Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166333a3a2f34382d3438203d3e20313331343737.roa
File:                     323630323a666564613a6166333a3a2f34382d3438203d3e20313331343737.roa (raw, json)
Hash identifier:          JNzDxoAazx5MWGOusWwzB35j8CO56itrnqHKq+NQA4Q=
Subject key identifier:   30:02:99:A1:66:A0:98:50:DE:A7:DD:D6:1C:78:D0:C8:BA:1C:DB:A0
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       5617E4C00E3DAB58CB256EB50F2283E29EFD5A6E
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166333a3a2f34382d3438203d3e20313331343737.roa
Signing time:             Mon 15 Jul 2024 08:50:07 +0000
ROA not before:           Mon 15 Jul 2024 08:45:07 +0000
ROA not after:            Mon 14 Jul 2025 08:50:07 +0000
asID:                     131477
IP address blocks:        2602:feda:af3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:17:e4:c0:0e:3d:ab:58:cb:25:6e:b5:0f:22:83:e2:9e:fd:5a:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:07 2024 GMT
            Not After : Jul 14 08:50:07 2025 GMT
        Subject: CN=300299A166A09850DEA7DDD61C78D0C8BA1CDBA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ae:de:89:e4:03:82:7e:61:89:5c:46:3f:01:
                    f9:13:1b:79:93:ea:60:af:9e:c0:a5:7d:38:8d:9a:
                    ea:eb:cf:c8:e2:f1:22:63:6f:e7:38:53:c6:12:11:
                    65:9a:5a:b6:ad:6b:26:dc:7a:40:3c:19:cb:e7:39:
                    10:ce:1d:ea:72:e4:41:c0:d6:0a:7b:ef:a0:e9:bb:
                    f3:23:51:6b:38:93:70:25:e3:53:51:4b:f3:90:5e:
                    f1:4c:da:53:74:78:7c:4a:4a:e0:3d:1e:d9:08:46:
                    33:3b:a8:28:3d:88:c3:d3:3f:14:b4:29:34:09:22:
                    4e:62:a1:09:2b:5e:27:66:8d:c0:3f:82:be:2f:0e:
                    28:c8:4c:f3:63:7c:b1:ca:3b:8f:7c:38:c3:84:f7:
                    ed:08:19:49:44:7d:d7:6d:5a:f1:d4:db:86:59:33:
                    63:fc:bd:6d:dc:34:91:c6:9a:bb:c2:12:7a:4d:45:
                    1e:e4:12:2d:2f:64:9d:94:22:9d:0c:c4:1f:fe:b1:
                    c5:ff:76:e4:e9:f1:3f:96:5d:24:99:96:c1:f0:51:
                    1c:b2:2d:4a:a6:ee:6b:2b:c3:7b:f4:df:00:76:ae:
                    ff:e6:e7:0d:64:5e:7d:45:92:06:a9:c7:5f:b6:2d:
                    ad:97:9d:86:48:e1:9a:1e:77:02:dd:a6:f2:7d:4e:
                    ca:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:02:99:A1:66:A0:98:50:DE:A7:DD:D6:1C:78:D0:C8:BA:1C:DB:A0
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6166333a3a2f34382d3438203d3e20313331343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:af3::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:19:de:f3:b9:c1:a8:bf:bb:c5:e6:66:8e:6d:c0:b7:65:7e:
         08:35:f9:9f:a5:f9:7d:c8:8d:95:80:1c:61:e2:63:26:7a:c8:
         be:55:5a:27:81:95:c9:3d:cf:fb:35:09:f7:2c:d1:b7:a3:a1:
         0d:b2:a4:95:18:e2:a1:e9:0c:ef:1c:9e:2a:74:75:75:76:7c:
         c0:99:5b:00:42:93:1c:6a:40:52:f1:3c:2b:d5:a1:a5:1a:4a:
         f5:e5:4b:6d:da:ff:98:5a:ea:bc:85:13:8d:7c:83:6a:d6:37:
         2c:65:89:d5:14:b7:28:5c:32:c0:9e:a6:93:c8:1b:9e:f5:f9:
         60:da:76:ac:01:e7:34:2a:c8:29:ea:4d:52:df:3f:13:c8:86:
         fd:b8:66:ad:6b:26:c4:f3:37:ec:51:51:42:6f:7f:da:f4:95:
         7c:69:d2:ac:d9:d0:cb:0e:6c:c7:45:79:c1:b4:1a:29:f3:37:
         62:bf:bb:a7:7b:2d:a4:a5:21:e5:19:d9:3b:bf:00:bd:a5:d0:
         dd:65:98:f0:0b:1c:2b:f8:c6:2a:ff:fc:b2:e2:35:9d:52:b1:
         50:64:a8:b2:ba:93:e9:45:e4:f5:cf:47:6e:34:5a:81:b8:a2:
         50:72:b4:db:b1:0b:cd:fa:1b:d8:86:dc:87:4b:52:b6:71:79:
         b0:d3:aa:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:01:48 2024 by rpki-client on console-ams.rpki-client.org