Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa
File:                     323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa (raw, json)
Hash identifier:          bDomyiSwpfMxSjVTKu1q2AknW2yjiDnkqC4IDnTlWEg=
Subject key identifier:   33:75:FE:69:14:E4:53:85:AD:05:82:24:F8:DB:91:4A:1E:F2:DE:82
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       73BE672BA149344ECA426A95A708455B33A13681
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa
Signing time:             Mon 14 Aug 2023 07:53:38 +0000
ROA not before:           Mon 14 Aug 2023 07:48:38 +0000
ROA not after:            Mon 12 Aug 2024 07:53:38 +0000
asID:                     142427
IP address blocks:        2602:feda:dc0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:be:67:2b:a1:49:34:4e:ca:42:6a:95:a7:08:45:5b:33:a1:36:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:38 2023 GMT
            Not After : Aug 12 07:53:38 2024 GMT
        Subject: CN=3375FE6914E45385AD058224F8DB914A1EF2DE82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:96:56:6d:56:f4:c1:1b:10:a8:a5:1a:2c:c8:
                    78:29:98:67:c8:2d:3e:31:17:15:d9:9b:65:cf:80:
                    82:4b:89:6d:fd:7f:b0:48:39:60:78:1a:df:c5:19:
                    a7:b9:db:5f:10:34:cb:2b:9e:90:66:d4:71:fe:8e:
                    56:d6:14:ae:3e:b6:85:71:fe:d4:a1:fc:66:96:c7:
                    40:2a:d7:b6:52:9b:6c:99:6a:86:fe:f4:93:3c:96:
                    8a:35:0d:6e:e8:58:0b:97:9a:f1:2e:4a:78:2c:cf:
                    98:f2:a6:fa:7c:b0:76:ab:3e:46:3c:79:9f:35:b2:
                    f7:f1:0d:26:5b:12:ba:7a:11:fb:b5:80:e0:8c:1c:
                    da:93:64:1b:9c:0d:d5:31:82:b6:25:e0:e9:42:a6:
                    21:c9:51:8f:c9:d2:09:fd:9f:2e:4b:1a:85:76:37:
                    af:84:4e:95:38:8d:9a:37:2f:6f:9c:3b:cd:24:3d:
                    ff:bc:30:ee:24:52:f2:dc:1d:82:0a:92:de:a0:de:
                    97:16:6f:4b:2c:ab:95:da:28:cb:af:1b:ba:da:6a:
                    61:3b:58:ad:2a:c0:ad:f6:7a:29:77:41:c4:15:21:
                    8d:e4:a4:87:df:6e:13:9a:e8:4e:5b:b5:b7:24:e5:
                    f6:fa:6f:d9:6a:1e:cd:00:7e:2f:22:55:14:4d:22:
                    d0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:75:FE:69:14:E4:53:85:AD:05:82:24:F8:DB:91:4A:1E:F2:DE:82
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6463303a3a2f34342d3438203d3e20313432343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:dc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         17:75:08:09:66:de:06:67:f2:46:cd:80:58:6d:18:05:f9:d2:
         e0:aa:b6:58:db:07:75:42:ce:68:a9:a8:ba:1c:de:05:f5:a0:
         96:ec:1f:ab:3d:67:e2:99:6d:9d:ab:ad:d9:2c:db:72:15:83:
         7a:b5:6e:04:36:18:6a:1b:90:df:3e:b1:2a:b8:4b:d8:05:6b:
         5b:b5:c7:05:d0:86:1c:94:d7:d9:33:f4:6a:79:da:6f:97:a7:
         24:66:c1:07:22:e5:e7:38:46:fb:91:ea:09:36:20:d0:eb:f1:
         50:3e:aa:69:da:30:52:08:60:a4:15:c5:6b:9c:1b:8c:d8:d4:
         5d:7d:0c:c2:c4:a0:90:9c:53:b9:93:e2:89:22:7d:8c:24:03:
         b8:a5:13:71:c5:53:ba:30:7d:b4:11:b3:8f:2e:37:28:bd:8e:
         51:a0:47:4e:76:fd:66:29:a9:db:43:ec:b7:52:49:a3:32:f7:
         22:99:35:d0:2c:fc:92:07:78:e8:cf:7a:41:98:1f:87:86:72:
         1a:44:78:38:46:72:55:98:15:64:51:bf:d8:1f:eb:f3:71:1b:
         73:b4:3d:18:c3:bf:58:e1:f9:92:38:0d:15:7d:28:82:79:99:
         f4:e9:00:b2:64:b8:cb:c0:3e:15:6c:d6:49:1d:c3:25:d3:fc:
         3f:9e:1b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:19:52 2024 by rpki-client on console-fra.rpki-client.org