Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6432303a3a2f34352d3438203d3e20323132323337.roa
File:                     323630323a666564613a6432303a3a2f34352d3438203d3e20323132323337.roa (raw, json)
Hash identifier:          r4HNdA7IUWmlJvDm2/SCF2fOUssHMeIQlaxHrit4ImM=
Subject key identifier:   57:FA:18:AA:5A:A3:A5:C0:EA:43:07:50:5D:3F:70:05:A6:D0:59:31
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       5D971422401DF169010DD291DF0F805CD6B729
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6432303a3a2f34352d3438203d3e20323132323337.roa
Signing time:             Mon 15 Jul 2024 08:50:08 +0000
ROA not before:           Mon 15 Jul 2024 08:45:08 +0000
ROA not after:            Mon 14 Jul 2025 08:50:08 +0000
asID:                     212237
IP address blocks:        2602:feda:d20::/45 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:97:14:22:40:1d:f1:69:01:0d:d2:91:df:0f:80:5c:d6:b7:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:08 2024 GMT
            Not After : Jul 14 08:50:08 2025 GMT
        Subject: CN=57FA18AA5AA3A5C0EA4307505D3F7005A6D05931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:1e:18:84:47:35:2e:a7:7c:e0:61:21:94:
                    d6:15:55:7f:c8:53:fc:64:18:87:a0:76:09:9e:e4:
                    fb:b8:bd:75:ab:06:e2:2c:c1:bc:64:ab:9b:c0:ec:
                    ca:db:a4:bb:8e:83:8b:82:94:94:47:87:3f:ed:a2:
                    c1:d3:e6:8e:ff:cd:7e:57:59:8a:de:2a:a7:0f:28:
                    f4:4b:4d:a4:21:23:14:3b:11:03:8b:7c:69:a5:ff:
                    7d:62:ef:f3:8a:3c:9b:43:02:06:ab:9a:db:8c:16:
                    f8:d7:69:49:0c:b7:dd:af:d3:d7:12:e7:88:34:33:
                    58:dd:40:7b:dc:38:92:c2:31:99:61:44:ae:03:79:
                    2f:4a:13:1e:fd:b8:f0:d7:f0:bd:38:fb:79:66:03:
                    8d:a8:fa:88:b2:e8:33:42:a9:43:6d:e5:c7:3e:16:
                    49:d0:24:7c:19:6f:46:ac:93:99:97:18:4d:1a:11:
                    67:e6:55:ec:02:66:0e:2f:93:45:af:5e:53:54:24:
                    23:f7:57:83:cb:c0:e9:d1:de:e9:4d:87:ff:4b:4d:
                    3d:a0:71:63:f6:63:11:e8:fe:54:ba:bd:10:30:c3:
                    6f:ee:50:8d:d2:df:bd:39:bf:08:77:1a:f5:5b:be:
                    37:20:34:1e:c9:0b:f2:4d:ec:30:99:f8:42:40:4f:
                    1e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FA:18:AA:5A:A3:A5:C0:EA:43:07:50:5D:3F:70:05:A6:D0:59:31
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6432303a3a2f34352d3438203d3e20323132323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:d20::/45

    Signature Algorithm: sha256WithRSAEncryption
         74:68:23:46:17:58:d3:88:93:00:42:d1:ac:9c:e9:09:c9:27:
         8a:0b:aa:22:35:ab:f3:5b:e0:ac:3c:1f:e7:0a:15:10:25:10:
         20:51:6f:14:0a:3b:0c:b7:11:ef:63:3b:fa:7f:20:a0:8b:6c:
         5d:0a:fa:a9:f6:94:6a:93:0f:40:63:e4:64:08:bc:ec:8a:db:
         6d:4e:88:31:c3:ab:76:97:3f:41:13:e1:a5:0c:5b:91:ce:26:
         2e:52:cc:77:70:90:71:ce:a4:7a:b8:f0:70:76:2a:30:f0:d2:
         6b:98:69:42:1c:65:c4:44:8e:4d:1b:4a:fa:b7:5f:1e:94:22:
         17:1e:24:a6:c7:03:8a:fd:59:8a:74:7c:f0:1f:ab:4e:c0:a5:
         b0:44:07:86:1a:d5:29:ff:71:72:14:93:cc:69:63:c9:63:73:
         6b:0e:fc:60:68:8f:8a:cc:bb:dc:3c:c3:2d:9d:d4:f9:b2:ea:
         57:d1:15:4f:db:6d:f5:4f:07:24:f2:b2:77:59:1e:87:6f:28:
         24:2c:05:d2:9a:65:9c:9a:19:5d:9b:29:fc:e5:b0:5d:cf:1f:
         da:aa:bf:19:e4:44:2c:dd:a7:b3:40:e5:c4:5c:38:f2:c2:20:
         78:09:0f:cf:54:f0:5c:de:7b:87:52:be:3b:02:36:ce:d8:1a:
         ac:ba:b1:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:02 2024 by rpki-client on console-fra.rpki-client.org