Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663031303a3a2f34342d3434203d3e20313437303438.roa
File:                     323630323a666564613a663031303a3a2f34342d3434203d3e20313437303438.roa (raw, json)
Hash identifier:          enso6fqeX38hBKJYM2hYdizUANezJSNaTEhT7NziIao=
Subject key identifier:   F1:D8:12:1F:DC:5D:2E:76:0D:44:02:F8:DB:2B:C7:91:34:95:26:6D
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       30096A847DB6706CCD73EE872BA4B1870D14501F
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663031303a3a2f34342d3434203d3e20313437303438.roa
Signing time:             Mon 14 Aug 2023 07:53:38 +0000
ROA not before:           Mon 14 Aug 2023 07:48:38 +0000
ROA not after:            Mon 12 Aug 2024 07:53:38 +0000
asID:                     147048
IP address blocks:        2602:feda:f010::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:09:6a:84:7d:b6:70:6c:cd:73:ee:87:2b:a4:b1:87:0d:14:50:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:38 2023 GMT
            Not After : Aug 12 07:53:38 2024 GMT
        Subject: CN=F1D8121FDC5D2E760D4402F8DB2BC7913495266D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:00:25:7f:a6:29:19:96:84:d1:f2:c9:ab:57:
                    60:8e:bd:42:4a:e6:5c:05:ed:c7:30:71:47:59:61:
                    fc:d2:9d:e3:f7:80:9f:75:4b:2d:ec:c2:47:5d:c7:
                    66:ba:d1:11:30:9c:74:fe:35:c7:f1:01:29:3c:53:
                    7d:be:de:3c:6f:91:e0:1d:42:d4:39:7e:06:e6:8a:
                    f9:98:53:c9:e8:c2:e7:c4:15:54:9e:60:05:a4:e1:
                    12:20:c7:7c:a1:ac:61:4a:6c:8b:3c:bf:66:ab:70:
                    31:5d:58:d0:89:8a:3b:93:04:60:e5:64:c7:84:ac:
                    c6:c1:fa:05:9c:ec:1a:a9:c3:10:a4:ad:25:e3:75:
                    5c:a4:4f:e7:08:ee:b7:4a:ba:26:13:f5:11:ca:ce:
                    de:c1:a5:94:2e:86:27:af:62:61:ea:a8:c7:09:a4:
                    fb:56:77:2c:b8:b1:d2:14:a9:da:eb:e9:70:3c:f0:
                    c2:49:18:8b:a1:d1:e8:e7:d8:cc:2a:b7:ae:fd:93:
                    da:9d:ee:30:79:89:bd:29:f9:89:5f:30:90:5d:93:
                    46:ba:ba:44:1c:ed:94:00:77:cd:ad:09:0b:68:13:
                    c6:54:23:7e:0c:90:77:a3:9f:5b:50:aa:48:8b:e4:
                    59:8b:fa:c1:ad:fb:0c:c5:b6:f6:aa:a7:aa:32:42:
                    4b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:D8:12:1F:DC:5D:2E:76:0D:44:02:F8:DB:2B:C7:91:34:95:26:6D
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663031303a3a2f34342d3434203d3e20313437303438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:f010::/44

    Signature Algorithm: sha256WithRSAEncryption
         0c:30:0c:19:c6:c2:3d:d6:f2:c9:64:cd:1c:ee:12:89:16:69:
         6f:f2:f4:4f:42:d0:c8:03:a2:df:7e:e0:2c:e1:38:42:5a:d9:
         ee:a5:f1:ce:c0:2e:90:ed:59:17:f6:d2:96:66:bd:78:62:ad:
         13:3c:78:85:43:4c:f8:f8:48:91:dc:f2:c0:3f:12:d1:b2:9c:
         0f:a6:c7:26:7c:45:04:b8:95:88:46:98:9d:9b:19:3f:5d:7b:
         75:b2:a0:61:a3:d4:76:74:9f:f3:f3:7d:52:49:38:03:ac:df:
         bd:ea:21:80:5a:e1:d7:15:87:80:19:4c:1a:ab:0c:78:89:91:
         d0:59:a2:a0:4d:14:30:b8:cb:f3:70:73:06:79:d9:4c:90:53:
         1b:58:83:ec:e7:30:1c:5d:e3:47:2f:d0:57:66:09:51:2c:46:
         17:d2:01:21:2b:b3:92:c7:6a:0f:65:28:62:2e:9d:2d:79:3d:
         8e:14:94:e0:d6:34:8a:36:0a:17:04:9b:f9:e7:e6:e2:9c:c6:
         0f:ab:08:ff:83:fa:a2:ed:1e:fa:73:b7:f3:f7:e2:0d:3c:68:
         59:fa:a1:16:da:78:02:2a:dc:09:3c:1e:78:c0:c2:6d:af:e1:
         89:fa:08:35:51:96:00:f7:82:30:1a:db:da:d2:bb:b1:ad:bc:
         4d:4b:14:0b
-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIUMAlqhH22cGzNc+6HK6Sxhw0UUB8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjMwODE0MDc0ODM4WhcNMjQwODEyMDc1MzM4
WjAzMTEwLwYDVQQDEyhGMUQ4MTIxRkRDNUQyRTc2MEQ0NDAyRjhEQjJCQzc5MTM0
OTUyNjZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwAlf6YpGZaE
0fLJq1dgjr1CSuZcBe3HMHFHWWH80p3j94CfdUst7MJHXcdmutERMJx0/jXH8QEp
PFN9vt48b5HgHULUOX4G5or5mFPJ6MLnxBVUnmAFpOESIMd8oaxhSmyLPL9mq3Ax
XVjQiYo7kwRg5WTHhKzGwfoFnOwaqcMQpK0l43VcpE/nCO63SromE/URys7ewaWU
LoYnr2Jh6qjHCaT7VncsuLHSFKna6+lwPPDCSRiLodHo59jMKreu/ZPane4weYm9
KfmJXzCQXZNGurpEHO2UAHfNrQkLaBPGVCN+DJB3o59bUKpIi+RZi/rBrfsMxbb2
qqeqMkJLfwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFPHYEh/cXS52DUQC+Nsrx5E0
lSZtMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwgYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6
Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh
NjYzMDMxMzAzYTNhMmYzNDM0MmQzNDM0MjAzZDNlMjAzMTM0MzczMDM0Mzgucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwQmAv7a8BAwDQYJKoZIhvcNAQELBQADggEBAAwwDBnGwj3W8slkzRzu
EokWaW/y9E9C0MgDot9+4CzhOEJa2e6l8c7ALpDtWRf20pZmvXhirRM8eIVDTPj4
SJHc8sA/EtGynA+mxyZ8RQS4lYhGmJ2bGT9de3WyoGGj1HZ0n/PzfVJJOAOs373q
IYBa4dcVh4AZTBqrDHiJkdBZoqBNFDC4y/NwcwZ52UyQUxtYg+znMBxd40cv0Fdm
CVEsRhfSASErs5LHag9lKGIunS15PY4UlODWNIo2ChcEm/nn5uKcxg+rCP+D+qLt
Hvpzt/P34g08aFn6oRbaeAIq3Ak8HnjAwm2v4Yn6CDVRlgD3gjAa29rSu7GtvE1L
FAs=
-----END CERTIFICATE-----
Generated at Sun May 5 01:11:41 2024 by rpki-client on console-ams.rpki-client.org