Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6261303a3a2f34342d3438203d3e20313335333935.roa
File:                     323630323a666564613a6261303a3a2f34342d3438203d3e20313335333935.roa (raw, json)
Hash identifier:          0+A1VzuUKE2JJDNcux/S7glAJom/l045c4JqELIgwY8=
Subject key identifier:   82:DA:23:CF:EA:13:77:DE:A7:00:B9:4D:44:4F:64:07:E9:3B:C6:D2
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       27D346EC779995675A4EED2ED954CDEE9BC779FD
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6261303a3a2f34342d3438203d3e20313335333935.roa
Signing time:             Mon 15 Jul 2024 08:50:08 +0000
ROA not before:           Mon 15 Jul 2024 08:45:08 +0000
ROA not after:            Mon 14 Jul 2025 08:50:08 +0000
asID:                     135395
IP address blocks:        2602:feda:ba0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Nov 2024 08:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:d3:46:ec:77:99:95:67:5a:4e:ed:2e:d9:54:cd:ee:9b:c7:79:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:08 2024 GMT
            Not After : Jul 14 08:50:08 2025 GMT
        Subject: CN=82DA23CFEA1377DEA700B94D444F6407E93BC6D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b5:6b:ab:d0:d9:64:83:d7:31:b3:54:c4:80:
                    c2:69:8a:f6:d5:4e:d9:aa:2e:85:98:c2:de:59:75:
                    5c:cd:01:9b:37:e7:af:5b:3c:b6:43:46:58:ec:d2:
                    d3:06:c7:bd:46:79:ab:e9:b1:dc:a2:98:34:e1:11:
                    92:f0:61:5e:ec:fa:37:df:b3:2c:3a:82:73:b4:03:
                    fa:b2:9f:3f:98:66:fa:38:ba:44:94:ee:bd:79:f1:
                    7e:3f:3b:c6:6a:d2:40:4a:43:fb:d3:30:a0:69:b8:
                    47:39:fa:6d:4d:16:89:e2:67:b8:4b:70:9c:10:a8:
                    a4:6a:44:0f:65:4e:28:65:9c:41:41:4f:47:ba:d5:
                    74:75:e3:81:53:14:80:a8:cf:9d:1b:17:36:e3:cd:
                    c5:30:1e:da:b3:35:26:7e:f4:40:6f:38:ed:b6:65:
                    04:52:20:d9:ec:de:52:53:38:5c:48:88:ee:4b:d6:
                    c3:ac:15:b6:33:58:cc:57:f8:c4:97:19:e3:3f:a0:
                    6f:f9:12:3e:13:ad:f7:39:ce:5e:8d:c8:b2:4f:04:
                    47:e3:6c:82:c6:8b:77:6f:7c:4b:91:8c:98:bc:7a:
                    bb:ce:47:0b:5c:22:19:ff:6c:5c:73:98:7d:c4:c9:
                    18:0c:9a:7d:83:27:98:37:dc:bd:85:e8:41:77:48:
                    cb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DA:23:CF:EA:13:77:DE:A7:00:B9:4D:44:4F:64:07:E9:3B:C6:D2
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6261303a3a2f34342d3438203d3e20313335333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ba0::/44

    Signature Algorithm: sha256WithRSAEncryption
         16:5c:69:70:87:92:3b:bf:55:f4:8b:de:07:d1:91:15:76:91:
         7d:da:83:81:53:e8:7b:84:ab:b6:24:5c:21:08:b2:6c:cf:17:
         ab:76:a2:9e:91:df:98:52:0e:f5:5c:15:ad:53:ee:d2:26:53:
         8a:1a:6a:1e:66:19:29:64:eb:48:b6:d3:8f:4f:d7:69:00:b1:
         90:f0:29:bc:a7:07:cd:c7:3f:ba:90:d8:0d:53:00:50:62:ac:
         f6:03:3f:c5:46:c6:8d:49:a9:b5:9e:bd:c1:a4:c3:e5:50:a5:
         ee:6b:bb:04:72:db:38:7c:4d:ae:5c:23:94:6a:2e:4f:80:14:
         f1:cc:c3:ba:94:50:f3:9a:5a:53:95:a6:65:58:5f:80:97:70:
         0a:b9:96:19:0a:cc:55:f9:68:bf:96:76:24:e8:f9:c9:e5:e8:
         e7:5a:b5:ad:5a:1d:1f:d4:e2:e3:a9:43:01:50:1a:3f:69:4c:
         c2:c3:12:b8:60:78:94:16:22:ae:54:df:1e:25:47:03:e6:75:
         b1:01:d6:7f:d1:1b:16:8f:0c:3a:46:6a:3a:a7:40:fb:6a:a9:
         19:e5:61:4a:66:ea:5b:07:3b:f5:aa:9f:9f:13:de:95:a4:fc:
         f4:23:8c:f9:54:40:ea:4c:5e:b5:46:b2:6e:79:5c:d7:11:75:
         d9:79:5e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:37 2024 by rpki-client on console-fra.rpki-client.org