Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa
File:                     323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa (download)
Hash identifier:          hJ24/hLAlceEzG3eeNaVVpdN24392j3DyPjIA3wX+Jg=
Subject key identifier:   1A:5F:E0:8B:E8:4C:21:C0:BA:69:88:C5:04:14:BC:A3:EA:69:2A:F2
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       3DAE9D0CF8EDA48593440D7E1327E53AA21DD26F
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa
ROA valid until:          Sep 11 07:23:03 2023 GMT
asID:                     207803
IP address blocks:
    1: 2602:feda:b80::/45 maxlen: 48

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ae:9d:0c:f8:ed:a4:85:93:44:0d:7e:13:27:e5:3a:a2:1d:d2:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Sep 12 07:18:03 2022 GMT
            Not After : Sep 11 07:23:03 2023 GMT
        Subject: CN=1A5FE08BE84C21C0BA6988C50414BCA3EA692AF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cd:e0:6d:4b:33:35:6d:82:de:2c:c5:e0:b6:
                    1e:90:ba:0b:17:35:dc:d6:48:4d:48:90:2c:c6:5f:
                    5c:70:7d:c4:a9:f5:10:9d:a9:fd:a5:b3:a8:ef:b8:
                    4b:d3:89:2d:c6:56:b4:85:2b:f0:9a:6c:35:b5:ba:
                    2b:c4:27:49:d4:36:e6:5c:f1:4f:67:6d:fd:56:18:
                    c0:b1:b1:92:7a:6b:9c:32:59:2b:c6:22:59:b8:da:
                    99:a7:c8:f3:03:c5:41:ab:2d:df:da:cc:11:c0:22:
                    1e:c6:6c:05:48:92:44:9b:ac:8c:1c:e5:60:b6:ed:
                    09:22:d7:52:9c:67:16:d9:89:44:29:4a:9a:b5:eb:
                    3c:86:2b:93:de:8e:3b:8d:2e:32:1e:2a:60:ae:c8:
                    e3:76:c3:46:63:09:94:f7:04:0d:53:89:f8:85:83:
                    9e:81:9d:9d:56:b4:05:9c:1f:50:cc:d6:de:19:80:
                    43:68:12:67:cd:46:b0:05:b8:ad:bb:07:5e:86:24:
                    8a:9f:19:84:dc:ff:28:14:44:0e:35:c9:0f:36:b1:
                    97:dc:33:e1:d0:7f:f2:50:22:a6:b9:03:b0:d6:5e:
                    94:eb:dc:7b:db:b8:8c:d8:53:13:43:4e:dd:f5:e5:
                    ad:9d:df:b2:ec:19:2d:e4:41:0e:7e:0b:43:b6:7c:
                    9f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1A:5F:E0:8B:E8:4C:21:C0:BA:69:88:C5:04:14:BC:A3:EA:69:2A:F2
            X509v3 Authority Key Identifier: 
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access: 
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238303a3a2f34352d3438203d3e20323037383033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:b80::/45

    Signature Algorithm: sha256WithRSAEncryption
         79:0b:c1:d9:65:51:24:e5:60:c0:e7:6b:dd:8b:c3:8e:8d:56:
         ee:b4:32:09:84:50:60:49:05:5b:18:61:d8:7e:21:9e:d2:e0:
         e3:77:a0:ab:9a:38:72:46:ce:9e:11:01:e2:44:8e:49:d7:c8:
         2b:70:ca:ae:05:a6:cb:4d:17:6d:c3:83:aa:16:95:a9:62:7c:
         31:62:e9:8b:4d:e8:b7:ba:90:27:8a:36:84:b7:a8:0a:ed:51:
         1b:b0:2f:cc:a9:30:7f:3b:46:5e:c6:0f:ac:79:fd:0a:3c:a6:
         6d:eb:dd:b8:65:1f:68:40:ce:bd:38:04:8b:b7:38:77:43:1e:
         e5:46:f7:df:a0:92:3e:cd:90:be:fc:af:95:40:4e:57:6f:6c:
         8c:bb:64:ca:45:ef:ac:32:80:e0:06:ad:40:02:7f:64:55:cb:
         9d:a8:90:45:ba:76:9b:96:da:77:a6:a6:58:50:21:08:5b:8d:
         24:2f:61:83:1d:6c:3c:2c:c5:d2:8b:70:bb:91:5e:ee:db:29:
         ab:c3:a8:f9:f5:15:11:68:c9:6f:43:5d:0c:38:43:65:33:2c:
         0f:fb:fa:9a:47:e9:3f:70:9f:1d:0d:e3:d5:fb:b4:51:42:6f:
         98:10:fa:e9:bc:ed:7d:eb:9f:ba:25:70:6b:32:c7:c4:7e:d0:
         dc:6c:0e:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 05:16:30 2022 by rpki-client.