Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa
File:                     323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa (raw, json)
Hash identifier:          bpL4YpyX47kP1nhi4G6lyYAL9EHRmTNsickhP69TD+U=
Subject key identifier:   86:BD:C8:38:A4:7F:71:53:7E:47:57:41:B7:ED:B2:14:49:57:24:23
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       259A3E7AC7D1D968B784AE510572C5437E83AB75
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa
Signing time:             Mon 15 Jul 2024 08:50:15 +0000
ROA not before:           Mon 15 Jul 2024 08:45:15 +0000
ROA not after:            Mon 14 Jul 2025 08:50:15 +0000
asID:                     147308
IP address blocks:        2602:feda:f050::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9a:3e:7a:c7:d1:d9:68:b7:84:ae:51:05:72:c5:43:7e:83:ab:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:15 2024 GMT
            Not After : Jul 14 08:50:15 2025 GMT
        Subject: CN=86BDC838A47F71537E475741B7EDB21449572423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:6f:52:be:61:26:2f:21:55:52:36:a0:71:
                    89:8e:53:60:dc:3a:a2:19:8b:ec:a1:b2:04:42:ab:
                    fc:26:a1:54:3d:ec:2e:f1:c2:95:02:b2:2a:17:7f:
                    b2:a1:a6:20:1f:1e:bc:ae:08:2b:10:5e:82:81:9d:
                    86:24:85:e8:c4:d6:e6:69:17:db:46:36:94:9f:2a:
                    6f:9b:5d:5a:8c:be:55:12:0b:84:d5:58:73:c4:1f:
                    8f:23:b2:f7:78:06:20:96:ef:f4:22:da:e9:ba:79:
                    3d:8c:5a:13:a0:25:a9:8d:fa:db:78:55:05:68:18:
                    cd:b8:67:fa:ec:16:6c:36:3c:49:90:e9:b2:15:71:
                    f4:14:3b:08:4d:2a:ae:32:12:f6:93:20:c3:2a:d5:
                    aa:fe:6b:d4:67:61:f6:75:8c:fd:86:6b:57:c8:a6:
                    a3:99:13:10:5e:63:d3:2a:dd:80:68:d5:2d:09:e2:
                    62:d4:22:bb:0d:42:c3:2e:41:f9:51:f8:e1:e1:41:
                    48:cc:81:f0:1d:1e:13:4b:ce:79:10:3b:0b:e9:4f:
                    db:81:7e:18:3b:9c:04:9d:c2:5c:14:71:01:e1:a9:
                    66:6d:78:87:6d:47:74:63:5f:72:6b:c7:e8:fd:c5:
                    f6:36:b2:55:e9:c7:cf:16:ce:d0:f0:ed:1c:97:75:
                    5d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BD:C8:38:A4:7F:71:53:7E:47:57:41:B7:ED:B2:14:49:57:24:23
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:f050::/44

    Signature Algorithm: sha256WithRSAEncryption
         6c:58:0d:cb:49:af:58:ba:a0:9c:9b:54:04:9f:6f:f6:88:e5:
         39:68:83:17:5d:4f:e7:c8:1e:11:34:52:cb:66:f4:96:2c:c1:
         ef:3d:44:a7:43:cb:16:7c:dc:4a:67:62:2c:04:df:06:40:0e:
         3f:f6:04:63:40:42:46:dc:7f:f2:cb:f0:ee:42:5b:ff:bb:0c:
         45:26:a0:3f:13:6d:b4:17:50:ae:4a:b0:27:6d:04:18:b3:f0:
         a9:08:5e:ce:d2:fd:76:62:64:11:37:53:51:87:5f:6f:79:2c:
         ef:04:ed:63:a2:1c:20:5b:fe:48:8b:b5:3a:15:09:47:92:e2:
         3f:28:70:cc:20:9f:36:e3:f9:89:b6:01:54:da:d1:07:9c:e2:
         b9:62:07:8f:bf:bc:b7:5e:68:db:c8:4a:eb:de:37:db:60:9f:
         85:18:da:a3:3e:5d:38:bc:f1:95:09:3f:c9:e0:a8:06:31:3f:
         fc:42:16:1e:ed:c3:f7:9f:58:c2:63:0b:c1:3f:db:62:98:89:
         6b:ff:f1:57:9d:1b:5c:29:18:77:f7:12:09:d3:c3:06:47:45:
         f9:be:a4:ae:79:25:cd:9f:da:8f:0f:33:47:e7:4e:70:bc:ce:
         ab:7d:af:39:dc:96:12:cd:e8:a2:5b:98:c5:78:6b:a5:cf:01:
         2c:30:12:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:02 2024 by rpki-client on console-fra.rpki-client.org