Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238633a3a2f34382d3438203d3e20323030333334.roa
File:                     323630323a666564613a6238633a3a2f34382d3438203d3e20323030333334.roa (raw, json)
Hash identifier:          IWUHsWrzEIQWIo00LsWhUxP3PjcncPpyUAI6uOap8JM=
Subject key identifier:   28:26:31:A1:40:B2:EA:78:39:20:55:67:65:88:13:D0:45:14:27:27
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       50D9984950F4D14495B7EA6EBBDDE3771ADB8CA6
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238633a3a2f34382d3438203d3e20323030333334.roa
Signing time:             Mon 14 Aug 2023 07:53:38 +0000
ROA not before:           Mon 14 Aug 2023 07:48:38 +0000
ROA not after:            Mon 12 Aug 2024 07:53:38 +0000
asID:                     200334
IP address blocks:        2602:feda:b8c::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d9:98:49:50:f4:d1:44:95:b7:ea:6e:bb:dd:e3:77:1a:db:8c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:38 2023 GMT
            Not After : Aug 12 07:53:38 2024 GMT
        Subject: CN=282631A140B2EA7839205567658813D045142727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:90:47:86:1a:30:18:2d:80:7f:96:27:d2:b7:
                    7c:73:70:00:72:14:58:02:aa:d6:62:16:01:cc:dd:
                    19:5b:e5:ed:69:0b:36:51:f8:8e:8a:92:13:7c:7b:
                    86:f1:49:49:13:2b:77:7c:01:46:4a:49:7a:84:22:
                    6b:59:7c:55:b5:ad:eb:1d:fc:13:ff:84:11:b1:b9:
                    47:7e:60:24:87:3a:11:2a:60:cf:d3:41:05:e1:7b:
                    91:ef:3f:b5:3d:e4:39:02:a5:9f:7f:4d:81:6e:62:
                    55:00:fb:77:91:6c:dd:ad:b7:e2:0f:1c:79:0f:5b:
                    ae:d8:65:ee:45:1b:b7:8f:29:e2:0e:51:b8:2f:22:
                    51:98:f8:6f:59:70:9a:57:8a:a8:c7:ef:7f:13:a9:
                    5c:34:2e:16:96:8b:4c:eb:e7:f2:e1:f0:7a:e2:7c:
                    26:78:a0:a1:0f:06:ba:4f:a4:4b:e2:b0:e9:f2:4b:
                    e4:ff:17:0e:d8:e2:98:6a:d3:dd:ca:d8:bc:26:60:
                    4f:7d:a8:b8:25:1f:de:a2:ee:bd:2b:69:82:96:4b:
                    ff:15:a8:6b:91:c4:e6:5c:9f:00:8f:b5:f4:50:de:
                    b8:a9:04:49:47:2c:07:6e:eb:34:7b:da:32:b5:ba:
                    0f:c8:80:8b:eb:79:a8:99:c4:60:a4:d2:fd:6b:ed:
                    80:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:26:31:A1:40:B2:EA:78:39:20:55:67:65:88:13:D0:45:14:27:27
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238633a3a2f34382d3438203d3e20323030333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:b8c::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:8e:63:d3:09:e3:31:17:83:2c:0a:9d:78:2a:48:a7:db:0a:
         85:79:32:c8:77:5e:6d:7f:2d:54:6f:86:06:66:00:9c:86:d0:
         4f:16:87:d8:18:aa:28:c8:1c:f6:13:62:3b:0d:eb:ec:d7:e4:
         08:a7:76:db:54:d4:78:15:9b:41:ca:10:41:e9:60:eb:cc:eb:
         80:42:b4:51:ae:61:fb:91:b6:0b:59:9e:14:62:8f:21:6e:ac:
         2b:2c:34:59:a5:2f:92:9c:c8:56:ae:f1:0d:74:aa:6e:86:22:
         56:a1:73:e1:75:c0:56:8b:f6:d7:7a:8b:8f:50:c7:40:65:4e:
         d5:53:3c:ed:bd:5f:14:db:6a:a2:b5:f1:cf:64:06:31:8e:6c:
         9a:79:7c:58:20:b4:a4:c1:04:4b:67:8a:e8:fb:c2:3c:5a:ca:
         2e:88:03:c0:f3:b3:c9:86:84:5e:af:d6:91:fe:2b:bb:d0:90:
         09:f4:b6:ac:80:40:93:4f:f7:9c:3d:28:d6:63:9b:a7:06:4b:
         b6:35:3d:6e:12:2e:0a:cf:7b:f3:c5:c3:bd:72:05:c8:b6:91:
         d7:8a:be:e3:49:f1:e8:9e:96:8f:bd:0a:3b:31:35:95:85:c4:
         01:3d:2b:b5:9d:07:12:ef:cd:37:8d:dd:c8:95:90:73:51:dc:
         f5:4c:66:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:30:34 2024 by rpki-client on console-fra.rpki-client.org