Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa
File:                     323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa (raw, json)
Hash identifier:          ZiL9kvAFTSLwBJqG+on+fYcTHADNC6w3dys7mgIxoLw=
Subject key identifier:   FC:5E:38:05:C1:2C:EB:B6:21:CA:BA:46:F7:6B:8E:11:F4:CD:72:BF
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       24B33F18887592C4080E93585937D33F361FD9A5
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa
Signing time:             Mon 15 Jul 2024 08:50:06 +0000
ROA not before:           Mon 15 Jul 2024 08:45:06 +0000
ROA not after:            Mon 14 Jul 2025 08:50:06 +0000
asID:                     212279
IP address blocks:        2602:feda:c50::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b3:3f:18:88:75:92:c4:08:0e:93:58:59:37:d3:3f:36:1f:d9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:06 2024 GMT
            Not After : Jul 14 08:50:06 2025 GMT
        Subject: CN=FC5E3805C12CEBB621CABA46F76B8E11F4CD72BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:56:b5:c8:ec:04:e9:9a:5d:7e:96:fb:eb:b2:
                    ee:cf:53:f1:1d:02:e3:9a:25:1b:e5:07:be:d7:b5:
                    a7:dd:88:3a:d4:5d:9e:75:8b:4a:fa:f2:4a:7c:f2:
                    6e:ca:71:c4:19:3d:e7:80:65:e8:78:a7:e3:20:87:
                    d1:07:9a:44:c4:16:4f:18:43:72:0a:2a:e4:36:a2:
                    38:62:ea:79:83:78:23:3b:c8:6f:cd:a2:e6:a5:6c:
                    b4:26:5d:3e:40:7f:6d:30:ad:39:ba:74:39:dc:b9:
                    5f:2a:29:f0:4b:c2:d4:4d:52:c6:36:98:7a:57:cf:
                    a2:42:a8:d5:9a:f4:f1:63:b6:bf:1a:a7:38:1a:b7:
                    be:c9:a3:db:e2:15:f2:a9:b6:8f:05:32:6e:89:89:
                    5b:55:6f:14:ca:51:af:a4:b2:5d:da:4f:e0:18:69:
                    b7:fb:b4:8f:1e:ac:b0:e0:29:46:aa:54:69:e9:e3:
                    3d:2b:15:1b:6f:a8:98:a6:fc:f0:b5:eb:02:d8:19:
                    c2:c2:85:86:9a:e6:2c:a6:a5:e1:b5:3d:5d:76:f0:
                    45:73:76:80:7a:8f:06:39:6e:37:e6:8c:f6:07:e4:
                    c9:74:80:d6:36:ec:91:92:92:6d:06:a8:ac:39:32:
                    54:1e:b3:8c:b9:2a:4c:7d:77:d5:44:ae:7b:24:c7:
                    31:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5E:38:05:C1:2C:EB:B6:21:CA:BA:46:F7:6B:8E:11:F4:CD:72:BF
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6335303a3a2f34342d3438203d3e20323132323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:c50::/44

    Signature Algorithm: sha256WithRSAEncryption
         84:3c:c6:c1:df:51:4c:8a:be:06:64:67:cd:b2:99:ed:1d:e3:
         63:cc:95:3e:b9:c1:01:44:48:68:c9:e1:04:80:72:16:cd:1e:
         12:98:8d:53:03:9b:5d:80:73:42:bc:f0:90:2e:e9:f4:7c:28:
         7e:33:eb:cc:a4:96:87:31:1a:88:c6:81:cb:10:64:cd:7b:2c:
         2c:d9:00:99:95:cc:d1:1a:27:9c:e3:75:1a:2d:f7:cc:6a:90:
         2f:72:d5:da:9d:50:8c:cc:f1:bf:cb:76:a5:10:fe:8f:7c:26:
         b0:d7:7d:ad:cc:79:7d:aa:d6:0e:fe:d2:a1:50:ba:05:93:21:
         45:19:93:32:13:91:eb:fe:4d:81:d7:98:12:dd:11:e4:79:3b:
         a3:32:c6:7b:dc:8b:8b:cc:64:c3:6a:8e:90:c2:33:88:17:4f:
         39:45:09:0e:fd:b6:7e:a0:b7:19:35:83:45:14:76:9e:de:34:
         ea:44:a5:a6:35:d5:4e:a6:a6:e5:51:54:dc:4f:41:5d:5c:cd:
         d4:dd:f9:1b:30:07:fa:88:55:b6:5d:b1:42:0f:f2:00:d9:0a:
         2d:d2:85:f1:94:92:60:0e:aa:43:01:03:d0:5f:29:d1:bf:05:
         a7:30:6e:f7:3f:d6:64:3b:cb:a7:bf:06:91:05:63:25:ec:d9:
         6d:4a:43:24
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUJLM/GIh1ksQIDpNYWTfTPzYf2aUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjQwNzE1MDg0NTA2WhcNMjUwNzE0MDg1MDA2
WjAzMTEwLwYDVQQDEyhGQzVFMzgwNUMxMkNFQkI2MjFDQUJBNDZGNzZCOEUxMUY0
Q0Q3MkJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFa1yOwE6Zpd
fpb767Luz1PxHQLjmiUb5Qe+17Wn3Yg61F2edYtK+vJKfPJuynHEGT3ngGXoeKfj
IIfRB5pExBZPGENyCirkNqI4Yup5g3gjO8hvzaLmpWy0Jl0+QH9tMK05unQ53Llf
KinwS8LUTVLGNph6V8+iQqjVmvTxY7a/Gqc4Gre+yaPb4hXyqbaPBTJuiYlbVW8U
ylGvpLJd2k/gGGm3+7SPHqyw4ClGqlRp6eM9KxUbb6iYpvzwtesC2BnCwoWGmuYs
pqXhtT1ddvBFc3aAeo8GOW435oz2B+TJdIDWNuyRkpJtBqisOTJUHrOMuSpMfXfV
RK57JMcxhQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFPxeOAXBLOu2Icq6RvdrjhH0
zXK/MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6
Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh
NjMzNTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzIzMTMyMzIzNzM5LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcEJgL+2gxQMA0GCSqGSIb3DQEBCwUAA4IBAQCEPMbB31FMir4GZGfNspnt
HeNjzJU+ucEBREhoyeEEgHIWzR4SmI1TA5tdgHNCvPCQLun0fCh+M+vMpJaHMRqI
xoHLEGTNeyws2QCZlczRGiec43UaLffMapAvctXanVCMzPG/y3alEP6PfCaw132t
zHl9qtYO/tKhULoFkyFFGZMyE5Hr/k2B15gS3RHkeTujMsZ73IuLzGTDao6QwjOI
F085RQkO/bZ+oLcZNYNFFHae3jTqRKWmNdVOpqblUVTcT0FdXM3U3fkbMAf6iFW2
XbFCD/IA2Qot0oXxlJJgDqpDAQPQXynRvwWnMG73P9ZkO8unvwaRBWMl7NltSkMk
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:07 2024 by rpki-client on console-ams.rpki-client.org