Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6339303a3a2f34342d3634203d3e20323132333630.roa
File:                     323630323a666564613a6339303a3a2f34342d3634203d3e20323132333630.roa (raw, json)
Hash identifier:          T9P92SkVYp0wYF951pLYXn11zAAYHO65uYAV/nv3IgE=
Subject key identifier:   2F:82:E1:15:C1:36:29:B7:51:AF:93:F4:35:CB:AD:43:81:F3:EB:35
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       326015E2DDAE8B8453886AC2F3FE3BD1701E20BF
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6339303a3a2f34342d3634203d3e20323132333630.roa
Signing time:             Mon 15 Jul 2024 08:50:12 +0000
ROA not before:           Mon 15 Jul 2024 08:45:12 +0000
ROA not after:            Mon 14 Jul 2025 08:50:12 +0000
asID:                     212360
IP address blocks:        2602:feda:c90::/44 maxlen: 64

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 14:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:60:15:e2:dd:ae:8b:84:53:88:6a:c2:f3:fe:3b:d1:70:1e:20:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:12 2024 GMT
            Not After : Jul 14 08:50:12 2025 GMT
        Subject: CN=2F82E115C13629B751AF93F435CBAD4381F3EB35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f1:88:fc:78:e7:83:ec:a4:ff:03:b0:22:9e:
                    4c:c0:17:17:62:ce:7c:e0:13:51:d8:20:af:13:26:
                    1c:f9:68:0f:9f:4a:3a:70:b9:78:39:d5:dc:63:a7:
                    ba:62:49:52:05:33:97:28:4b:5d:0d:77:7b:be:2e:
                    cb:4c:12:2a:75:aa:2f:f4:a4:7a:e9:4a:40:d0:50:
                    98:85:2e:c1:4e:13:78:91:a8:8f:ad:4b:cf:17:17:
                    65:b3:b7:e4:ac:25:9c:cf:0c:35:95:43:d9:c7:e3:
                    a4:61:8b:95:a1:51:fc:ea:ba:0f:16:9d:09:41:c2:
                    df:7c:3b:e5:33:0f:aa:de:f5:01:50:7e:d3:9b:85:
                    04:25:bb:4d:68:0a:6f:f5:71:29:f1:f5:ed:2e:c1:
                    e1:8b:4d:6f:77:76:c3:4c:ca:d2:fd:6e:29:4b:60:
                    35:b2:a8:39:85:f8:50:43:52:57:ac:4b:39:f7:94:
                    b2:c0:b9:ce:74:df:34:66:f0:fe:ee:10:d1:82:a5:
                    d8:92:39:1d:ed:46:01:81:dc:4a:f3:f9:b9:55:99:
                    8a:63:d2:bb:57:80:23:77:81:11:3e:37:11:4e:c2:
                    a5:bc:f2:a2:68:82:e5:5e:ae:ae:ec:ce:cc:00:7b:
                    6f:e5:f8:e4:bb:7a:9f:61:b9:1b:0d:f9:8c:81:f9:
                    c3:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:82:E1:15:C1:36:29:B7:51:AF:93:F4:35:CB:AD:43:81:F3:EB:35
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6339303a3a2f34342d3634203d3e20323132333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:c90::/44

    Signature Algorithm: sha256WithRSAEncryption
         15:ce:cc:63:31:6f:00:e4:bd:86:ce:8d:a1:52:1f:99:0f:8d:
         02:6a:32:7d:36:84:b7:6e:09:03:cb:eb:8e:fa:29:6a:6f:9c:
         f1:a3:96:b0:b8:82:ea:26:65:57:b8:3e:7a:a1:e3:39:8f:5c:
         5c:02:12:19:39:3b:a4:c3:af:8c:07:20:1f:23:be:df:da:f3:
         3e:56:7f:0d:bc:6e:f7:ca:1a:97:e7:97:25:c2:aa:fe:99:87:
         fd:3f:7e:d5:35:2c:f7:a1:56:4f:39:93:c8:60:d6:35:d6:84:
         81:f4:8b:3b:7b:e2:7e:18:bb:59:52:0f:ba:56:13:0c:23:0a:
         e6:3c:3f:51:5c:0f:92:e2:b3:7b:59:0a:d0:36:f0:35:ec:7f:
         16:77:2b:cb:88:e5:36:f0:db:62:ee:60:5f:ba:66:7c:a2:1e:
         ae:be:01:be:da:de:b4:6a:c8:88:33:d8:56:8a:af:8e:b1:1f:
         05:61:1e:5e:8d:d6:10:ec:45:fd:94:76:f7:32:3b:1e:ef:a0:
         6e:e5:e2:e5:ce:ef:ca:84:08:c4:4b:e1:de:ea:19:b6:37:6b:
         42:ce:3e:f4:9f:e3:af:23:35:e4:cf:fc:8c:52:f3:bc:7d:3c:
         da:73:03:fe:a9:23:e3:78:7c:84:23:28:fa:b5:72:d6:a0:03:
         60:8e:63:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:00 2024 by rpki-client on console-fra.rpki-client.org