Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa
File:                     323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa (raw, json)
Hash identifier:          ehzxQepxRMLJEWaANKzsgEP5AW20uxacNNIg/YbeAr8=
Subject key identifier:   05:A8:9D:61:31:F1:52:8A:AB:5F:E9:83:E8:AB:16:98:55:AC:4A:C5
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       3187DF43B8437FFE1F3924DFBB99744334DBF9EC
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa
Signing time:             Mon 14 Aug 2023 07:53:32 +0000
ROA not before:           Mon 14 Aug 2023 07:48:32 +0000
ROA not after:            Mon 12 Aug 2024 07:53:32 +0000
asID:                     205923
IP address blocks:        2602:feda:b8f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:87:df:43:b8:43:7f:fe:1f:39:24:df:bb:99:74:43:34:db:f9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:32 2023 GMT
            Not After : Aug 12 07:53:32 2024 GMT
        Subject: CN=05A89D6131F1528AAB5FE983E8AB169855AC4AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:12:12:40:a7:bf:68:d7:69:29:d3:32:57:bd:
                    96:61:31:0c:b0:38:5a:92:67:97:6d:0d:52:ff:31:
                    4b:a2:aa:31:f9:8b:18:a6:72:84:e6:9a:f9:39:89:
                    e4:8d:e4:82:fd:b7:41:5d:1c:d2:22:76:0f:ab:c9:
                    83:51:9e:65:06:20:17:c6:37:30:43:54:b6:f3:b7:
                    3c:bc:98:81:a0:16:5e:e9:cd:e7:bf:b5:df:e0:99:
                    c9:8c:c1:be:8a:73:53:1e:9c:ca:75:d0:0d:35:f3:
                    2a:e0:5f:3a:ae:db:cf:51:63:68:b9:4c:a5:95:6a:
                    fd:3d:6b:aa:b8:3f:d0:fa:20:d8:fb:ac:b7:ac:4c:
                    b8:c5:55:3f:3c:78:1f:99:ba:15:1a:b1:1b:ba:46:
                    68:a7:f0:90:ed:61:02:5f:6b:bd:fa:6c:6f:3e:7b:
                    ca:46:db:07:36:34:47:d5:b4:a1:cf:e9:9a:46:97:
                    68:93:fe:11:52:f4:e3:73:d1:95:9a:d7:d9:da:cf:
                    f8:16:5d:46:3b:32:9c:1b:85:1f:01:f7:ca:91:54:
                    39:19:47:0a:9e:b2:b6:95:8e:d2:34:15:65:25:e6:
                    5f:a1:9b:1f:97:cf:40:17:18:2f:a4:c3:92:1f:d4:
                    11:8d:ef:9d:46:9c:0a:cb:9f:e6:d6:d3:22:5f:c0:
                    76:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A8:9D:61:31:F1:52:8A:AB:5F:E9:83:E8:AB:16:98:55:AC:4A:C5
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6238663a3a2f34382d3438203d3e20323035393233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:b8f::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:ae:7d:d6:c8:69:8a:96:b5:97:2e:e2:5d:48:39:82:cc:39:
         37:04:e8:f8:8a:e8:01:1e:d6:ee:39:80:9a:5d:9b:0d:e8:cd:
         4f:a8:a4:c6:ad:f0:6c:03:9e:73:a3:4d:a2:f8:cf:2a:76:9b:
         e5:85:a3:41:4f:10:1f:6a:44:1a:b7:52:26:81:05:a9:ff:f1:
         8a:b7:9d:75:47:2e:c0:21:5c:c8:ab:62:50:f3:7b:77:2c:3e:
         5a:37:ec:c5:73:a2:d5:8e:a3:f7:1b:7a:c9:37:f7:d5:01:46:
         d2:ec:2d:b4:a2:76:eb:d7:0c:6c:e2:80:84:02:15:45:2c:48:
         97:19:29:86:b4:c7:b6:88:26:1d:fb:89:47:8d:a0:79:db:9f:
         e2:a9:5c:00:bc:9f:44:f3:71:a9:6d:c0:b4:71:57:40:66:9b:
         61:9d:49:bc:a5:70:b5:1f:41:55:3a:bf:78:f8:db:9a:cf:59:
         49:89:fb:91:b9:47:ae:ab:23:b4:1d:0c:66:a4:4c:73:cb:90:
         7b:24:76:5b:a9:71:42:ac:f3:a9:e6:64:e1:e6:da:03:23:9a:
         78:be:c2:9d:95:5e:b0:bb:92:fe:1a:13:98:37:9a:bd:b9:24:
         91:f7:39:05:61:90:d3:35:bd:53:0b:34:20:a9:38:d5:06:f4:
         ff:a8:35:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:11:41 2024 by rpki-client on console-ams.rpki-client.org