Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa
File:                     323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa (raw, json)
Hash identifier:          71SV94P9zgmbQ4jDpC8H9lZnl97kDtwXqMP2l3W6AnE=
Subject key identifier:   29:7A:09:79:71:03:73:55:62:78:09:6F:30:07:B6:66:87:C5:29:30
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       10EEC332FE2ADDEF2F7E8270F504A5389F456C8C
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa
Signing time:             Mon 14 Aug 2023 07:53:37 +0000
ROA not before:           Mon 14 Aug 2023 07:48:37 +0000
ROA not after:            Mon 12 Aug 2024 07:53:37 +0000
asID:                     149285
IP address blocks:        2602:feda:e40::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:ee:c3:32:fe:2a:dd:ef:2f:7e:82:70:f5:04:a5:38:9f:45:6c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:37 2023 GMT
            Not After : Aug 12 07:53:37 2024 GMT
        Subject: CN=297A0979710373556278096F3007B66687C52930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:5b:f5:54:ea:01:7c:60:81:6c:8f:fa:2c:40:
                    bf:61:cd:d6:7e:93:00:f6:d6:29:c6:bf:63:5b:31:
                    9b:a1:53:3e:f5:a6:ae:e2:d5:36:14:7c:82:4d:e8:
                    09:30:ae:ce:e9:1b:60:30:2d:06:f1:c3:7b:2e:f3:
                    80:8d:6b:b2:7d:73:70:24:a0:d9:9f:45:94:51:19:
                    17:49:b4:1c:e4:0e:e6:80:1a:be:7f:aa:66:11:50:
                    84:ec:fb:37:48:c1:bd:bb:e0:c0:20:ef:d1:65:19:
                    87:be:74:7c:e0:66:82:21:91:e7:79:b0:02:fb:95:
                    53:35:95:49:4a:17:c7:02:21:23:4c:cb:c9:f0:fb:
                    6f:31:ab:02:52:c6:9e:5b:09:da:c2:c0:c0:84:55:
                    cc:92:53:0a:b4:df:1c:d2:fa:e6:51:37:b8:b9:6d:
                    95:5f:12:e6:02:55:f4:9b:1e:4d:54:85:03:04:69:
                    1f:8f:0e:8f:ac:cc:1c:c7:cb:b7:58:ba:7d:db:59:
                    85:2b:a8:75:6b:14:90:6e:8b:7f:13:89:7e:20:b7:
                    08:de:98:4b:de:78:9b:b0:a2:3f:b2:e8:1a:16:e1:
                    96:65:dc:47:2f:d1:77:7d:3f:53:a0:af:25:68:99:
                    cc:4c:a4:69:26:58:38:d9:0e:f5:71:cd:d5:df:c8:
                    ee:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7A:09:79:71:03:73:55:62:78:09:6F:30:07:B6:66:87:C5:29:30
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:e40::/44

    Signature Algorithm: sha256WithRSAEncryption
         21:8c:ab:6b:36:33:d2:ca:1a:0e:91:1a:a9:dd:15:9a:97:8c:
         04:66:42:49:b1:50:6d:bd:49:b9:37:5b:fd:62:3f:90:38:7e:
         28:7d:23:cc:36:b5:7f:1b:5d:f4:63:8e:bc:0b:44:5e:1c:87:
         6e:a8:d8:8e:e7:b2:c5:c2:7f:fe:0b:31:7a:3d:26:39:cd:b9:
         2a:7c:b4:af:0f:6a:cd:1f:b5:bd:26:7d:ab:a8:8d:a8:13:ad:
         5a:15:cd:ec:3b:24:20:fc:41:36:e8:ed:68:fa:cb:a0:a6:d5:
         91:40:9c:12:25:54:69:8f:9f:91:1c:b1:12:b1:02:6c:40:6a:
         e1:a5:5c:b7:9e:25:97:00:9a:1a:45:f9:c9:a1:b6:07:fd:d1:
         36:e7:c3:12:19:66:29:af:60:f0:df:88:87:8b:6e:9a:cc:87:
         f1:a3:21:20:79:a1:03:b4:4e:ba:57:d4:27:f2:ed:c4:f0:f6:
         be:98:16:d6:0c:a0:e3:9e:2e:95:dc:21:e2:90:6f:ef:85:bc:
         21:69:4d:5e:5a:12:71:38:b7:6c:79:15:58:5e:65:0c:52:6b:
         a9:0e:56:22:e8:75:2e:40:ed:80:ec:f2:1e:45:2a:f1:5e:97:
         11:8b:b8:2b:99:69:37:ad:10:4c:45:27:c6:b3:6b:de:35:9f:
         1a:d1:83:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:19:52 2024 by rpki-client on console-fra.rpki-client.org