Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e20313430393336.roa
File:                     323630323a666564613a6265303a3a2f34342d3438203d3e20313430393336.roa (raw, json)
Hash identifier:          RW6URdNCGpe3WJH6nsm17zuggwzXw5ZghACp7Zevh8o=
Subject key identifier:   ED:4D:AE:0E:56:D2:64:FF:25:F1:CB:D0:F2:EE:57:42:E4:34:71:21
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       4B8BB5267E791934F23539C75BEEF5CE9D0D3F19
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e20313430393336.roa
Signing time:             Mon 15 Jul 2024 08:50:15 +0000
ROA not before:           Mon 15 Jul 2024 08:45:15 +0000
ROA not after:            Mon 14 Jul 2025 08:50:15 +0000
asID:                     140936
IP address blocks:        2602:feda:be0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 14:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:8b:b5:26:7e:79:19:34:f2:35:39:c7:5b:ee:f5:ce:9d:0d:3f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:15 2024 GMT
            Not After : Jul 14 08:50:15 2025 GMT
        Subject: CN=ED4DAE0E56D264FF25F1CBD0F2EE5742E4347121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:a7:64:82:41:a9:32:fa:57:ce:99:7a:05:cd:
                    49:d5:3c:6b:e4:eb:3c:ef:c8:46:13:5f:c0:b2:98:
                    33:95:f4:f4:cd:55:f7:f2:91:b1:c4:3d:00:e3:1c:
                    a7:48:d1:de:9f:ff:71:9f:7d:3d:a3:00:0b:e4:3a:
                    94:55:ba:3c:b8:10:94:0b:0c:1c:e7:ae:10:f7:06:
                    7e:12:e1:d5:a5:db:c9:ad:13:5f:28:eb:9a:e4:8f:
                    0f:40:f4:71:b8:96:78:59:e7:f8:e8:78:e8:e3:9f:
                    47:1f:21:d6:94:81:8f:9f:49:58:55:cb:7b:69:ef:
                    d0:29:ce:e6:36:2e:1c:3b:90:2d:49:17:26:b0:5b:
                    cf:40:59:b4:1f:dd:60:3f:e1:f2:1a:1e:f0:89:c8:
                    45:d2:f6:62:65:2d:06:a7:ac:55:b3:a2:5c:e3:62:
                    17:0b:65:8e:6d:45:96:5b:bb:c5:fa:df:0e:6d:38:
                    cc:4d:7e:51:8e:b2:89:e3:4a:e0:e0:31:f9:af:3f:
                    46:59:7a:c0:a5:06:30:52:a3:48:6b:13:16:73:0a:
                    d9:26:3e:a7:9c:9b:ce:bc:15:d2:e1:54:69:f0:35:
                    d6:65:e4:fa:f0:ef:1f:6c:a4:28:21:8e:85:aa:04:
                    86:42:f3:ae:c7:65:92:cf:ea:3c:9d:7b:83:8c:3d:
                    cf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4D:AE:0E:56:D2:64:FF:25:F1:CB:D0:F2:EE:57:42:E4:34:71:21
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e20313430393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:be0::/44

    Signature Algorithm: sha256WithRSAEncryption
         8d:a6:36:b7:60:76:20:db:42:b3:36:4d:05:4e:f2:3d:88:3f:
         c7:05:08:bd:b7:d4:84:2a:00:eb:e6:61:ab:ec:83:93:28:0f:
         1f:d7:9e:23:1d:79:20:eb:b4:d6:cf:1c:22:56:d0:27:06:f7:
         b2:9a:b6:a2:68:ea:a2:d7:4f:44:40:d2:2c:09:ad:e3:b5:45:
         a6:71:e4:a2:c7:6a:69:d5:28:0e:b3:2b:c7:83:72:5a:80:9f:
         58:e2:e9:8f:c2:38:c5:9b:9d:15:4c:14:ab:25:13:2e:ff:85:
         4d:cb:99:25:0e:db:a4:ff:b6:e6:17:e3:2a:07:0b:6f:9f:88:
         5e:b6:bb:5a:cd:e3:33:50:02:0d:15:fa:82:c6:37:c0:70:28:
         cf:14:7e:5a:2a:51:d1:87:c7:86:c2:45:25:5e:61:ba:e3:68:
         19:f9:b5:ea:d5:27:0d:70:29:b6:fe:b2:27:97:40:3f:50:da:
         86:6c:36:e7:78:17:65:54:37:c3:89:8a:63:af:6a:1c:2e:8a:
         e1:03:17:27:88:22:ef:40:cd:7e:82:10:a2:e5:01:e6:16:4b:
         25:3d:16:d7:99:8d:e9:2a:4b:07:c2:95:f5:84:bc:a4:d9:3b:
         9d:d5:d0:9b:89:bd:00:9c:b1:df:91:cf:aa:b6:92:ba:1c:aa:
         a0:bb:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:00 2024 by rpki-client on console-fra.rpki-client.org