Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238653a3a2f34382d3536203d3e20323131393335.roa
File:                     323630323a666564613a6238653a3a2f34382d3536203d3e20323131393335.roa (raw, json)
Hash identifier:          Y75MIVMy4fta2Z4XPdeTWxIHYmiaO6iHdLBuvJOZC7o=
Subject key identifier:   50:8C:EB:64:8C:F6:56:0D:2E:AF:ED:87:8F:59:79:4C:4A:6E:B1:E7
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       4E4E1122EE84D59088281ED856231BDE2379DFF5
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238653a3a2f34382d3536203d3e20323131393335.roa
Signing time:             Mon 15 Jul 2024 08:50:04 +0000
ROA not before:           Mon 15 Jul 2024 08:45:04 +0000
ROA not after:            Mon 14 Jul 2025 08:50:04 +0000
asID:                     211935
IP address blocks:        2602:feda:b8e::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 16:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4e:11:22:ee:84:d5:90:88:28:1e:d8:56:23:1b:de:23:79:df:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:04 2024 GMT
            Not After : Jul 14 08:50:04 2025 GMT
        Subject: CN=508CEB648CF6560D2EAFED878F59794C4A6EB1E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:ba:6c:07:61:5b:db:ed:04:28:38:48:14:
                    8b:3d:97:af:6c:6f:d9:2a:d3:48:03:dc:dd:09:88:
                    02:34:46:eb:5d:78:05:2e:8b:91:13:32:65:a1:16:
                    e7:c5:7b:43:87:96:07:2c:dd:cc:55:2e:73:6d:0d:
                    fc:4d:f7:31:90:d0:d8:9c:f5:cf:8d:ad:fc:2f:98:
                    db:40:de:ed:75:05:bc:dd:ea:f2:79:c5:bb:27:f1:
                    7b:76:02:9d:27:20:67:81:36:df:a1:80:64:b0:04:
                    4a:9d:f5:a6:e6:bb:79:39:02:e9:86:a9:e1:82:22:
                    f6:52:ce:b9:74:95:ea:8e:aa:8b:60:5a:16:c1:bc:
                    f9:26:1c:b8:76:56:3b:c5:77:24:68:1a:c6:1c:cc:
                    20:c0:cf:0c:ce:ee:1c:cb:b6:1d:0f:5c:ed:ea:d3:
                    b4:5d:91:36:a5:44:40:75:d3:85:e9:63:22:a5:79:
                    cd:8d:50:4b:89:8d:a4:48:1b:38:87:35:a5:2d:38:
                    5e:ad:fd:4a:87:a3:59:10:58:ed:7c:df:8b:16:02:
                    f8:7e:47:18:ff:4f:d7:1f:b4:fb:ba:11:fe:70:c6:
                    3e:de:fa:61:a2:74:c4:b4:e2:37:44:bc:a2:63:a3:
                    62:35:52:8f:c5:71:84:d5:70:9c:ed:92:83:e9:97:
                    45:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8C:EB:64:8C:F6:56:0D:2E:AF:ED:87:8F:59:79:4C:4A:6E:B1:E7
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238653a3a2f34382d3536203d3e20323131393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:b8e::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:b9:03:8e:51:ce:13:9f:47:28:2a:ca:c8:68:1d:e4:16:
         4e:23:de:c4:8f:b6:9d:f0:0e:8f:01:64:99:f0:dd:b2:68:56:
         9d:2c:7e:8f:55:ac:08:25:55:db:ad:a8:82:81:10:a2:cb:71:
         29:13:da:2d:15:c6:af:e3:2d:f0:a9:52:63:1c:1b:15:6c:bf:
         da:cc:ee:68:4c:73:45:b1:74:20:90:b8:eb:a6:d4:57:44:cd:
         ba:b3:cc:c3:38:7e:42:4f:7a:2e:27:7c:e7:37:52:63:2b:ad:
         38:d2:71:0f:d2:f3:ee:80:bb:c4:c0:3d:40:2c:6b:9e:f4:76:
         11:28:2f:72:5c:04:ce:24:f5:7e:b8:97:a2:e9:d0:0f:0d:34:
         c9:51:1e:15:6a:0b:56:24:13:af:29:f7:32:fe:1f:a6:57:5a:
         cb:b0:8e:88:bf:03:ca:17:95:2e:32:4b:0d:a7:ce:1e:39:dd:
         a8:3b:eb:81:b4:32:32:70:26:5d:cf:8f:f9:5a:ed:2e:39:18:
         62:22:d9:3c:80:7a:d0:d8:d8:f0:78:33:53:16:a9:62:6d:ff:
         e6:b5:36:44:ef:a6:d3:9c:a3:cc:e0:7c:64:be:a6:51:0c:a3:
         ec:78:67:6b:57:ab:40:7c:91:22:45:48:38:8f:07:ab:f5:be:
         89:28:cf:bf
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUTk4RIu6E1ZCIKB7YViMb3iN53/UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTA0WhcNMjUwNzE0MDg1MDA0
WjAzMTEwLwYDVQQDEyg1MDhDRUI2NDhDRjY1NjBEMkVBRkVEODc4RjU5Nzk0QzRB
NkVCMUU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHS6bAdhW9vt
BCg4SBSLPZevbG/ZKtNIA9zdCYgCNEbrXXgFLouREzJloRbnxXtDh5YHLN3MVS5z
bQ38TfcxkNDYnPXPja38L5jbQN7tdQW83eryecW7J/F7dgKdJyBngTbfoYBksARK
nfWm5rt5OQLphqnhgiL2Us65dJXqjqqLYFoWwbz5Jhy4dlY7xXckaBrGHMwgwM8M
zu4cy7YdD1zt6tO0XZE2pURAddOF6WMipXnNjVBLiY2kSBs4hzWlLTherf1Kh6NZ
EFjtfN+LFgL4fkcY/0/XH7T7uhH+cMY+3vphonTEtOI3RLyiY6NiNVKPxXGE1XCc
7ZKD6ZdFSQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFFCM62SM9lYNLq/th49ZeUxK
brHnMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6
Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh
NjIzODY1M2EzYTJmMzQzODJkMzUzNjIwM2QzZTIwMzIzMTMxMzkzMzM1LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAJgL+2guOMA0GCSqGSIb3DQEBCwUAA4IBAQCTbbkDjlHOE59HKCrKyGgd
5BZOI97Ej7ad8A6PAWSZ8N2yaFadLH6PVawIJVXbraiCgRCiy3EpE9otFcav4y3w
qVJjHBsVbL/azO5oTHNFsXQgkLjrptRXRM26s8zDOH5CT3ouJ3znN1JjK6040nEP
0vPugLvEwD1ALGue9HYRKC9yXATOJPV+uJei6dAPDTTJUR4VagtWJBOvKfcy/h+m
V1rLsI6IvwPKF5UuMksNp84eOd2oO+uBtDIycCZdz4/5Wu0uORhiItk8gHrQ2Njw
eDNTFqlibf/mtTZE76bTnKPM4HxkvqZRDKPseGdrV6tAfJEiRUg4jwer9b6JKM+/
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:52 2025 by rpki-client