Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa
File:                     323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa (raw, json)
Hash identifier:          +X6t5hCOdr1i091V3fUA45PznHog6fHKMQoj79xOTKw=
Subject key identifier:   A8:BA:52:A8:89:8A:AA:72:FF:7C:49:AD:29:A5:35:C8:52:9F:71:E9
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       5F1FF10F7D4565ED7A7AFC3D7B77F6B016F87FAA
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa
Signing time:             Mon 14 Aug 2023 07:53:31 +0000
ROA not before:           Mon 14 Aug 2023 07:48:31 +0000
ROA not after:            Mon 12 Aug 2024 07:53:31 +0000
asID:                     212705
IP address blocks:        2602:feda:b70::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:1f:f1:0f:7d:45:65:ed:7a:7a:fc:3d:7b:77:f6:b0:16:f8:7f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:31 2023 GMT
            Not After : Aug 12 07:53:31 2024 GMT
        Subject: CN=A8BA52A8898AAA72FF7C49AD29A535C8529F71E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:af:15:f6:c9:08:f4:e8:70:d1:a9:24:fc:c2:
                    ff:f9:23:95:99:98:db:99:00:0e:2e:2c:ae:f5:b0:
                    15:0b:8a:3c:cf:0b:ab:93:e0:21:7d:8e:fb:7a:89:
                    1e:4a:33:f1:36:97:7c:02:ac:dc:19:43:bd:99:61:
                    8b:63:5e:18:96:b5:52:6e:3c:1c:2a:f3:b5:bb:84:
                    e5:c9:aa:d4:35:54:d2:4e:ca:df:b9:82:e2:7b:97:
                    e4:76:3f:e3:ec:9d:42:48:97:45:e9:7a:6b:e3:0c:
                    bb:62:39:e4:50:cb:3a:2b:86:37:d9:13:bd:c7:c5:
                    05:0f:c5:83:51:0f:ef:33:49:78:dd:33:c3:bc:d0:
                    7d:c0:16:d8:40:55:a9:8e:8e:0e:fe:ea:f3:01:f5:
                    84:b3:a1:e4:bd:3e:ba:c1:e8:72:54:92:61:37:97:
                    5a:c9:58:71:ea:76:55:40:1f:34:34:5c:cc:f5:36:
                    6c:73:9f:f7:2c:e7:1b:12:6e:b1:e9:a9:1c:e8:44:
                    f3:0e:e6:56:f2:5d:2c:db:a8:94:b5:c6:54:7b:11:
                    74:47:06:ed:e0:a0:0b:c0:30:7c:b8:53:ea:b1:84:
                    61:0f:8b:d3:2b:01:96:b1:7b:ee:a4:b2:1f:85:c6:
                    27:fd:c7:13:2a:c8:c3:a0:49:59:fe:45:5b:f0:95:
                    b3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BA:52:A8:89:8A:AA:72:FF:7C:49:AD:29:A5:35:C8:52:9F:71:E9
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6237303a3a2f34342d3438203d3e20323132373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:b70::/44

    Signature Algorithm: sha256WithRSAEncryption
         c4:4e:f1:c0:84:16:69:b6:a3:27:ba:98:2c:5b:67:46:16:e9:
         dc:3b:4b:0d:22:62:15:07:ab:da:a5:ed:fa:d3:11:cb:05:f6:
         32:a6:5e:ee:c8:9f:69:46:ef:18:ae:f0:fd:e4:78:e5:69:c7:
         84:bd:87:65:23:d7:89:d3:7e:24:bc:04:cc:c0:44:b2:77:34:
         d3:72:10:0a:fb:c7:99:5d:f9:95:c8:ad:99:21:67:f5:43:44:
         4f:ed:cb:68:2f:e1:f1:88:61:78:7b:c0:81:d8:9f:f7:24:b6:
         64:ec:d3:b8:85:30:7d:60:0f:64:f6:21:6c:8e:4e:cd:1f:bc:
         8a:51:91:bd:33:a3:4f:dd:68:7c:82:f3:10:65:c3:66:f1:79:
         be:3c:38:eb:89:0e:4f:45:27:29:fe:6b:fe:38:04:94:3d:17:
         f1:cb:40:ea:e7:f3:88:56:94:63:f3:ca:08:78:4f:3d:93:9a:
         1d:ad:c6:4e:9d:60:0d:3c:37:67:19:81:9f:db:10:ff:23:6a:
         e2:e6:89:52:92:e5:e8:bd:12:1a:6c:d8:ee:76:03:bf:64:c4:
         5d:12:4c:69:2f:7e:ee:62:23:66:5d:5a:f1:c0:20:fa:b1:c5:
         48:93:58:fa:ef:04:00:50:6f:03:bf:c6:5d:cc:04:38:e5:9f:
         bf:2b:38:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:19:52 2024 by rpki-client on console-fra.rpki-client.org