Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6465303a3a2f34342d3438203d3e20313432363431.roa
File:                     323630323a666564613a6465303a3a2f34342d3438203d3e20313432363431.roa (raw, json)
Hash identifier:          qzs+W5XIdMCZHr6ee+SrVHqINboc6PX5aq9J85if8nc=
Subject key identifier:   4E:3D:7A:05:A1:DD:99:F4:7B:ED:5C:1C:E8:52:F4:01:0A:99:5E:58
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       234A360E2AFB3E1D5860715895A4A147D15152DF
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6465303a3a2f34342d3438203d3e20313432363431.roa
Signing time:             Mon 15 Jul 2024 08:50:14 +0000
ROA not before:           Mon 15 Jul 2024 08:45:14 +0000
ROA not after:            Mon 14 Jul 2025 08:50:14 +0000
asID:                     142641
IP address blocks:        2602:feda:de0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:4a:36:0e:2a:fb:3e:1d:58:60:71:58:95:a4:a1:47:d1:51:52:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:14 2024 GMT
            Not After : Jul 14 08:50:14 2025 GMT
        Subject: CN=4E3D7A05A1DD99F47BED5C1CE852F4010A995E58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:4d:a2:d2:71:1c:f7:d2:9a:15:cc:9d:1a:cb:
                    a0:9a:65:45:7a:79:7f:9e:2d:99:73:e8:eb:cb:27:
                    51:d0:44:63:ea:fc:ea:d6:9f:96:64:27:b3:07:1b:
                    fd:10:0e:49:f5:c7:ff:c6:fb:d8:54:fa:19:ab:1f:
                    c5:b9:d6:12:2a:44:35:ed:90:e2:6a:37:09:fa:89:
                    d6:e4:cc:3c:e5:fb:e7:12:57:3a:4b:02:cf:3b:67:
                    11:e3:2e:3e:98:3e:53:30:bd:81:ee:18:b9:a4:1e:
                    05:ad:0b:cb:d3:8e:6c:e6:01:cd:0e:c1:1a:f0:19:
                    aa:30:20:fa:b3:9a:4a:a7:22:48:79:4c:a5:78:d0:
                    5c:bc:15:1b:c5:ad:c3:67:c3:c4:cc:78:30:5c:53:
                    00:31:63:81:20:9b:44:f3:f0:14:73:13:cb:a4:c9:
                    1a:14:fa:84:e1:1f:1f:b8:87:c6:48:db:72:a1:15:
                    0c:07:1e:51:ac:21:05:9f:01:60:9a:53:e1:17:f8:
                    2c:df:bb:5d:9c:72:6a:a9:35:69:6e:24:2a:9d:a2:
                    7b:0f:bb:91:f3:cc:bb:93:b0:b4:ec:49:b6:4f:07:
                    29:28:58:f9:43:92:11:3a:08:f6:1e:79:e6:ec:e8:
                    88:19:13:23:b7:b7:6d:1b:ab:56:d6:13:3c:4b:97:
                    e1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3D:7A:05:A1:DD:99:F4:7B:ED:5C:1C:E8:52:F4:01:0A:99:5E:58
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6465303a3a2f34342d3438203d3e20313432363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:de0::/44

    Signature Algorithm: sha256WithRSAEncryption
         c3:9b:5c:d4:51:04:ce:86:b9:5c:84:25:84:5b:e7:f3:34:78:
         79:a1:5d:b0:4b:3c:06:a4:3a:94:38:4c:ce:9f:55:c9:56:ab:
         fb:65:d9:c0:93:f6:38:d0:f8:c7:63:22:8b:b7:42:86:e4:46:
         9f:4d:85:37:20:69:ab:44:10:26:23:ac:b1:85:81:25:b4:bc:
         96:58:bb:53:cc:cf:18:e1:32:a6:de:68:12:44:4f:14:9c:d6:
         50:7b:8f:85:93:71:9d:bf:3f:33:24:37:41:5e:78:4a:2f:e6:
         a3:44:1c:49:23:42:d4:d2:d9:85:8d:09:86:54:da:ba:8c:24:
         f9:bf:03:77:32:ce:25:d7:ac:3c:37:de:55:8a:81:f3:5c:09:
         c8:b5:d3:a4:24:16:ca:41:bd:b8:c0:3a:07:42:6d:d6:46:ec:
         ba:41:0a:ef:eb:50:a1:8c:56:54:23:7a:8f:f1:11:d5:75:96:
         01:29:91:b8:84:00:f3:3b:20:5d:41:a6:e5:69:ed:9e:21:98:
         e5:ed:53:2c:3c:19:72:27:f3:1c:45:c6:dd:73:83:f0:ae:ad:
         76:e8:3e:3e:c2:a0:8a:92:6f:68:14:aa:ba:23:4a:96:55:68:
         14:7c:fd:fb:5c:76:05:7e:13:64:b4:15:ad:62:f5:1d:be:a4:
         70:41:23:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:02 2024 by rpki-client on console-fra.rpki-client.org