Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663030303a3a2f34342d3438203d3e20313437303431.roa
File:                     323630323a666564613a663030303a3a2f34342d3438203d3e20313437303431.roa (raw, json)
Hash identifier:          hU9B1VLWMzAtQzeiM4YYvXRgdIIXv/nCt5RWEVTAT0k=
Subject key identifier:   1B:A5:5A:22:7C:51:D6:8E:B5:E3:EE:9E:CA:82:0B:61:47:BD:0C:C0
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       4451CCF2FE24B4E0B8C5EBE80C4C8D95F3B77587
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663030303a3a2f34342d3438203d3e20313437303431.roa
Signing time:             Mon 14 Aug 2023 07:53:33 +0000
ROA not before:           Mon 14 Aug 2023 07:48:33 +0000
ROA not after:            Mon 12 Aug 2024 07:53:33 +0000
asID:                     147041
IP address blocks:        2602:feda:f000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:51:cc:f2:fe:24:b4:e0:b8:c5:eb:e8:0c:4c:8d:95:f3:b7:75:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:33 2023 GMT
            Not After : Aug 12 07:53:33 2024 GMT
        Subject: CN=1BA55A227C51D68EB5E3EE9ECA820B6147BD0CC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:17:c7:36:46:33:99:af:7b:1b:25:5e:61:89:
                    d5:be:6c:3d:6a:20:92:aa:6e:ed:4c:24:05:73:c8:
                    f8:81:89:8e:cb:17:8e:83:6e:5d:d7:b6:1b:55:b6:
                    ab:0a:c7:9b:c7:ce:5f:e4:97:22:1b:7b:cb:0e:88:
                    f4:c2:c3:01:45:65:cc:62:eb:b2:19:5a:e5:f5:3c:
                    55:80:8c:69:0f:39:6a:8a:9d:27:24:fa:ae:28:94:
                    22:51:a7:f3:e8:50:f0:bf:af:71:a7:99:cc:d5:c6:
                    83:17:67:18:78:fe:d7:86:aa:ed:58:6d:87:0a:cd:
                    b6:98:df:4b:0e:3d:8c:52:21:dd:0b:a8:c4:d2:07:
                    43:da:0f:7e:99:8e:4b:0c:1a:cb:f9:f2:b4:91:87:
                    20:93:d5:46:39:1f:ec:32:ec:50:55:65:0f:9f:b0:
                    4f:eb:25:80:57:25:7c:1c:29:b7:21:5d:4f:0c:1d:
                    2e:fe:d9:e1:29:ad:f4:a9:52:f6:c5:f1:98:2a:b2:
                    88:13:c7:19:d4:4c:2f:87:08:51:04:41:c7:2b:56:
                    bc:7b:e2:7d:9c:36:25:5c:7a:76:e0:cb:43:76:d8:
                    2b:50:80:5d:21:45:33:5b:97:ec:d1:8c:30:21:04:
                    1b:d2:c2:ee:55:29:f0:e3:78:6d:e5:40:80:83:ed:
                    1d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A5:5A:22:7C:51:D6:8E:B5:E3:EE:9E:CA:82:0B:61:47:BD:0C:C0
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663030303a3a2f34342d3438203d3e20313437303431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:f000::/44

    Signature Algorithm: sha256WithRSAEncryption
         bf:31:aa:e5:a1:a8:09:a7:16:6d:8b:94:17:a5:22:46:0e:7f:
         0b:f4:96:9d:ff:15:91:b2:03:cb:13:6c:75:19:6d:55:95:36:
         25:b3:ec:07:2f:48:c5:79:2e:d5:4a:48:8b:90:2c:27:74:3f:
         23:9c:71:3f:36:47:ce:8b:f2:41:c6:5b:a1:58:ad:20:9d:dd:
         a9:5c:e5:0f:10:8c:1f:69:61:c0:88:1b:f6:10:81:7a:22:04:
         ff:b3:10:ee:45:71:32:45:b2:79:34:41:4a:18:24:ec:00:95:
         fb:15:2e:36:cf:97:51:98:de:ec:0c:a2:8c:42:70:16:74:b5:
         04:41:6a:fa:cc:1c:50:5c:38:15:0f:da:67:71:5d:cb:bb:19:
         93:2f:7f:a8:ca:0e:80:93:c9:e2:bd:6a:ac:88:cc:24:ad:f8:
         ad:02:e6:08:c9:87:09:6e:aa:46:5a:6e:e2:50:24:47:77:b3:
         51:1a:e5:b8:bb:9c:9e:b0:0b:a8:d3:6a:2a:85:6f:6d:1d:e5:
         88:e2:67:0e:75:90:79:2f:c5:33:14:e2:a0:bc:69:c5:6f:b3:
         36:3c:d0:08:b8:ff:88:21:07:eb:85:3c:d1:78:34:07:9f:43:
         40:19:2d:8a:52:77:15:2f:d9:c5:f3:fc:8b:72:99:14:79:57:
         75:34:ef:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:11:41 2024 by rpki-client on console-ams.rpki-client.org