Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa
File:                     323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa (raw, json)
Hash identifier:          BhnXFGm23l3BiCLjPbTKIkNtNobgTYDMjUf07nVbr5M=
Subject key identifier:   6D:59:8C:D9:92:1C:16:15:27:A6:93:1D:55:91:E0:3C:2A:13:BC:49
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       72A2C6034B33C40A0111A54255171DFEFBE6FA5C
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa
Signing time:             Mon 14 Aug 2023 07:53:29 +0000
ROA not before:           Mon 14 Aug 2023 07:48:29 +0000
ROA not after:            Mon 12 Aug 2024 07:53:29 +0000
asID:                     147071
IP address blocks:        2602:feda:df0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a2:c6:03:4b:33:c4:0a:01:11:a5:42:55:17:1d:fe:fb:e6:fa:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:29 2023 GMT
            Not After : Aug 12 07:53:29 2024 GMT
        Subject: CN=6D598CD9921C161527A6931D5591E03C2A13BC49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:16:4a:d1:70:27:41:53:c9:5d:66:f3:c7:d0:
                    a0:b2:d2:75:53:49:91:58:e4:3e:e1:32:b4:b2:fa:
                    18:4f:fb:52:2e:1b:bd:e3:aa:02:bc:44:b7:1e:38:
                    b2:e8:91:a7:b7:85:4a:51:f4:1b:89:76:24:ac:18:
                    ff:64:6e:8e:ce:c9:88:84:6a:aa:7f:b3:c8:2f:b1:
                    9f:8d:97:bd:ab:b3:3d:09:1b:d7:3d:bf:a8:25:d5:
                    ec:d7:8f:04:b3:80:2d:95:57:2b:be:04:ed:90:77:
                    1c:74:66:c6:1a:f1:dc:d4:2c:ef:00:33:92:e4:42:
                    89:40:34:30:d3:21:93:92:37:98:c9:0f:99:4f:e5:
                    e7:36:f2:7c:c9:60:c3:ed:14:d1:83:63:76:f3:92:
                    fc:b9:c2:e7:ee:76:57:33:4b:a8:01:b1:9a:44:45:
                    4b:d1:44:e0:35:a4:f9:a1:4d:57:7c:d5:83:aa:c1:
                    fc:51:5b:19:00:f7:33:1a:a4:a1:27:05:74:bb:2d:
                    f3:7b:30:0a:b0:cc:e6:eb:62:50:69:1a:dc:2a:83:
                    32:28:6d:04:cf:d0:48:01:d6:22:bd:f8:dc:61:f5:
                    ad:71:9c:ad:97:bc:b3:a9:47:13:d0:0d:0d:7d:c9:
                    0d:79:6c:23:6e:86:62:70:38:46:04:ac:ab:30:2d:
                    26:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:59:8C:D9:92:1C:16:15:27:A6:93:1D:55:91:E0:3C:2A:13:BC:49
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6466303a3a2f34342d3438203d3e20313437303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:df0::/44

    Signature Algorithm: sha256WithRSAEncryption
         27:8e:2c:db:ea:23:92:ed:84:c3:03:ce:6f:9f:e3:bd:c4:7c:
         60:bf:da:13:4a:ac:d8:ea:49:d6:f7:14:5d:99:3e:87:47:54:
         8d:4d:48:a2:5e:78:e1:1a:50:52:cf:15:b7:b0:23:67:be:83:
         49:91:65:04:a1:8e:f8:81:cc:9d:f7:22:86:9c:c3:b0:ec:40:
         ab:df:3a:c3:a0:a5:03:e6:26:d0:e3:e6:4b:ed:f5:5c:2b:e2:
         1d:dd:66:e0:b7:5a:10:7a:76:b7:1c:aa:55:1b:26:d8:39:da:
         63:b4:21:23:b4:af:60:3e:4c:e4:75:61:fc:8d:e6:24:d3:96:
         30:15:38:9e:be:3c:14:61:d6:66:c8:de:ae:a9:2e:78:94:f4:
         0d:ac:53:68:a2:54:c6:37:a7:b8:c2:48:e8:c1:a2:25:08:67:
         e0:94:00:45:a4:d4:fa:1f:3d:df:34:f2:d3:5a:14:00:f4:e8:
         91:a1:ed:21:9a:42:95:c2:c2:41:be:b0:4e:3e:45:56:0b:84:
         7b:04:ef:82:05:d8:46:f3:91:3a:d7:bf:5b:e3:5f:c8:ce:31:
         2a:86:aa:36:33:22:0f:7b:c0:09:24:20:3a:e5:70:87:14:a0:
         0e:bf:af:d2:f9:ff:d7:3b:9b:76:e2:22:52:ae:de:fd:59:1e:
         3c:d4:bd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:52:00 2024 by rpki-client on console-ams.rpki-client.org