Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa
File:                     323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa (raw, json)
Hash identifier:          DjrMwrd0lcafPBxX7R33sq6pU+zE2Sk8MX9tltnv660=
Subject key identifier:   7F:47:45:19:0B:2C:5D:67:1B:59:F6:F9:27:81:F7:2D:F3:1D:C0:78
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       3DA88D4A544B26AEF58BFC3BBE7649BFB5AA14C1
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa
Signing time:             Mon 15 Jul 2024 08:50:07 +0000
ROA not before:           Mon 15 Jul 2024 08:45:07 +0000
ROA not after:            Mon 14 Jul 2025 08:50:07 +0000
asID:                     146950
IP address blocks:        2602:feda:b60::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:a8:8d:4a:54:4b:26:ae:f5:8b:fc:3b:be:76:49:bf:b5:aa:14:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:07 2024 GMT
            Not After : Jul 14 08:50:07 2025 GMT
        Subject: CN=7F4745190B2C5D671B59F6F92781F72DF31DC078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:29:4d:ab:1a:30:d5:b5:4a:ac:56:0d:b8:67:
                    73:3e:ac:00:ab:38:1c:2c:87:1f:9f:ce:fd:b0:af:
                    76:71:8b:0a:7e:52:1a:b2:13:4f:4c:3a:d4:a7:d9:
                    96:8b:5e:61:cd:d0:c4:fb:eb:40:60:ea:b9:c5:07:
                    38:20:98:95:a0:61:bc:36:1a:0e:21:30:8a:af:65:
                    8e:59:c9:17:a8:80:55:8e:03:d0:fe:4e:75:96:8c:
                    32:a5:cd:77:3e:68:37:ba:ea:d6:bc:a2:37:81:10:
                    37:00:d8:68:04:31:0a:e1:14:85:64:ba:40:6c:2d:
                    2a:5a:63:2a:83:c9:c1:0e:66:ae:cc:c0:c4:d1:27:
                    24:21:63:29:b4:71:50:b8:11:a6:3b:e8:ef:ce:79:
                    f0:3c:55:be:78:e5:f8:8f:5c:91:6e:26:df:e5:f0:
                    5c:ce:6a:82:13:6d:2a:64:c3:42:f8:a4:41:52:3d:
                    6b:71:65:a8:a7:e2:9f:2d:12:86:22:a3:a1:27:c7:
                    70:3d:25:e5:e0:1c:9b:58:8d:32:39:91:4e:4c:2e:
                    ca:b1:55:85:d4:5b:2b:17:ae:13:be:4d:3f:6b:fa:
                    bc:d3:74:80:dd:5e:79:17:37:9c:78:c2:e4:80:1c:
                    ce:ed:8b:01:06:a9:c7:32:b5:21:d0:fb:26:29:d2:
                    7f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:47:45:19:0B:2C:5D:67:1B:59:F6:F9:27:81:F7:2D:F3:1D:C0:78
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6236303a3a2f34342d3438203d3e20313436393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:b60::/44

    Signature Algorithm: sha256WithRSAEncryption
         12:2e:90:22:75:22:69:55:b3:f0:40:83:41:bd:24:37:1c:78:
         1f:f5:47:35:a5:7a:89:3b:c9:7e:1c:50:ef:94:08:a5:12:e9:
         ad:45:a1:f4:d9:d4:fc:05:a8:2f:08:cc:2a:ff:8d:ad:9b:99:
         90:8a:a7:07:ff:d6:b4:45:7e:d3:f6:44:bf:42:ed:85:be:74:
         03:05:a1:5f:a9:fd:55:f0:5c:aa:77:8a:0c:01:c7:81:23:83:
         d3:26:01:89:94:d4:cd:e1:a6:9e:85:a0:7b:04:49:fa:25:1c:
         c0:af:80:db:4a:a1:cb:25:70:b9:ec:73:04:b6:b5:63:8c:39:
         1f:93:fe:d1:07:5c:9c:ef:91:b9:73:c4:5c:d4:d6:a0:75:c2:
         74:27:72:4a:df:89:bb:21:85:e4:93:ed:6d:a9:8d:04:cf:ef:
         e4:8d:43:66:bd:f0:13:c2:36:2f:3c:04:83:a3:e0:c8:33:9b:
         9a:d9:8c:e7:ab:18:10:e8:84:c3:ca:8e:17:76:1d:19:86:e4:
         1b:1d:f2:55:73:7d:80:d5:34:01:9a:1e:ce:d0:8f:6c:b1:bb:
         09:91:d2:f5:c3:b1:b9:40:05:14:bf:25:71:9e:fe:2b:b5:8a:
         48:90:0c:0f:41:5f:97:9b:98:52:8e:ca:2e:f6:96:5e:fb:21:
         89:fe:3f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:01:48 2024 by rpki-client on console-ams.rpki-client.org