Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa
File:                     323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa (raw, json)
Hash identifier:          THO91Mj2QsGQhzcTw6ZZ3zU+O/BJvAeXbuoS1MfIFjo=
Subject key identifier:   86:9E:FD:75:F9:73:5B:F0:85:5B:A3:17:D7:21:10:0F:92:42:44:F7
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       5A3C1BE9413B9E90E33B03B1F8D928F0C19B281E
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa
Signing time:             Mon 14 Aug 2023 07:53:32 +0000
ROA not before:           Mon 14 Aug 2023 07:48:32 +0000
ROA not after:            Mon 12 Aug 2024 07:53:32 +0000
asID:                     212279
IP address blocks:        2602:feda:c50::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:3c:1b:e9:41:3b:9e:90:e3:3b:03:b1:f8:d9:28:f0:c1:9b:28:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:32 2023 GMT
            Not After : Aug 12 07:53:32 2024 GMT
        Subject: CN=869EFD75F9735BF0855BA317D721100F924244F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6b:77:ac:db:9c:86:29:f7:ae:a3:59:c0:cf:
                    aa:54:1e:ac:d7:b7:ad:60:f7:f0:48:bf:4c:aa:d0:
                    ae:0f:31:f2:b2:dc:80:b1:54:11:e6:e5:1e:8c:fd:
                    49:4f:3b:4c:aa:88:ad:c1:65:99:3a:39:35:bf:0c:
                    2b:8c:24:43:b0:25:74:14:93:90:35:ee:ea:94:68:
                    df:bf:e4:58:1c:75:0a:b6:e0:9a:05:9d:d9:63:bf:
                    b2:b9:be:73:8a:76:88:e1:33:75:b8:37:b9:4d:69:
                    69:9f:60:2d:61:0d:8f:79:26:f5:f5:f8:3d:d8:46:
                    f3:98:14:25:0c:15:a6:c0:c7:8b:40:c1:c3:2a:33:
                    1e:2e:eb:75:24:52:28:55:48:00:d5:c2:25:0b:31:
                    a6:f6:e7:69:cc:fe:c5:2b:91:4c:a7:d8:69:82:35:
                    ea:af:31:e5:b8:ee:29:3a:84:e4:c1:83:4d:52:8a:
                    ba:8f:25:d9:5e:24:8e:07:70:b5:1a:ba:26:ce:66:
                    6d:45:20:ab:e5:66:fa:ca:4a:12:e2:61:3d:a7:60:
                    6d:65:8b:8f:e5:ca:a4:19:a4:d7:fb:1e:62:cf:0a:
                    b2:d2:f3:76:35:2a:fd:12:45:a0:36:3d:c7:36:02:
                    92:95:f3:be:80:6b:37:19:77:c9:5e:a5:14:f2:6f:
                    fb:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9E:FD:75:F9:73:5B:F0:85:5B:A3:17:D7:21:10:0F:92:42:44:F7
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:c50::/44

    Signature Algorithm: sha256WithRSAEncryption
         57:ab:2f:f7:a6:6c:a8:61:fe:16:9a:87:d1:79:93:6e:29:76:
         57:2a:74:2c:23:79:b5:8e:f1:ea:e5:62:d4:3c:68:8f:f9:eb:
         8c:8e:a2:9f:00:c7:9d:f1:71:5b:06:00:7c:94:b3:94:33:94:
         bc:84:f6:65:c4:f0:c0:49:b1:57:58:4c:80:d1:ee:ac:51:89:
         60:2c:b8:9c:0b:5c:88:55:e0:c0:78:c2:37:a5:9e:c3:37:5d:
         c4:a7:15:0b:b3:33:7c:ae:5f:46:3a:96:95:e4:db:2c:a1:80:
         f7:d7:53:44:69:e0:4b:5c:03:bb:48:89:49:28:d5:b4:c0:ea:
         d7:dd:9b:66:5e:84:c1:76:6b:2c:6d:c3:e5:fc:88:00:f0:6f:
         8a:87:83:47:c8:ad:c6:5b:36:bf:0e:91:f0:2e:a2:7e:c0:32:
         49:34:b5:b8:7a:0e:cf:b6:f9:04:17:3e:ff:3d:20:c0:72:61:
         93:57:48:9f:65:f9:c1:d3:7b:23:c0:16:a7:d1:c6:ad:51:bd:
         53:08:6d:de:ec:96:23:10:2f:b5:39:34:44:00:ef:d4:3a:89:
         c9:87:d0:f8:2b:07:2f:4a:87:be:69:69:1e:d5:f3:e4:a4:c7:
         21:31:18:bb:bb:28:b9:73:10:06:38:5a:3f:3e:4e:d9:9c:22:
         03:96:e0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:52:00 2024 by rpki-client on console-ams.rpki-client.org