Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa
File:                     323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa (raw, json)
Hash identifier:          J6QgHadR77+m9fjaE9aMsv7brOHmXSUyRSSDCBzTX/4=
Subject key identifier:   73:36:5F:49:D4:CE:78:90:6C:79:56:79:A8:27:15:D7:30:90:9C:20
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       1230391956A13A2BC509D37341F63AE59D392D35
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa
Signing time:             Mon 14 Aug 2023 07:53:35 +0000
ROA not before:           Mon 14 Aug 2023 07:48:35 +0000
ROA not after:            Mon 12 Aug 2024 07:53:35 +0000
asID:                     147308
IP address blocks:        2602:feda:f050::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:30:39:19:56:a1:3a:2b:c5:09:d3:73:41:f6:3a:e5:9d:39:2d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:35 2023 GMT
            Not After : Aug 12 07:53:35 2024 GMT
        Subject: CN=73365F49D4CE78906C795679A82715D730909C20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:02:24:95:6f:e6:e3:57:d5:ed:d2:ff:64:6d:
                    fe:60:cc:72:4b:c4:8a:63:fc:cb:16:dd:fa:18:cf:
                    0a:27:87:70:e1:ef:81:06:7e:b6:f4:9c:77:6e:d5:
                    90:2a:b4:9b:04:6f:6d:5a:c2:48:74:2f:d0:5c:e7:
                    bc:a7:c2:cb:56:be:ef:9f:5c:e3:6a:dc:20:11:b2:
                    37:19:2c:3a:6f:ec:f4:e7:5e:8d:a9:ce:21:a7:a5:
                    06:ff:69:58:f0:2f:44:46:0d:56:5f:22:9a:c8:82:
                    6e:70:07:8b:b5:b2:dd:25:a7:33:19:61:d4:f0:e3:
                    da:ba:5f:77:e1:7e:17:6b:4f:74:64:7b:ac:2d:a0:
                    1d:d6:11:48:ab:8a:4d:2c:e7:4f:25:8c:6e:1d:ab:
                    75:60:8e:d8:75:37:85:4e:f5:db:71:b3:23:f7:6d:
                    84:0e:c1:33:a7:43:70:c3:6e:1d:47:18:e6:b6:bf:
                    97:4c:89:0f:03:42:c7:99:97:75:aa:f1:97:7f:af:
                    b7:6d:90:01:4a:fa:39:f0:ad:4c:b3:17:ba:ad:3a:
                    5e:70:c4:b6:89:b0:df:9a:53:69:f5:3d:58:49:00:
                    a7:e9:ef:73:30:09:77:6b:8f:8a:d9:c2:ae:de:c7:
                    7d:93:2d:ac:73:21:2c:2f:90:0c:4c:98:f2:72:1f:
                    1e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:36:5F:49:D4:CE:78:90:6C:79:56:79:A8:27:15:D7:30:90:9C:20
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:f050::/44

    Signature Algorithm: sha256WithRSAEncryption
         ab:fb:32:76:f2:70:4d:bb:3d:c4:64:3c:86:ef:47:94:80:43:
         cf:af:80:f5:17:03:1e:f2:a0:50:72:1b:e6:f3:cb:99:41:62:
         63:23:7a:57:8c:fa:6d:6f:7a:d8:ea:7e:03:26:c9:32:95:c1:
         b3:ac:8a:a8:e1:17:61:e8:6a:d5:09:42:25:c9:94:74:bf:57:
         2a:2b:43:7a:ad:3f:41:4f:70:2b:ff:eb:9d:e8:e1:a8:9a:b4:
         2a:28:66:ec:12:e7:e5:d8:f0:3e:b7:21:c5:ca:f2:a4:56:18:
         64:ad:87:e3:0d:24:e3:ec:db:50:03:86:3b:06:d1:ec:61:73:
         a4:93:80:37:ab:14:82:5e:88:d7:00:9e:28:ec:0f:ef:e3:94:
         f8:e0:9f:2e:1f:88:9e:7a:f6:15:2f:d6:3c:3c:5f:6d:9d:74:
         e5:e2:ef:17:e4:4c:e7:b8:8f:3f:97:b4:1a:e5:74:1c:b2:4e:
         f9:2f:18:02:3d:cf:ca:e7:74:49:da:ee:26:79:78:ae:a9:f7:
         d7:05:1f:e1:85:65:0b:b6:b3:21:95:fd:d6:13:71:b7:11:89:
         d0:be:53:1c:dc:f6:f5:b8:22:7f:b9:65:1b:87:fb:fc:21:4e:
         02:d0:3e:dc:44:03:7c:f8:8f:4b:81:a6:ed:7c:53:27:21:eb:
         7f:57:28:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:19:52 2024 by rpki-client on console-fra.rpki-client.org