Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663231303a3a2f34342d3438203d3e2037363033.roa
File:                     323630323a666564613a663231303a3a2f34342d3438203d3e2037363033.roa (raw, json)
Hash identifier:          y8SGF7OrLUjmIX2fecXX1JWo+xu/8mlRxGuGk6UziRs=
Subject key identifier:   A7:A9:2F:27:C4:A7:11:CD:DC:7E:2F:C7:EA:CA:93:79:1E:35:71:5E
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       633025818EBE5F9809D2BD13CF29DAECF6DB9441
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663231303a3a2f34342d3438203d3e2037363033.roa
Signing time:             Mon 14 Aug 2023 07:53:29 +0000
ROA not before:           Mon 14 Aug 2023 07:48:29 +0000
ROA not after:            Mon 12 Aug 2024 07:53:29 +0000
asID:                     7603
IP address blocks:        2602:feda:f210::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 05 May 2024 07:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:30:25:81:8e:be:5f:98:09:d2:bd:13:cf:29:da:ec:f6:db:94:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:29 2023 GMT
            Not After : Aug 12 07:53:29 2024 GMT
        Subject: CN=A7A92F27C4A711CDDC7E2FC7EACA93791E35715E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:94:52:01:44:38:fc:da:5e:15:e3:c9:47:a1:
                    a3:35:4a:a7:dd:d4:ac:86:5b:b1:61:8e:97:27:ae:
                    63:19:e2:21:8d:87:fb:8b:ea:f9:57:e3:84:a3:ed:
                    fa:97:e2:6c:45:1b:93:2d:7e:7b:33:7d:a2:23:94:
                    5e:f2:60:d5:c7:57:a5:85:4b:31:ef:63:16:3c:c3:
                    1e:ad:ca:cc:16:9c:61:6e:5a:f4:16:a6:d1:e1:76:
                    e3:84:a6:34:1a:73:c7:bb:97:4e:59:ee:38:32:79:
                    39:fd:44:a6:f1:eb:c2:e5:49:01:f9:72:2c:c9:4a:
                    fc:5f:6b:64:80:79:35:aa:3c:49:f3:c5:37:47:c0:
                    ec:04:25:a3:19:aa:1d:cf:4c:93:dd:59:a6:77:58:
                    df:6b:ac:0f:76:12:50:8b:f4:bc:d7:79:04:c1:03:
                    bf:5f:3d:61:8b:95:7c:68:82:60:ae:62:b5:90:f4:
                    fa:5e:44:a7:66:e9:08:c8:c4:86:9c:2b:29:6d:85:
                    52:98:28:44:f4:05:a3:fd:c8:a6:d6:ae:15:46:98:
                    91:c7:b6:8f:71:c7:14:c4:cd:7e:7e:f8:26:fe:de:
                    32:04:48:43:36:50:8e:a0:b9:4c:1e:3d:5f:52:4f:
                    34:ea:4d:50:3a:e9:46:74:37:ef:13:f1:2f:3a:f5:
                    2e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A9:2F:27:C4:A7:11:CD:DC:7E:2F:C7:EA:CA:93:79:1E:35:71:5E
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663231303a3a2f34342d3438203d3e2037363033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:f210::/44

    Signature Algorithm: sha256WithRSAEncryption
         b2:0b:b1:cc:c2:7f:3a:b7:7f:56:12:61:3a:30:09:a4:4e:ef:
         10:ca:5b:0c:d0:0f:59:0d:a8:39:00:ac:8c:df:6c:6f:71:1f:
         6a:5f:3c:81:e0:a1:40:60:b7:7f:b2:18:6c:52:c1:4c:4a:f7:
         c8:a0:2a:4d:fa:f8:f9:de:e0:09:2e:76:d7:38:b7:87:77:55:
         57:e2:55:69:e7:d7:8e:f7:8d:99:39:e6:20:a1:67:0f:f8:49:
         6d:5e:69:0c:5b:b1:96:4d:d0:53:90:c3:7e:d5:08:fb:01:66:
         13:87:ca:30:e7:ef:05:3b:e2:14:fc:c6:af:44:b2:26:b3:ee:
         fd:0f:d6:3c:23:fa:41:b6:df:f1:46:d7:de:96:dc:56:9e:89:
         34:46:bc:a1:ad:7c:cb:38:67:8b:77:c4:ba:ee:1d:03:b7:8b:
         d3:5b:cd:bb:fd:bb:0d:df:0a:1c:42:10:48:14:6b:51:ad:5e:
         a0:14:34:d0:34:4e:e5:93:5d:c1:09:3b:f7:07:b9:ab:c7:f8:
         f3:6f:c1:e7:71:fe:4d:4d:fb:a1:7d:ee:25:7c:5f:c5:39:7e:
         4a:dd:54:6b:d0:e4:d8:f3:51:bc:3e:31:ff:ca:f2:47:cc:88:
         6f:2a:4d:0a:65:f2:44:85:8e:92:1e:91:e4:a9:b5:61:96:04:
         d9:76:0e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 08:30:34 2024 by rpki-client on console-fra.rpki-client.org