Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa
File:                     323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa (raw, json)
Hash identifier:          HwARlTsQxQch5461n4J5oebbFbQfRcohdWp6s9fgfrI=
Subject key identifier:   A6:1D:83:53:83:00:B8:ED:39:5B:A2:04:0A:1C:F8:23:13:61:29:95
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       3835C635DCB8BBB3F13B6B3A28E6106AA98DA20C
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa
Signing time:             Mon 15 Jul 2024 08:50:07 +0000
ROA not before:           Mon 15 Jul 2024 08:45:07 +0000
ROA not after:            Mon 14 Jul 2025 08:50:07 +0000
asID:                     205923
IP address blocks:        2602:feda:b8f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:35:c6:35:dc:b8:bb:b3:f1:3b:6b:3a:28:e6:10:6a:a9:8d:a2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:07 2024 GMT
            Not After : Jul 14 08:50:07 2025 GMT
        Subject: CN=A61D83538300B8ED395BA2040A1CF82313612995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:96:20:52:d0:ac:97:08:73:4c:10:28:dc:31:
                    2f:7e:95:3c:af:45:ea:08:08:20:66:5a:c6:36:ad:
                    28:ac:81:2d:61:f9:74:48:5f:11:93:3b:47:9e:0c:
                    f6:87:75:d8:16:6b:e4:70:29:32:6c:80:40:b7:fb:
                    f7:14:76:f4:8b:6a:0e:e9:8d:98:b6:75:0b:a7:c2:
                    19:fa:55:1f:58:98:ac:fe:3c:80:0a:2f:78:6e:da:
                    2b:c7:0b:59:9e:29:d6:30:c5:bc:ad:85:af:de:91:
                    d0:46:ff:d3:ec:04:3f:3b:1a:96:f7:df:b4:48:28:
                    65:a9:a6:26:b7:2d:e9:72:8e:ec:64:61:17:74:fd:
                    16:23:9d:da:07:e6:70:ef:76:7a:45:df:93:60:30:
                    d4:35:d6:56:29:72:27:60:b0:80:d8:3c:df:e3:d7:
                    40:e6:cc:af:be:9c:3e:de:ed:63:bb:24:82:ab:a9:
                    c6:e8:f3:0e:fb:d0:4e:5c:06:d4:ee:6a:68:1d:61:
                    e3:99:07:4c:dd:00:fb:c1:ad:48:05:4d:3f:24:6c:
                    0f:01:1d:0d:be:41:ae:26:2b:65:65:35:c2:d8:38:
                    13:2e:af:eb:8c:6d:2c:3b:e4:de:98:c8:7f:07:88:
                    de:da:a5:1e:5d:c0:a3:aa:1b:e0:85:58:01:d9:5a:
                    f6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1D:83:53:83:00:B8:ED:39:5B:A2:04:0A:1C:F8:23:13:61:29:95
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:b8f::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:93:cd:3f:8a:d9:e4:06:6c:81:d8:9b:bc:c0:23:a5:19:d2:
         59:39:6d:3d:26:5a:79:a3:7c:63:1b:d9:c7:f5:4a:ae:53:b5:
         32:48:6b:54:b8:e1:bc:66:d8:c2:4e:c0:47:f4:f4:3b:cc:72:
         87:c6:75:ed:04:73:0b:ae:2a:b1:cb:1b:d3:bc:52:04:23:93:
         71:e3:9f:10:36:a5:46:ac:e8:cd:6c:64:bf:59:96:f3:c1:50:
         a2:7c:c6:87:a8:f4:28:53:4e:01:84:91:37:1f:ca:55:43:12:
         f3:ea:35:e9:52:7c:ab:7a:c6:ce:b3:52:18:83:cf:5e:93:96:
         10:48:07:33:f2:1a:03:90:9f:5f:80:a8:06:30:fc:64:e6:04:
         57:b8:4f:ff:1e:e1:15:89:7d:64:c1:a1:f0:84:6d:03:a0:37:
         ef:41:ed:bf:0c:14:a7:08:57:62:d3:af:95:93:6a:5c:61:e7:
         8a:70:70:d1:ac:7d:0a:e3:56:97:4a:69:f7:2c:bf:06:0d:04:
         2e:95:a6:e4:28:4c:ce:7a:3d:59:5b:af:50:ee:7a:37:00:39:
         32:59:91:11:da:8e:96:3e:b6:2b:9c:a3:26:06:6d:ad:c5:2d:
         95:52:f3:7a:ad:57:d2:40:bb:d8:d7:94:73:5a:25:a4:6b:17:
         78:a4:2c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:07 2024 by rpki-client on console-ams.rpki-client.org