Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6331303a3a2f34342d3438203d3e20323132333539.roa
File:                     323630323a666564613a6331303a3a2f34342d3438203d3e20323132333539.roa (raw, json)
Hash identifier:          UcFuH9GulGOznAN+N62S90K8oaLTgRT1mvSyqEBDWmk=
Subject key identifier:   93:ED:58:D3:F4:84:89:9E:16:57:2D:5B:EF:ED:4B:95:98:47:62:87
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       3FE955E83D77CCDEF8DD29E4E3AD454A0850103B
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6331303a3a2f34342d3438203d3e20323132333539.roa
Signing time:             Mon 14 Aug 2023 07:53:42 +0000
ROA not before:           Mon 14 Aug 2023 07:48:42 +0000
ROA not after:            Mon 12 Aug 2024 07:53:42 +0000
asID:                     212359
IP address blocks:        2602:feda:c10::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e9:55:e8:3d:77:cc:de:f8:dd:29:e4:e3:ad:45:4a:08:50:10:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:42 2023 GMT
            Not After : Aug 12 07:53:42 2024 GMT
        Subject: CN=93ED58D3F484899E16572D5BEFED4B9598476287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c8:e7:61:8f:cc:b8:72:35:34:de:10:a6:5b:
                    0c:9d:b1:23:bc:37:91:0b:5f:fa:6b:03:64:ef:f8:
                    85:2a:86:c3:5e:7c:78:88:b2:68:46:93:60:be:e8:
                    6a:3a:d4:56:94:43:e3:13:b6:72:6a:b0:db:90:a6:
                    6b:15:13:77:3a:4a:e8:27:60:cb:c2:a4:3f:96:4b:
                    88:83:ed:fd:a6:8a:d6:c4:d2:cc:4d:16:a6:db:9f:
                    9c:2c:4b:33:44:b3:11:a7:af:16:06:f4:3c:cc:c4:
                    66:87:7c:5d:f3:1f:db:33:2a:33:d5:1c:b8:5c:da:
                    d8:83:38:83:df:23:f5:f8:8d:6f:c5:9c:34:b5:9e:
                    fd:b0:b5:a4:be:df:ed:17:bb:58:85:30:9c:75:78:
                    ef:5a:ee:3b:85:74:f4:8d:23:61:0e:b3:90:31:33:
                    ff:a6:d6:19:3d:4e:e8:e5:9e:f3:61:dd:a7:bc:c1:
                    0d:fb:e9:2d:17:59:f0:a4:15:0b:a0:02:6b:c6:a4:
                    b1:08:6a:2e:a5:76:6e:3b:53:89:dc:12:ec:a5:00:
                    82:10:4d:77:85:9d:0e:e1:ed:4a:42:8f:db:f7:fd:
                    5b:89:a4:ca:2e:77:32:52:88:0e:81:6d:e6:54:53:
                    9e:d8:be:2d:3d:2b:e0:e9:35:f7:57:fd:2f:e5:ce:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:ED:58:D3:F4:84:89:9E:16:57:2D:5B:EF:ED:4B:95:98:47:62:87
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6331303a3a2f34342d3438203d3e20323132333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:c10::/44

    Signature Algorithm: sha256WithRSAEncryption
         c5:47:15:66:b1:f3:ad:ea:18:52:11:4d:3d:6e:a5:53:83:73:
         ca:47:b7:69:3e:65:84:33:5d:94:c9:89:9b:8a:d5:0f:bd:ed:
         9c:0c:0d:ae:89:17:9e:97:77:51:64:8f:b9:f2:08:d4:b2:f3:
         c5:8a:e0:02:a7:86:c1:0e:67:e6:d3:8a:29:9e:b8:a2:24:c3:
         66:58:17:41:99:0a:70:3f:16:be:a6:5a:6f:c8:bf:4f:fa:3d:
         bb:b4:8c:7e:df:b7:f2:d8:de:c2:b8:05:d4:bc:e2:35:52:35:
         fe:28:95:02:dc:50:6f:e2:8c:67:81:65:9b:7a:0b:36:ab:88:
         dc:4a:97:96:b2:cc:e5:13:71:75:38:93:6c:52:6d:18:d2:d8:
         07:82:49:cc:25:8a:4a:cb:74:24:32:d6:06:a0:d9:b5:79:d0:
         e2:5e:b8:54:a7:6b:18:8b:f0:bd:80:4d:dc:81:84:55:ef:d2:
         6c:48:27:64:1b:2f:b6:2f:50:34:26:fe:a1:2b:fb:98:fa:0e:
         4d:f8:12:76:13:38:3d:9a:30:51:53:41:d9:db:17:74:99:f5:
         f3:e2:8a:ba:61:a9:8c:28:d7:f8:43:18:d0:7f:3a:19:a8:db:
         c8:8c:51:2b:ab:33:38:5c:75:1c:8c:be:46:86:91:ae:86:db:
         b7:01:70:5b
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUP+lV6D13zN743Snk461FSghQEDswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjMwODE0MDc0ODQyWhcNMjQwODEyMDc1MzQy
WjAzMTEwLwYDVQQDEyg5M0VENThEM0Y0ODQ4OTlFMTY1NzJENUJFRkVENEI5NTk4
NDc2Mjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMjnYY/MuHI1
NN4QplsMnbEjvDeRC1/6awNk7/iFKobDXnx4iLJoRpNgvuhqOtRWlEPjE7ZyarDb
kKZrFRN3OkroJ2DLwqQ/lkuIg+39porWxNLMTRam25+cLEszRLMRp68WBvQ8zMRm
h3xd8x/bMyoz1Ry4XNrYgziD3yP1+I1vxZw0tZ79sLWkvt/tF7tYhTCcdXjvWu47
hXT0jSNhDrOQMTP/ptYZPU7o5Z7zYd2nvMEN++ktF1nwpBULoAJrxqSxCGoupXZu
O1OJ3BLspQCCEE13hZ0O4e1KQo/b9/1biaTKLncyUogOgW3mVFOe2L4tPSvg6TX3
V/0v5c4YEwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFJPtWNP0hImeFlctW+/tS5WY
R2KHMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6
Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh
NjMzMTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMyMzMzNTM5LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcEJgL+2gwQMA0GCSqGSIb3DQEBCwUAA4IBAQDFRxVmsfOt6hhSEU09bqVT
g3PKR7dpPmWEM12UyYmbitUPve2cDA2uiReel3dRZI+58gjUsvPFiuACp4bBDmfm
04opnriiJMNmWBdBmQpwPxa+plpvyL9P+j27tIx+37fy2N7CuAXUvOI1UjX+KJUC
3FBv4oxngWWbegs2q4jcSpeWsszlE3F1OJNsUm0Y0tgHgknMJYpKy3QkMtYGoNm1
edDiXrhUp2sYi/C9gE3cgYRV79JsSCdkGy+2L1A0Jv6hK/uY+g5N+BJ2Ezg9mjBR
U0HZ2xd0mfXz4oq6YamMKNf4QxjQfzoZqNvIjFErqzM4XHUcjL5GhpGuhtu3AXBb
-----END CERTIFICATE-----
Generated at Sat May 4 08:52:00 2024 by rpki-client on console-ams.rpki-client.org