Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6234323a3a2f34382d3438203d3e20313432313330.roa
File:                     323630323a666564613a6234323a3a2f34382d3438203d3e20313432313330.roa (raw, json)
Hash identifier:          NAPw9radaI0bd2rY6ByzESQAm/m5cbRKbPJs1aC6hG4=
Subject key identifier:   4E:2B:8B:CF:7A:72:FA:12:5B:7A:18:77:EA:B3:C9:14:14:CC:5E:DE
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       054F2EC92F7513751253E3BF19386464D4CDBAA2
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6234323a3a2f34382d3438203d3e20313432313330.roa
Signing time:             Mon 14 Aug 2023 07:53:34 +0000
ROA not before:           Mon 14 Aug 2023 07:48:34 +0000
ROA not after:            Mon 12 Aug 2024 07:53:34 +0000
asID:                     142130
IP address blocks:        2602:feda:b42::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:4f:2e:c9:2f:75:13:75:12:53:e3:bf:19:38:64:64:d4:cd:ba:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:34 2023 GMT
            Not After : Aug 12 07:53:34 2024 GMT
        Subject: CN=4E2B8BCF7A72FA125B7A1877EAB3C91414CC5EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4d:4a:05:1e:6d:a0:ea:ac:17:bb:d2:13:a0:
                    cb:23:97:5a:69:88:a7:c2:81:23:f2:5c:87:73:e4:
                    53:fe:97:4b:cf:01:f4:49:eb:f6:93:5c:53:2b:70:
                    00:e5:8d:7c:fc:a3:f7:7a:c5:81:51:36:5d:9f:ac:
                    10:fd:4a:cd:43:f7:d3:68:9d:30:37:d6:5c:d3:ce:
                    ce:2c:08:a4:6c:62:2c:82:9f:de:03:97:64:59:07:
                    73:ed:d9:25:9d:3f:4f:c5:dd:39:97:6c:d4:9b:73:
                    8e:9c:60:d8:7f:c3:2e:f2:44:2b:2d:4d:b3:cd:b0:
                    3f:de:0e:be:61:76:a3:39:42:c5:92:0f:14:f0:12:
                    82:7f:c0:8b:ed:c6:54:41:de:14:fe:cc:55:7a:28:
                    70:55:c5:fa:b5:ad:d9:11:8c:c5:f8:0d:26:42:36:
                    17:a9:99:b5:a3:a8:8c:cb:d5:f1:f9:8b:53:58:82:
                    58:ba:22:8b:34:be:a7:8b:42:ce:42:ea:d3:5c:be:
                    5e:d1:5f:96:36:7c:25:73:09:50:a6:f7:01:9f:40:
                    1c:32:fb:f2:de:3d:7d:8b:ff:4a:dd:02:f0:ec:a4:
                    43:df:eb:f2:df:19:84:4f:39:e0:17:03:60:a3:b9:
                    74:ce:b5:b3:1e:0a:f3:e3:a3:e9:20:f6:94:fd:ac:
                    a5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2B:8B:CF:7A:72:FA:12:5B:7A:18:77:EA:B3:C9:14:14:CC:5E:DE
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6234323a3a2f34382d3438203d3e20313432313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:b42::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:dc:d8:42:f6:6b:e6:15:68:66:44:dc:be:d8:2b:8d:7e:cc:
         61:17:ce:4a:b2:4d:76:28:70:07:4b:68:45:31:ad:94:1f:1e:
         2a:63:d3:ab:97:e2:56:8a:b8:c9:db:d0:99:0e:dc:3e:3f:72:
         77:7d:4a:02:de:a1:f3:4a:89:fc:d7:fb:24:ef:4b:20:54:3b:
         18:6e:e1:a4:61:df:6a:14:26:e6:ac:a6:1c:fa:0f:28:e1:9b:
         27:2d:9f:24:08:c3:06:f1:f9:53:a2:54:b0:f7:4a:93:58:1d:
         62:83:be:9a:fc:2a:94:3a:8f:95:ea:5e:fc:27:fe:0e:06:fc:
         f2:81:c3:80:dc:35:0f:b6:6d:55:3b:28:60:aa:39:21:d9:22:
         c2:e6:db:09:c8:4c:0f:63:96:6a:cf:2d:d0:25:f5:d7:c2:62:
         a3:6a:7e:de:bf:74:e1:ca:a1:07:a4:01:d1:c1:db:7d:1c:a1:
         46:79:26:64:9f:c7:7d:fe:2f:7f:9e:a5:6d:9c:0f:c3:17:30:
         bb:ee:cf:f3:2d:67:56:95:53:84:38:51:33:11:23:2b:a3:d2:
         39:a9:a7:ca:fb:d5:0a:ff:77:61:a3:48:69:60:30:bf:94:8e:
         2c:c3:a8:b3:e1:2e:36:ff:61:52:f5:bc:cf:31:f4:22:6b:d5:
         71:ba:2a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:19:52 2024 by rpki-client on console-fra.rpki-client.org