Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6361303a3a2f34342d3438203d3e203339373533.roa
File:                     323630323a666564613a6361303a3a2f34342d3438203d3e203339373533.roa (raw, json)
Hash identifier:          9ATh+1IMibP5C6BPYxedCMywDLrorPMcLDtEt8Xb4rk=
Subject key identifier:   77:9A:C7:72:FD:67:CF:0C:EE:E3:A1:81:7D:EF:49:4B:40:FF:26:BC
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       3EE2289E7B2B86CC9F9ED3107B78F870A06A3138
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6361303a3a2f34342d3438203d3e203339373533.roa
Signing time:             Mon 15 Jul 2024 08:50:07 +0000
ROA not before:           Mon 15 Jul 2024 08:45:07 +0000
ROA not after:            Mon 14 Jul 2025 08:50:07 +0000
asID:                     39753
IP address blocks:        2602:feda:ca0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 14:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e2:28:9e:7b:2b:86:cc:9f:9e:d3:10:7b:78:f8:70:a0:6a:31:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:07 2024 GMT
            Not After : Jul 14 08:50:07 2025 GMT
        Subject: CN=779AC772FD67CF0CEEE3A1817DEF494B40FF26BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b7:64:9f:fe:bc:08:b4:97:fa:cd:d9:b6:22:
                    c5:2a:be:81:46:5f:24:26:22:39:be:16:4f:e3:af:
                    33:61:75:02:cb:a2:25:71:8e:20:c5:16:17:bc:20:
                    4a:e5:6e:70:d0:34:b2:33:5b:8f:e4:d3:66:28:11:
                    47:c6:ec:ea:d2:a7:1d:ce:cf:11:e3:bd:05:ae:69:
                    4b:f4:a3:a7:60:33:f3:40:3b:28:bd:f7:71:ff:d2:
                    c3:ed:cc:7f:61:62:47:6f:cf:a6:0e:b4:32:f2:08:
                    08:a1:5a:0e:cd:58:8d:00:be:b2:87:8d:a8:cb:44:
                    3e:a6:c3:28:97:f1:8a:2c:55:96:90:7e:a1:99:05:
                    89:cb:70:0c:43:c7:97:03:70:bc:1e:9e:8c:8c:67:
                    f5:47:30:cc:dd:e3:e4:2a:16:83:0d:6a:7d:e7:67:
                    a3:1b:d1:7a:2e:c7:e2:12:cb:6a:8f:6c:65:8c:8a:
                    87:ac:c1:e6:ac:e5:2b:bd:d3:7e:56:38:95:e7:1f:
                    3a:7c:90:8e:a8:3a:c6:0c:64:d6:9f:08:7e:ec:cf:
                    ba:e7:f3:71:89:bc:fe:aa:19:01:51:5d:c0:3d:fd:
                    5a:12:e7:a2:a4:ca:38:87:27:71:50:5c:e3:52:9c:
                    60:7a:c2:18:3c:72:64:01:cf:95:1b:c3:b8:e2:c4:
                    3e:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9A:C7:72:FD:67:CF:0C:EE:E3:A1:81:7D:EF:49:4B:40:FF:26:BC
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6361303a3a2f34342d3438203d3e203339373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ca0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2c:cb:78:f5:23:3c:d2:0b:7c:15:9d:ce:8d:d5:79:70:b2:60:
         0d:6a:c0:7e:aa:09:22:33:39:29:1b:f4:2d:77:87:69:35:5f:
         68:99:bd:10:e2:32:b0:58:82:b9:1d:c4:09:7e:e4:b8:04:0e:
         35:91:5a:af:9b:0b:0a:9c:f7:3e:42:1f:97:e4:81:38:ff:ea:
         44:9b:83:37:78:3c:cb:a6:23:1d:4d:43:74:88:81:cc:88:52:
         93:a1:92:a1:ce:2c:96:8a:04:1d:a9:cd:2b:83:d8:6d:74:41:
         55:f5:71:a4:5b:79:ac:8e:8d:51:a6:db:9b:71:c5:64:85:d2:
         ed:92:88:d1:ff:fa:9e:b1:3e:ac:af:d8:1b:d0:f3:58:ae:19:
         ef:6b:9c:2b:77:b2:2f:99:ad:ce:46:01:b7:ff:0a:66:93:7c:
         fd:52:b9:c2:62:a5:34:23:34:00:14:bb:8a:d8:8c:5a:cb:4a:
         0d:2d:73:f9:28:ce:19:8e:f1:12:e6:22:8c:eb:6a:be:5d:c2:
         cc:87:38:5e:d7:f7:7a:e6:90:30:d4:8f:67:05:90:ec:c1:ad:
         e8:1b:78:d7:9e:88:f3:58:76:4d:9e:e4:a5:ab:bc:86:70:5a:
         4d:64:83:f9:d9:60:c9:a3:80:69:31:c4:b2:b5:9f:72:2a:1d:
         92:1a:d6:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:00 2024 by rpki-client on console-fra.rpki-client.org