Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6333303a3a2f34342d3438203d3e20323039323934.roa
File:                     323630323a666564613a6333303a3a2f34342d3438203d3e20323039323934.roa (raw, json)
Hash identifier:          u2yFpMwop4n8lVUmb/R+JAP5TvJkCP4bMBI2j1fgotc=
Subject key identifier:   BD:16:60:2D:83:F3:9D:94:D2:AA:EC:AE:E5:02:98:EF:23:0D:39:3B
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       5C23EAE46CEAB5FE61D8822EFA155C73201B4D06
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6333303a3a2f34342d3438203d3e20323039323934.roa
Signing time:             Mon 14 Aug 2023 07:53:39 +0000
ROA not before:           Mon 14 Aug 2023 07:48:39 +0000
ROA not after:            Mon 12 Aug 2024 07:53:39 +0000
asID:                     209294
IP address blocks:        2602:feda:c30::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:23:ea:e4:6c:ea:b5:fe:61:d8:82:2e:fa:15:5c:73:20:1b:4d:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:39 2023 GMT
            Not After : Aug 12 07:53:39 2024 GMT
        Subject: CN=BD16602D83F39D94D2AAECAEE50298EF230D393B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:3b:b1:7e:8f:ef:5a:65:64:dd:a3:7b:18:
                    77:60:4f:b9:6c:bc:5d:d8:f3:d2:54:9f:e5:a1:59:
                    ea:00:b1:15:24:ff:b8:df:6e:ab:09:8b:83:d3:b1:
                    57:8c:21:97:47:72:d7:8f:b2:b4:44:01:2d:e7:2c:
                    b0:aa:41:f5:1d:62:4a:54:24:c8:8e:85:fd:2a:7b:
                    7b:43:59:d4:91:2f:cb:a3:e4:46:42:29:3a:a8:0f:
                    8e:63:18:3f:b9:b8:8c:3b:64:d9:04:3e:b1:71:ba:
                    30:85:87:42:d6:eb:12:6a:6d:c9:a7:de:85:c1:3c:
                    b0:74:c2:aa:02:83:35:6c:22:ab:2e:73:e9:b3:27:
                    7f:17:38:fd:14:7b:00:ab:40:74:5e:90:d3:c7:a0:
                    e0:37:cb:c3:1e:ce:e9:a3:8a:87:cd:a3:d8:b9:58:
                    55:ec:ae:86:6d:64:b2:7a:ce:93:1c:f5:8e:bf:9c:
                    a0:15:35:cb:21:89:de:7c:43:a5:6b:f2:a5:bc:da:
                    b8:71:e9:29:50:d1:87:87:f0:44:17:fb:61:8b:1e:
                    03:b1:ff:b0:1e:8f:4b:7b:0e:8c:9b:7d:61:05:aa:
                    d0:b8:b5:35:81:ba:9d:ca:81:87:8c:b8:0f:63:0a:
                    98:67:be:0b:c2:ef:ae:08:14:9c:ae:9a:a3:41:63:
                    12:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:16:60:2D:83:F3:9D:94:D2:AA:EC:AE:E5:02:98:EF:23:0D:39:3B
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6333303a3a2f34342d3438203d3e20323039323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:c30::/44

    Signature Algorithm: sha256WithRSAEncryption
         0f:b3:44:4b:da:2b:ac:65:7f:67:cf:7d:38:a2:98:c3:da:26:
         cf:11:8e:77:75:5a:3d:ab:ae:78:1c:0f:d6:24:64:c1:7c:fb:
         3f:de:4a:8a:56:c8:bd:95:9c:60:22:91:81:17:1a:62:43:fb:
         46:1d:e3:ac:4a:ec:82:8c:e9:2a:d7:c1:c6:28:df:0b:1c:fb:
         e6:ae:c3:a6:e9:6e:5c:27:2e:88:cd:06:fa:2b:66:5d:39:ca:
         e8:ae:d1:1f:80:08:e5:38:e1:66:49:30:a2:39:e7:12:b9:1b:
         f7:34:82:29:73:92:a2:46:f6:ea:98:35:7d:0d:45:79:2c:f0:
         53:59:40:60:b8:e9:c9:b2:9c:4f:3a:8a:80:ef:ef:1f:30:5f:
         87:04:6c:d9:fa:02:f2:ee:93:aa:5e:c0:f3:b7:30:d6:4d:53:
         39:c4:2b:92:bd:8d:af:1e:ba:60:f3:4a:83:8a:30:70:bb:29:
         f3:87:73:76:17:f9:33:f5:67:d5:1f:50:89:73:d3:33:f4:c4:
         5f:cb:e3:36:fd:dc:e4:b6:d1:84:8e:fb:52:6c:13:09:c0:da:
         23:00:aa:68:87:6b:c6:c3:e9:2d:e8:22:f1:cc:b2:7f:69:ff:
         d5:a0:12:60:29:de:1d:5f:11:b1:0b:2f:56:a3:93:9c:1d:3f:
         d5:1e:5b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:11:41 2024 by rpki-client on console-ams.rpki-client.org