Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6436303a3a2f34342d3438203d3e20323132303334.roa
File:                     323630323a666564613a6436303a3a2f34342d3438203d3e20323132303334.roa (raw, json)
Hash identifier:          ORcjU1c1L8GV7rBvnKwzQFec98SnypFjX3EPlOJmhBA=
Subject key identifier:   3B:A8:BF:AC:5A:C9:30:57:15:24:A8:CA:A5:53:2C:04:C0:92:A3:85
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       77A2EE49925F165705567591A955AFED0C8E6130
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6436303a3a2f34342d3438203d3e20323132303334.roa
Signing time:             Mon 14 Aug 2023 07:53:28 +0000
ROA not before:           Mon 14 Aug 2023 07:48:28 +0000
ROA not after:            Mon 12 Aug 2024 07:53:28 +0000
asID:                     212034
IP address blocks:        2602:feda:d60::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a2:ee:49:92:5f:16:57:05:56:75:91:a9:55:af:ed:0c:8e:61:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:28 2023 GMT
            Not After : Aug 12 07:53:28 2024 GMT
        Subject: CN=3BA8BFAC5AC930571524A8CAA5532C04C092A385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9a:3b:09:ff:73:80:71:35:7f:44:1b:8b:7a:
                    13:98:d9:dc:8d:70:b3:aa:c1:09:25:ac:a4:0e:47:
                    1e:1f:46:5d:ff:52:b8:3c:cb:7f:63:d2:af:e3:2f:
                    64:14:17:e5:03:bd:26:26:d6:e8:11:29:a4:91:c4:
                    9b:85:03:6e:17:bb:30:1f:89:35:fb:03:1c:68:83:
                    3e:b4:76:3b:d0:9a:66:60:1c:9a:74:9f:fe:8d:ed:
                    48:a7:76:f1:76:af:c7:08:31:a2:63:a6:8c:ca:85:
                    b6:88:36:6b:82:b8:0c:34:ee:17:4b:4e:ec:c4:f7:
                    ed:17:cc:81:02:00:78:29:4b:8a:63:6e:a5:5a:e0:
                    07:c1:85:66:a7:e4:51:07:5d:96:29:6e:1a:4c:d9:
                    3e:05:0b:c0:7c:c9:2a:85:70:d8:3e:06:57:95:cb:
                    ff:55:96:46:d5:12:0d:4d:d3:12:24:79:48:ba:c7:
                    13:02:8a:b6:05:58:07:c1:f5:35:22:78:4f:bf:19:
                    e7:5f:8d:5c:83:94:50:cd:2b:2a:a1:77:34:ef:71:
                    03:9b:80:b6:50:86:db:a7:a7:00:39:dd:99:c3:b1:
                    c7:d8:e1:54:61:46:3f:17:f0:c3:02:0e:41:97:d2:
                    ce:8f:03:c9:e0:d2:92:b7:4f:64:69:0a:59:9c:e3:
                    79:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A8:BF:AC:5A:C9:30:57:15:24:A8:CA:A5:53:2C:04:C0:92:A3:85
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6436303a3a2f34342d3438203d3e20323132303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:d60::/44

    Signature Algorithm: sha256WithRSAEncryption
         6a:d7:3b:37:4d:45:ea:f6:d0:d2:e5:2f:97:30:a2:a1:3f:78:
         4e:f3:b7:40:45:99:f0:c8:97:f0:57:79:15:b1:cd:6d:60:17:
         1c:28:c8:7b:24:fe:f2:3e:3d:50:95:2c:93:7a:cf:97:48:c9:
         ba:24:68:cd:de:64:37:fd:8a:d9:81:51:66:ee:82:e6:6a:03:
         31:a1:e1:9c:5f:e0:dd:3f:d2:a4:e6:2f:2e:0e:15:a0:72:eb:
         b6:6b:d9:05:97:fb:d9:00:45:35:73:82:64:b6:55:d5:22:a1:
         21:a4:cc:7e:17:54:56:7f:f6:1e:5c:a4:6c:63:d6:33:e6:32:
         ab:61:fa:37:bd:50:6c:8c:27:b0:74:6e:4b:74:41:57:01:3c:
         b4:b9:08:42:a3:23:b2:dc:cf:9f:0c:0d:8b:d7:9e:d8:8e:e0:
         f2:03:28:b3:67:9c:9d:89:35:0d:a1:33:6d:a6:48:6b:d3:af:
         a7:c9:6f:93:d1:5c:35:fb:1a:74:b3:30:1b:f9:5c:e3:9f:c0:
         22:50:73:41:f3:c3:bc:81:34:09:2e:b9:63:d2:5a:64:1d:19:
         52:01:c9:df:8a:ec:43:7b:8e:63:c5:46:4c:f8:58:6a:46:75:
         6b:2f:88:a0:f6:13:75:d4:4d:15:e3:40:6f:07:86:69:c1:f2:
         fc:e8:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:11:41 2024 by rpki-client on console-ams.rpki-client.org