Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa
File:                     323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa (raw, json)
Hash identifier:          jLML/J1tTeKpGKHgdgkpffOTVwPT8jkFNFBK6BRvdS4=
Subject key identifier:   89:84:ED:FC:E5:2D:CE:7F:BB:70:DE:3B:E5:9E:95:68:96:43:71:C9
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       74869C10CE6CBD9F909D19A852187E4AAF21A64E
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa
Signing time:             Mon 15 Jul 2024 08:50:07 +0000
ROA not before:           Mon 15 Jul 2024 08:45:07 +0000
ROA not after:            Mon 14 Jul 2025 08:50:07 +0000
asID:                     212580
IP address blocks:        2602:feda:c40::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 16:11:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:86:9c:10:ce:6c:bd:9f:90:9d:19:a8:52:18:7e:4a:af:21:a6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:07 2024 GMT
            Not After : Jul 14 08:50:07 2025 GMT
        Subject: CN=8984EDFCE52DCE7FBB70DE3BE59E9568964371C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8b:d4:2a:71:b8:cb:34:0e:4d:58:19:ea:da:
                    d2:2a:61:da:c1:07:52:51:0f:7c:01:06:56:30:a7:
                    72:c3:26:b7:58:a2:4a:8c:f6:68:bb:5c:5e:8a:a0:
                    72:c2:ed:0c:6b:84:d5:3a:14:99:ac:49:b7:da:96:
                    52:0d:45:c2:e5:59:6c:e7:be:e6:c7:48:b9:79:2c:
                    3d:18:6c:23:3c:9e:40:69:d7:b1:33:86:13:09:fc:
                    07:d4:5d:e8:e9:e6:f5:dd:b4:90:79:38:a8:b8:b9:
                    83:fb:b8:58:36:a5:b8:a1:dd:38:e0:0a:10:eb:d6:
                    45:1f:47:cd:c5:04:0e:34:75:9f:f3:95:52:f9:28:
                    30:6a:c4:f4:a8:a2:fa:d5:bd:8f:f8:2d:f1:ab:01:
                    4b:10:91:e7:5d:a5:1e:b9:09:09:aa:b2:7f:e4:67:
                    af:ca:68:49:3a:a3:cb:28:51:e9:7a:68:16:4e:af:
                    8b:5d:4d:47:d0:27:cf:f1:59:a3:d2:2d:1d:91:ad:
                    69:b7:1d:c3:8c:dd:01:bc:7d:fd:ec:c9:71:be:a5:
                    22:1b:42:43:b2:ce:a0:12:5b:ef:b5:9f:bb:ee:7f:
                    c5:6c:b9:c7:a5:71:48:b9:7b:c9:3f:0b:c4:af:58:
                    c3:55:a8:14:e4:8c:be:9f:80:04:fa:b2:71:ff:bf:
                    8f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:84:ED:FC:E5:2D:CE:7F:BB:70:DE:3B:E5:9E:95:68:96:43:71:C9
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6334303a3a2f34342d3438203d3e20323132353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:c40::/44

    Signature Algorithm: sha256WithRSAEncryption
         b8:66:fd:39:e3:e0:ea:84:9c:b8:33:34:c3:39:af:40:ce:81:
         bd:76:cb:2f:b0:99:02:bb:30:55:20:26:62:fe:be:77:3b:24:
         e7:52:e1:f7:a6:e8:8a:6d:f3:1b:cc:46:b3:54:c1:cf:0c:c8:
         0f:a7:15:00:e8:f5:f3:d5:9c:07:53:22:dd:95:bc:83:76:48:
         9d:c0:ae:8e:16:01:72:93:6f:20:cb:39:b3:80:dc:47:4b:a6:
         1a:09:71:35:5b:b7:71:de:39:f2:2b:0e:a7:39:b6:6d:c4:89:
         33:30:c3:34:f0:4e:4e:0e:b5:bb:4e:1b:8f:89:18:4b:65:7d:
         0f:f4:30:b7:f3:92:0a:2e:b7:96:0b:03:de:78:ab:b1:87:5b:
         bd:12:2b:40:d8:68:3f:64:94:de:dc:bc:2a:71:26:ec:74:88:
         a3:cc:f1:29:6e:5a:35:7f:bb:74:a0:ab:1d:bc:75:83:62:5e:
         2c:86:43:44:a4:e1:dc:74:30:25:f1:01:0f:23:f3:d9:05:dd:
         ca:d8:49:bb:34:a4:52:b7:ef:3d:43:db:6b:00:74:a3:66:5a:
         a7:42:50:0e:22:e3:65:f4:a3:62:af:2e:da:c8:cf:95:99:bd:
         67:c4:09:6b:73:8c:01:05:64:67:9a:5b:97:5f:a7:30:d4:73:
         5b:7a:11:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:44:32 2025 by rpki-client