b5:fe:57:07:78:67:f3:86:8d:35:b4:8d:a8:86:91:
         79:c5:21:c5:57:bd:27:25:ec:8a:cf:d6:14:8f:65:7c:7b:01:
         fd:69:c5:00:3e:c6:02:db:79:36:fe:d0:67:83:8b:d6:09:5c:
         76:74:36:5a:fa:dd:b8:ec:de:c4:6b:a0:dd:93:38:69:13:68:
         35:29:2a:43:14:ba:2c:e0:9a:a7:ed:a9:2e:db:35:0e:8e:2b:
         d2:d1:79:92:2d:fb:d9:58:bf:56:05:44:2a:db:47:56:09:9b:
         5f:fb:bc:4a:ac:a2:b7:f7:6a:aa:96:aa:f2:96:8d:cf:b8:5a:
         ce:af:d0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:37 2024 by rpki-client on console-fra.rpki-client.org