Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa
File:                     323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa (raw, json)
Hash identifier:          ZVuCKSoLMmCY4r9cfnoDEDaHnZaSMXiplWlfrX9we6k=
Subject key identifier:   D2:E2:F4:00:46:57:EF:28:3C:B7:C4:23:64:F8:A5:B4:02:98:17:FD
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       58F1DFE70B2A0F8F34163897BD132D7159707B2F
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa
Signing time:             Mon 14 Aug 2023 07:53:38 +0000
ROA not before:           Mon 14 Aug 2023 07:48:38 +0000
ROA not after:            Mon 12 Aug 2024 07:53:38 +0000
asID:                     146950
IP address blocks:        2602:feda:b60::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f1:df:e7:0b:2a:0f:8f:34:16:38:97:bd:13:2d:71:59:70:7b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:38 2023 GMT
            Not After : Aug 12 07:53:38 2024 GMT
        Subject: CN=D2E2F4004657EF283CB7C42364F8A5B4029817FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:95:a3:03:eb:0b:84:01:b8:a7:09:e9:ac:54:
                    54:d8:89:15:fd:a1:6a:a6:17:20:a8:b1:13:5a:3b:
                    a8:b0:e7:4f:16:ec:7f:03:79:65:3d:10:0f:81:b7:
                    7c:34:cd:ec:00:21:d2:a7:e3:01:56:1e:77:80:00:
                    02:63:6c:45:ff:1b:40:17:f3:ba:e1:79:29:87:2b:
                    87:d0:eb:c1:2c:90:43:d4:0f:80:8a:61:cb:7b:97:
                    90:61:62:b3:89:ea:db:f2:bb:a5:35:c2:d3:0a:00:
                    bf:63:57:14:46:de:c0:c6:1e:6a:d6:8e:c6:f9:1b:
                    4d:65:92:c7:e3:71:6e:50:55:88:26:4d:8f:3b:0b:
                    8a:dd:ef:84:8d:cc:8a:94:da:69:c3:17:58:6f:72:
                    80:0f:f5:54:26:5c:9c:0b:02:bf:32:58:0f:aa:36:
                    67:14:33:e3:a9:3a:21:19:b3:b2:97:fd:f5:bd:ee:
                    e2:b9:49:96:81:18:5d:d3:5c:39:e0:ee:58:d8:dd:
                    ab:9e:8d:d9:5b:1a:50:01:24:00:ac:c9:27:d5:b6:
                    12:00:9b:16:a6:fd:6d:ff:24:2c:b3:f4:8b:71:02:
                    ca:17:bb:9e:54:4f:0e:dd:f2:18:48:26:87:49:b9:
                    34:18:3f:94:d2:57:f5:7e:b0:a6:21:30:16:5e:b6:
                    8e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E2:F4:00:46:57:EF:28:3C:B7:C4:23:64:F8:A5:B4:02:98:17:FD
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:b60::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:8f:35:f0:8a:36:3a:cf:16:85:93:fe:cc:97:82:1e:29:c5:
         ac:9b:36:c4:79:de:4e:cf:79:56:35:4b:4c:57:ba:8c:37:1f:
         ec:2e:0a:30:30:51:d3:e5:0a:d6:db:b8:69:2b:e4:ab:d1:21:
         20:19:bb:e3:b6:30:9b:1e:53:1b:4c:d5:b8:bf:4a:52:22:d9:
         18:b1:15:3b:03:d3:75:d3:68:c2:a9:c9:f5:ba:6e:5f:18:62:
         21:5f:70:1e:9a:73:db:a2:ca:d6:9a:79:3d:c6:1d:50:35:7e:
         b3:71:d7:57:99:29:01:77:4f:13:50:aa:19:4d:a4:f4:65:44:
         25:1f:0b:dc:ba:d4:f8:63:ed:02:20:06:5e:a8:96:60:cd:b2:
         70:d5:e5:9e:04:9e:6a:8d:19:8a:21:9e:7a:d8:05:ac:d6:67:
         03:a7:01:2b:3a:24:5e:0f:00:e5:8b:3f:54:d2:27:cd:8e:85:
         9b:37:89:32:ab:ff:d9:d5:a0:f9:ed:84:97:65:14:48:17:8c:
         a1:e5:39:e3:0c:83:c7:89:1f:b3:a8:4a:4c:82:8b:a5:34:c9:
         8f:45:00:89:03:ff:6c:f3:c0:97:80:b0:9c:70:3b:a8:41:21:
         33:be:76:43:24:7b:ba:02:bf:ba:df:c3:9d:98:9a:e9:9e:23:
         7d:cc:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:52:00 2024 by rpki-client on console-ams.rpki-client.org