Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6234323a3a2f34382d3438203d3e20313432313330.roa
File:                     323630323a666564613a6234323a3a2f34382d3438203d3e20313432313330.roa (raw, json)
Hash identifier:          BxnQmbjVNevX8ZAF2HXhi9blxp76m3W7HtD13LIFFb0=
Subject key identifier:   6B:E5:29:A6:8E:A7:A0:F0:D2:0A:21:98:DF:11:8F:FD:81:96:FB:B0
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       5B3CEF699A9DE3925F235BE6C9024FCFCE5B3741
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6234323a3a2f34382d3438203d3e20313432313330.roa
Signing time:             Mon 15 Jul 2024 08:50:15 +0000
ROA not before:           Mon 15 Jul 2024 08:45:15 +0000
ROA not after:            Mon 14 Jul 2025 08:50:15 +0000
asID:                     142130
IP address blocks:        2602:feda:b42::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 14:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:3c:ef:69:9a:9d:e3:92:5f:23:5b:e6:c9:02:4f:cf:ce:5b:37:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:15 2024 GMT
            Not After : Jul 14 08:50:15 2025 GMT
        Subject: CN=6BE529A68EA7A0F0D20A2198DF118FFD8196FBB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:45:9f:e8:89:6f:3f:af:40:67:cc:b1:6a:5a:
                    12:9d:ba:dd:4c:75:dc:aa:3c:4a:1c:15:b7:83:ae:
                    f6:2d:84:af:4e:a0:99:42:a7:5e:57:d6:51:d2:17:
                    e9:7d:00:9a:7e:8b:c8:c2:47:80:c3:8a:7b:78:1e:
                    9a:4c:62:85:75:d3:2f:53:af:f1:99:f8:f5:ed:8c:
                    61:58:e7:b8:6f:a1:77:86:ad:39:c6:af:2f:e2:81:
                    d5:42:13:7a:35:85:bc:d3:ed:6a:18:b8:2d:be:0e:
                    ac:45:eb:94:84:de:a0:34:f6:3e:94:bb:65:dd:d5:
                    92:04:39:38:35:db:2c:1c:46:27:28:ba:0c:db:38:
                    a2:8e:5d:16:1b:77:08:ee:5e:c9:a4:e9:80:5b:c1:
                    c1:0c:e8:0f:e1:bd:45:52:ad:cd:71:f1:04:e9:21:
                    81:72:49:29:47:09:fd:9f:7b:02:92:51:ef:8f:36:
                    db:75:fa:aa:4e:ae:50:03:7e:53:56:a3:88:82:b1:
                    63:68:47:da:c4:f2:78:47:02:29:af:ca:ec:74:58:
                    c8:75:00:33:76:41:26:dc:e2:2d:cd:57:f4:37:02:
                    ff:78:4d:0d:05:2c:4b:57:f2:4f:04:a9:d4:b0:20:
                    e7:fb:b1:61:4f:38:4d:33:cd:62:43:97:66:f5:94:
                    ab:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E5:29:A6:8E:A7:A0:F0:D2:0A:21:98:DF:11:8F:FD:81:96:FB:B0
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6234323a3a2f34382d3438203d3e20313432313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:b42::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:26:b1:07:f5:c9:d3:25:b1:5f:77:00:00:b0:2b:69:f9:fc:
         f8:7f:1e:39:67:04:10:4b:7d:17:4d:59:e3:ce:15:8e:9b:2b:
         88:6b:77:01:a3:b6:10:58:ca:56:50:ed:21:37:a8:e7:12:b6:
         21:c6:55:41:ea:b7:72:94:3f:48:37:05:5d:5e:a8:24:30:cc:
         96:30:d3:44:ea:39:38:78:e9:3f:98:e5:2f:44:9b:2a:f5:1c:
         4c:8d:ea:9a:75:41:99:83:1a:a7:4f:33:a5:20:b6:8c:ae:26:
         0d:5f:0d:25:9f:31:41:0e:a4:c4:95:7a:44:fe:65:4a:4a:10:
         a5:85:a7:c8:55:5a:75:7d:2a:fa:65:20:a3:8c:b5:e4:d7:aa:
         79:78:f8:66:92:a0:72:3b:e6:ed:dd:59:7a:82:6f:d3:91:19:
         aa:d3:af:73:81:37:af:8d:9a:f9:58:ca:bc:94:5b:b5:ee:d2:
         e1:3c:92:9b:87:18:3b:04:a9:26:17:30:ef:bf:cf:f3:ca:21:
         9b:f7:a4:39:75:92:3b:f3:91:00:de:97:33:a7:fe:31:e7:e6:
         46:dc:c0:db:c0:b3:b9:cd:88:1a:e6:1d:4b:4b:38:82:9a:89:
         9b:22:8b:22:1c:90:f1:16:59:8f:e2:fd:23:20:6d:25:b8:c8:
         94:23:cb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:43 2024 by rpki-client on console-ams.rpki-client.org