Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa
File:                     323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa (raw, json)
Hash identifier:          dzsxNiTZZf55GV+hBbu7kLV4DNBr05ElOstJvQHaD8M=
Subject key identifier:   9F:6B:C1:08:5E:25:9F:68:FC:53:3C:EE:4E:D9:F3:62:05:13:E8:11
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       0D8458DDB38CE80C9318B29CC060A6ED19F8E158
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa
Signing time:             Mon 15 Jul 2024 08:50:08 +0000
ROA not before:           Mon 15 Jul 2024 08:45:08 +0000
ROA not after:            Mon 14 Jul 2025 08:50:08 +0000
asID:                     149285
IP address blocks:        2602:feda:e40::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:84:58:dd:b3:8c:e8:0c:93:18:b2:9c:c0:60:a6:ed:19:f8:e1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:08 2024 GMT
            Not After : Jul 14 08:50:08 2025 GMT
        Subject: CN=9F6BC1085E259F68FC533CEE4ED9F3620513E811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a8:c0:f8:84:08:28:e6:d1:bc:63:58:0f:8f:
                    41:43:7e:72:70:11:39:00:9a:27:d8:ee:48:aa:3c:
                    5f:77:91:4e:54:68:57:ba:a7:c8:cd:fd:bf:9f:aa:
                    e7:86:22:9f:8f:76:4d:c8:da:08:57:c3:0c:5d:23:
                    3c:f4:fa:9f:3d:19:ec:1a:47:c6:fb:82:77:3e:09:
                    00:e9:87:6d:66:70:b0:5a:c6:25:6f:cb:3f:9e:c9:
                    67:a8:55:67:b7:b4:b5:cc:03:e3:2a:6f:1b:a2:39:
                    5a:ff:ce:b8:88:a3:c1:10:c7:53:03:ad:02:10:8b:
                    36:a8:5a:2b:ea:8f:73:30:f6:8a:ec:86:dd:96:d5:
                    ff:e0:a9:7f:07:0d:ad:4a:b7:55:0b:a6:87:a5:73:
                    de:b9:ae:4e:9a:d1:a3:0c:f9:33:d0:76:47:40:ad:
                    47:f0:b7:52:96:5e:8e:5c:de:f0:2a:e9:5d:ff:34:
                    5f:45:72:fc:be:7e:c1:b6:c0:b7:33:06:36:f5:1b:
                    e0:d2:1f:ec:00:4c:b9:4a:15:19:b5:02:a5:fc:6d:
                    3c:43:05:36:0d:9a:5f:20:2b:52:7f:1e:dd:ef:b0:
                    7d:f4:90:54:f9:e5:22:c4:98:47:5a:cd:a3:68:18:
                    86:3f:d9:61:f7:58:df:21:f7:4b:90:98:21:69:5d:
                    70:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:6B:C1:08:5E:25:9F:68:FC:53:3C:EE:4E:D9:F3:62:05:13:E8:11
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:e40::/44

    Signature Algorithm: sha256WithRSAEncryption
         86:e2:86:67:48:db:ca:b3:30:76:2d:61:ab:d5:7b:7b:1f:fc:
         31:bd:85:10:37:32:1d:58:77:c6:b0:bc:ba:50:0f:85:1d:2a:
         1c:87:aa:59:0c:62:8a:ef:00:88:53:76:41:cb:9f:5c:1b:08:
         61:bc:e9:db:0a:a5:f3:c1:57:d9:37:b3:0b:d9:c7:11:69:bf:
         74:f9:3b:50:9a:6a:bb:a4:2f:61:66:6c:bd:bf:21:66:67:2e:
         38:56:33:f5:d4:fc:55:d0:7e:8a:a3:0f:09:26:1d:a5:b5:ea:
         1e:93:68:3d:b3:e4:63:c2:a8:68:58:ce:4b:b6:83:9a:f4:d3:
         81:78:d0:a3:56:e0:db:9a:ea:34:25:ae:50:85:8a:d2:53:18:
         c2:75:5a:93:83:ca:bb:8d:83:40:78:3a:f2:dd:37:39:2f:2c:
         92:fa:fa:07:8d:22:61:8a:e5:d0:05:33:94:df:16:ce:0c:8c:
         35:f1:47:7b:fa:b8:e6:99:9d:15:46:aa:84:76:9d:fe:f3:5b:
         36:0c:95:ad:4f:58:e6:7d:e6:de:ed:21:7f:a8:9a:a4:bb:6a:
         57:f7:36:e3:88:c0:c0:a8:5f:53:02:23:9e:10:08:38:d7:e9:
         c3:fc:1a:2b:80:ac:7e:36:b3:f3:71:9e:a1:82:12:da:08:22:
         cf:9c:e8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:07 2024 by rpki-client on console-ams.rpki-client.org