Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6361303a3a2f34342d3438203d3e203339373533.roa
File:                     323630323a666564613a6361303a3a2f34342d3438203d3e203339373533.roa (raw, json)
Hash identifier:          Kg6GFKzuX6Z/YSHE+1YORvjNhEXxQACSNVs4cbXtYHY=
Subject key identifier:   8A:37:0E:47:E6:EE:95:40:6F:50:A6:D0:AF:50:7A:65:1E:96:B0:38
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       1438E99094679014803210C17714537FA5B2961A
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6361303a3a2f34342d3438203d3e203339373533.roa
Signing time:             Mon 14 Aug 2023 07:53:30 +0000
ROA not before:           Mon 14 Aug 2023 07:48:30 +0000
ROA not after:            Mon 12 Aug 2024 07:53:30 +0000
asID:                     39753
IP address blocks:        2602:feda:ca0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:38:e9:90:94:67:90:14:80:32:10:c1:77:14:53:7f:a5:b2:96:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:30 2023 GMT
            Not After : Aug 12 07:53:30 2024 GMT
        Subject: CN=8A370E47E6EE95406F50A6D0AF507A651E96B038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e5:a8:ff:ba:7b:28:49:dc:f2:8d:2f:f4:97:
                    bb:a6:89:86:01:55:5c:2b:07:07:45:2f:ee:e2:8c:
                    82:f8:23:40:32:41:6a:9b:b2:57:e5:a2:99:c8:f0:
                    d2:40:04:c5:19:cd:8b:be:73:1e:39:7e:93:2f:5e:
                    86:64:86:68:6b:9e:0a:28:16:e1:ab:28:6d:9c:aa:
                    13:06:60:b2:e4:a6:6a:63:d8:94:81:e2:83:1c:02:
                    35:d2:31:04:2e:01:f4:a6:2c:3a:eb:e4:f5:51:1b:
                    c2:16:e5:d7:8b:cc:d0:0e:73:f9:d2:2e:eb:be:8f:
                    35:01:0e:ee:3e:a2:1c:b4:93:d3:25:9b:d1:e2:3c:
                    19:33:ef:91:ab:88:1e:12:5f:72:3b:ad:2e:b2:9f:
                    62:1a:53:86:71:3b:6f:8a:fd:9c:0e:76:5c:8d:ae:
                    28:e6:46:d9:dc:0f:d3:0f:3d:6d:fc:1b:a3:73:15:
                    f9:65:31:b7:a0:c3:dc:8c:28:4b:d9:c3:0a:e0:05:
                    e7:e0:18:4d:f0:60:1b:98:ac:04:8b:e7:10:59:47:
                    b3:8c:1f:1a:bb:19:ef:0d:2f:86:3d:42:3d:ad:88:
                    25:b3:19:2f:2e:ed:b9:4e:1f:97:29:9d:bc:33:c2:
                    7d:27:58:15:8d:3f:13:af:f8:e9:41:ec:d2:c0:12:
                    89:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:37:0E:47:E6:EE:95:40:6F:50:A6:D0:AF:50:7A:65:1E:96:B0:38
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6361303a3a2f34342d3438203d3e203339373533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ca0::/44

    Signature Algorithm: sha256WithRSAEncryption
         36:21:4f:8d:22:a7:6f:90:19:b4:f0:42:2d:96:0d:31:0c:ae:
         9e:bc:e0:6e:b1:e4:40:8e:a5:02:68:aa:33:2a:91:80:22:30:
         19:9a:b9:31:03:c7:40:88:ef:2c:09:3d:e2:4b:3e:d3:9b:df:
         29:29:a3:e5:7c:29:1f:a7:22:e2:42:24:3e:f1:5d:1b:50:92:
         a0:26:e7:17:6c:68:df:86:94:fd:c7:fa:d5:c3:3f:05:4d:4d:
         24:02:30:d7:ce:61:3f:6e:5c:4c:58:3c:7f:a7:55:a1:76:01:
         ff:2d:3e:a1:a2:59:1c:5e:84:4d:4b:e1:a0:23:06:07:57:dd:
         fe:69:d3:33:da:d1:88:f9:52:c8:74:b8:4b:86:9d:bc:3f:2d:
         d0:3f:42:33:c4:97:6f:1c:3c:e3:ed:85:87:e5:e4:ef:22:ff:
         71:7a:54:28:fa:70:8c:59:33:b7:35:52:76:ce:ff:37:82:bd:
         52:20:01:8e:4b:b4:6a:b5:6c:24:78:79:f1:27:59:38:5c:e6:
         12:42:96:e5:ac:49:31:71:d8:8c:a0:ef:65:8d:63:cf:2a:5f:
         67:ac:df:27:04:7c:ee:49:4f:2c:23:15:a4:b8:b2:ad:3a:0d:
         95:4d:27:9d:26:4c:8c:ce:f4:fb:8e:e0:9b:2c:36:91:0c:98:
         f3:a6:95:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:19:52 2024 by rpki-client on console-fra.rpki-client.org