Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6461303a3a2f34342d3438203d3e20313432303535.roa
File:                     323630323a666564613a6461303a3a2f34342d3438203d3e20313432303535.roa (raw, json)
Hash identifier:          cw1VjY0DS5mNDxmN1qwVnCZ2fqui2jsFKNSQyNGddKY=
Subject key identifier:   FD:18:7D:D8:0E:39:4D:D6:74:0A:E4:DA:A5:55:6B:41:5E:0F:9F:8C
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       2B3813C0FBF983C8A319E04D7CB889A2A3B071A1
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6461303a3a2f34342d3438203d3e20313432303535.roa
Signing time:             Mon 15 Jul 2024 08:50:15 +0000
ROA not before:           Mon 15 Jul 2024 08:45:15 +0000
ROA not after:            Mon 14 Jul 2025 08:50:15 +0000
asID:                     142055
IP address blocks:        2602:feda:da0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:38:13:c0:fb:f9:83:c8:a3:19:e0:4d:7c:b8:89:a2:a3:b0:71:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:15 2024 GMT
            Not After : Jul 14 08:50:15 2025 GMT
        Subject: CN=FD187DD80E394DD6740AE4DAA5556B415E0F9F8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:66:28:32:e3:59:ff:d0:ff:f0:32:3c:1b:
                    f9:5a:26:f6:35:e1:c0:aa:fa:af:af:e4:44:6b:43:
                    1a:8b:45:c3:1d:68:9f:09:88:42:9f:35:68:b7:3a:
                    81:99:9f:e0:aa:ad:78:cc:6e:d5:fb:5b:64:fa:51:
                    93:95:05:3a:b4:96:93:ac:29:3e:0d:73:c4:1f:0b:
                    50:67:42:39:61:93:d2:a8:05:58:22:03:a1:20:e2:
                    ee:d9:6d:26:2b:5e:9e:ce:fe:c3:b2:6f:67:a6:33:
                    67:13:bb:3f:2e:f5:27:51:12:36:85:f3:40:55:c4:
                    71:af:96:c3:19:0b:c4:09:c4:84:6b:69:63:26:69:
                    ad:7d:d2:a8:7f:bc:62:b5:9a:f3:f5:d8:9a:69:4d:
                    6b:c1:cd:a9:2c:2b:21:b4:ae:b9:04:21:61:a1:22:
                    b8:c0:fa:ef:d7:a1:b8:11:71:b8:d0:6a:74:e1:bf:
                    bc:3f:d1:4a:1a:89:87:bd:3a:f5:f5:bb:47:35:32:
                    0f:dd:d0:9b:8e:f3:c8:e2:90:c4:8a:11:48:d0:ec:
                    00:a8:f6:86:50:13:36:40:2b:d0:e8:c3:cc:85:27:
                    69:be:c6:26:4c:05:18:78:00:14:3b:31:e6:8d:9b:
                    0f:be:4a:76:ac:a7:64:e7:8b:89:c2:8d:6d:62:47:
                    46:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:18:7D:D8:0E:39:4D:D6:74:0A:E4:DA:A5:55:6B:41:5E:0F:9F:8C
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6461303a3a2f34342d3438203d3e20313432303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:da0::/44

    Signature Algorithm: sha256WithRSAEncryption
         52:2a:82:98:23:81:2e:b0:fd:0d:29:db:b2:2a:9b:37:e9:53:
         98:d4:d6:38:a6:8a:9f:14:a4:05:0d:70:69:27:f2:3d:9a:13:
         19:f3:ad:88:ef:f4:95:ad:c4:64:8e:d8:8d:d1:3b:c5:75:d2:
         69:44:3b:ed:22:e4:75:41:92:c0:dc:2c:15:48:08:d5:8b:3c:
         ec:18:19:14:72:1a:a2:f0:b5:93:b5:4e:e8:40:22:df:08:f1:
         0a:41:e4:d1:49:bc:14:21:e1:84:89:4e:e3:08:55:89:17:f7:
         ce:e7:e8:c8:a9:e2:44:6c:31:cc:f6:88:9e:37:d4:bb:7e:d6:
         e6:ee:e0:6d:61:70:4a:51:bc:af:2f:27:21:e3:50:00:4f:fa:
         ea:9e:91:e4:03:41:1d:3f:c3:6a:fa:d0:4c:83:39:2f:61:a2:
         fe:8e:c0:2b:7a:a0:ca:5f:43:e6:f5:61:f8:42:ec:5b:c9:85:
         59:10:c5:27:74:f9:8f:16:e0:d1:05:8e:a9:60:93:20:88:8e:
         ea:01:45:06:80:5a:3d:35:1e:5e:cd:5b:a5:f9:a4:07:0e:26:
         49:b9:28:fc:d7:6e:ba:f2:c9:39:5a:a5:4c:3b:e3:56:d3:73:
         96:e5:7c:00:13:04:aa:1d:1c:aa:98:08:02:17:2d:bd:0f:ca:
         db:59:60:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:07 2024 by rpki-client on console-ams.rpki-client.org