Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6239303a3a2f34342d3438203d3e20323132393935.roa
File:                     323630323a666564613a6239303a3a2f34342d3438203d3e20323132393935.roa (raw, json)
Hash identifier:          N7vvrLt+iUm/drY+B9hMZ1gNPftRUvsMVZa5sjJ4yDU=
Subject key identifier:   54:21:C3:CF:EB:28:D6:77:03:6D:F2:1E:44:10:FA:04:80:26:BD:67
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       6654E26F9C255DDC8D422AA1ADF1EF02AE3F3924
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6239303a3a2f34342d3438203d3e20323132393935.roa
Signing time:             Mon 15 Jul 2024 08:50:04 +0000
ROA not before:           Mon 15 Jul 2024 08:45:04 +0000
ROA not after:            Mon 14 Jul 2025 08:50:04 +0000
asID:                     212995
IP address blocks:        2602:feda:b90::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:54:e2:6f:9c:25:5d:dc:8d:42:2a:a1:ad:f1:ef:02:ae:3f:39:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:04 2024 GMT
            Not After : Jul 14 08:50:04 2025 GMT
        Subject: CN=5421C3CFEB28D677036DF21E4410FA048026BD67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bd:ff:1e:4b:fb:e9:1a:04:49:00:49:1f:9b:
                    3f:45:b5:70:8b:6f:06:5a:86:30:59:ed:9f:9b:95:
                    35:2b:7c:cf:6c:a4:fc:5f:56:cc:4d:5f:35:34:4f:
                    a4:5a:b8:ac:d8:4e:b4:ad:bd:49:3b:29:67:e0:87:
                    58:77:82:25:da:09:be:70:02:2e:f9:f3:ec:56:35:
                    76:72:8b:9f:0d:8c:22:f8:78:b6:08:15:16:74:74:
                    52:5f:f2:17:46:39:22:d0:e9:da:f3:7c:dd:f9:7b:
                    48:41:c6:1c:1e:5c:ff:c6:f6:69:4f:ba:b6:b5:03:
                    aa:d4:f0:57:28:40:5f:05:3b:a0:9b:b6:cf:2d:e9:
                    ab:f2:be:80:1d:73:dd:63:02:31:a2:2b:fd:2c:46:
                    12:b4:c6:81:de:df:ad:86:19:c3:f4:61:53:6a:7c:
                    a5:81:ea:04:71:d8:ab:f4:de:b7:85:84:f7:57:9b:
                    d8:3b:fa:55:77:55:2c:7a:a9:dc:0a:66:9f:a8:66:
                    a6:e8:39:dd:ea:3f:92:54:f7:df:4a:0a:96:d9:cc:
                    aa:10:1b:68:64:8c:cf:5a:8a:f8:ca:38:1e:7f:aa:
                    fd:d1:8e:2f:80:c6:2e:f7:59:97:07:08:32:28:a0:
                    93:44:a9:52:4c:99:a8:de:6d:be:86:68:8c:33:5a:
                    63:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:21:C3:CF:EB:28:D6:77:03:6D:F2:1E:44:10:FA:04:80:26:BD:67
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6239303a3a2f34342d3438203d3e20323132393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:b90::/44

    Signature Algorithm: sha256WithRSAEncryption
         76:de:80:71:4b:fd:8d:8b:d0:2b:0a:a6:63:95:3d:1d:8a:67:
         7f:a6:42:70:c9:2c:9a:ad:ee:c7:c6:64:c2:62:44:72:ab:a7:
         1b:9a:f5:66:24:c0:0f:2d:a0:3b:ad:46:82:46:48:02:29:d6:
         66:20:1c:ef:e5:ab:67:e4:8d:c7:fd:2d:05:4a:63:b6:0f:6c:
         0b:fe:f5:79:63:6e:b3:66:13:fc:49:98:03:f3:ab:cc:84:6b:
         5d:f5:d4:3b:be:74:2a:dc:80:25:51:f2:e7:0f:eb:f3:a5:a1:
         19:66:3c:99:df:ad:8f:bb:8c:af:cc:f0:c8:09:e0:32:0a:d0:
         1e:ba:af:5e:92:7e:2f:f7:a8:95:8c:f9:f3:79:04:c3:6a:fb:
         2a:4d:7c:15:c2:12:e8:4e:07:aa:cf:40:34:2b:17:75:be:5a:
         d4:2c:6c:f0:3f:72:97:3b:b6:48:15:0c:b5:81:59:30:45:f0:
         a7:af:30:98:bb:e3:03:70:fe:6e:e5:d3:23:59:da:c4:e2:01:
         53:b4:8a:e2:9a:f4:59:27:97:01:6d:02:48:a0:ba:95:2b:d3:
         26:e9:56:17:28:52:aa:a3:b6:24:ac:6b:42:cb:bc:ef:42:18:
         10:86:2d:ff:4d:3b:d3:c6:e8:12:a3:5d:70:1a:cb:f9:f1:72:
         55:d6:d0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:37 2024 by rpki-client on console-fra.rpki-client.org