Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa
File:                     323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa (raw, json)
Hash identifier:          5mw/ykZ0eutVo+lM1aJpdv3U8M1xY4Kj3jPwcUX4OXE=
Subject key identifier:   6E:8B:C9:5C:4A:A0:68:BF:F2:45:E6:B8:78:81:59:2E:FB:29:89:02
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       262B85111FE9E4FA9E0FBDB4E7434507D2446FD1
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa
Signing time:             Mon 14 Aug 2023 07:53:42 +0000
ROA not before:           Mon 14 Aug 2023 07:48:42 +0000
ROA not after:            Mon 12 Aug 2024 07:53:42 +0000
asID:                     7721
IP address blocks:        2602:feda:be0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:2b:85:11:1f:e9:e4:fa:9e:0f:bd:b4:e7:43:45:07:d2:44:6f:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:42 2023 GMT
            Not After : Aug 12 07:53:42 2024 GMT
        Subject: CN=6E8BC95C4AA068BFF245E6B87881592EFB298902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a2:7d:0f:89:ba:a5:3c:8c:0a:c2:97:20:48:
                    ac:c1:80:62:4c:84:ca:ad:48:14:53:a8:f9:ff:3e:
                    16:65:02:19:c5:bc:fb:74:57:0a:4e:3c:7d:5d:9b:
                    73:2e:a8:53:22:1a:3a:37:26:78:35:20:42:2c:bc:
                    24:46:8d:81:90:d1:5f:fa:c5:18:8b:2d:43:ed:c1:
                    e6:9d:45:e9:c7:ec:13:ba:42:27:78:36:50:9d:dc:
                    43:76:6d:cb:16:24:6e:c8:bc:ba:8f:d6:1d:2d:4a:
                    43:94:de:b5:fd:57:7c:9b:d8:30:00:29:8a:8b:e4:
                    d1:9e:a6:9c:57:04:74:e8:da:bc:2f:15:84:76:f7:
                    f1:72:0d:bc:e5:f0:48:83:5b:63:56:22:32:36:a1:
                    9f:fd:2b:7f:ec:8b:27:cc:46:1b:25:f7:d7:c3:8d:
                    55:a1:28:a7:5f:49:08:12:5e:08:00:70:ef:e0:4a:
                    73:c5:bc:8c:97:43:5e:45:53:19:dc:7a:1d:52:83:
                    46:b1:3b:27:c0:28:13:02:84:97:e4:fe:be:85:e7:
                    2b:69:18:6d:41:d8:27:55:f0:e4:e7:17:1a:1f:38:
                    10:28:0f:fe:e0:06:f9:a7:9b:fb:ed:c1:ce:28:d1:
                    be:32:89:3a:53:c2:e7:aa:0d:1d:ab:e7:9e:13:b3:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:8B:C9:5C:4A:A0:68:BF:F2:45:E6:B8:78:81:59:2E:FB:29:89:02
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e2037373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:be0::/44

    Signature Algorithm: sha256WithRSAEncryption
         18:09:44:d1:dd:cc:5b:18:33:96:da:82:45:aa:28:d1:af:56:
         36:59:29:fb:05:96:c2:b4:89:99:3e:bf:ff:66:10:94:49:9a:
         dc:98:ab:1e:ab:7e:7e:d1:3a:29:d3:2c:72:8b:6f:f2:84:e9:
         f9:30:a2:c8:11:1b:5c:73:df:5f:a7:4f:51:8d:fe:43:40:67:
         b3:0a:ff:20:fe:85:9f:78:3b:ae:e8:0a:cc:16:fb:9c:c5:da:
         ac:d9:13:a3:3a:63:e5:91:75:9b:fb:e3:d7:fd:a1:f4:60:b9:
         ae:13:e6:c8:4c:97:51:0f:1b:21:f0:cc:14:b1:1f:55:f5:1e:
         13:88:85:16:f1:bf:d4:5b:3f:cc:87:78:99:1c:a9:ac:89:7d:
         2d:32:c9:2a:83:90:27:3d:6b:74:45:ae:1e:ef:2d:c6:7c:45:
         e7:8d:dd:4d:3a:bb:2b:df:a8:a8:1e:47:f1:04:6b:77:8c:43:
         88:4d:b8:2c:f7:62:59:03:e6:23:91:a2:9f:21:ef:51:f8:76:
         5e:ae:7d:45:e6:f9:d2:e2:28:df:db:9e:bc:60:d9:27:8c:b1:
         10:06:39:11:4e:e1:a5:12:50:dd:28:ee:00:a6:d2:31:8f:ad:
         a4:47:9b:2b:df:30:d2:4d:2d:42:89:9b:df:24:e2:97:2f:85:
         86:44:24:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:30:34 2024 by rpki-client on console-fra.rpki-client.org