Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66333a3a2f34382d3438203d3e20323035303538.roa
File:                     323630323a666564613a66333a3a2f34382d3438203d3e20323035303538.roa (raw, json)
Hash identifier:          eE6wyeyvwyGGFp26qfF5sHzuSWSpXg4AYuXFujA1YYg=
Subject key identifier:   E1:BD:95:E5:BF:A4:78:F2:B6:9C:82:B8:4C:42:54:51:F9:64:37:1C
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       59B6831720D41D7425DF0FA157D88FF2BAF01630
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66333a3a2f34382d3438203d3e20323035303538.roa
Signing time:             Mon 14 Aug 2023 07:53:38 +0000
ROA not before:           Mon 14 Aug 2023 07:48:38 +0000
ROA not after:            Mon 12 Aug 2024 07:53:38 +0000
asID:                     205058
IP address blocks:        2602:feda:f3::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 06 May 2024 00:57:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b6:83:17:20:d4:1d:74:25:df:0f:a1:57:d8:8f:f2:ba:f0:16:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Aug 14 07:48:38 2023 GMT
            Not After : Aug 12 07:53:38 2024 GMT
        Subject: CN=E1BD95E5BFA478F2B69C82B84C425451F964371C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bf:00:fb:a9:07:04:6e:1f:6c:28:4c:1d:44:
                    b2:04:ba:97:ff:d3:5c:a2:3e:a2:49:c8:3b:44:ea:
                    b0:9e:b0:2b:ff:74:df:43:1e:c5:cc:d2:77:3c:14:
                    3a:75:57:42:c1:85:4b:6d:e5:16:98:dc:47:26:37:
                    a4:68:09:ec:95:f0:9e:92:a4:68:c4:b2:0f:2a:7c:
                    cc:10:60:78:b6:56:1f:5b:fc:1c:cb:7a:57:a1:30:
                    c1:ce:8f:59:4b:d6:13:57:c4:90:69:fc:a9:e7:a5:
                    41:77:31:c8:d1:af:c6:3c:5f:e0:d3:96:89:01:3d:
                    0f:fc:62:9d:aa:f5:b8:d2:f6:38:6b:15:dc:66:de:
                    1f:b3:d4:c6:d9:87:17:ef:b4:09:f3:4b:1f:b6:eb:
                    62:bf:51:c1:15:a6:04:62:f2:09:65:e5:3b:d8:fd:
                    9a:b6:76:b4:31:fa:12:db:df:50:ee:08:97:2c:64:
                    2d:b3:86:1d:8d:32:25:2d:be:4c:ce:c6:dc:5a:c7:
                    5d:86:de:e4:c6:1a:95:e2:18:09:8f:8b:63:ad:2e:
                    de:ea:c2:69:9c:a0:f3:7c:cc:cc:11:78:d7:3e:04:
                    13:58:8d:3a:4c:75:61:f9:67:4a:8b:05:c6:18:57:
                    39:ba:2e:29:db:62:92:a6:ff:ae:ab:ed:31:e2:78:
                    10:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BD:95:E5:BF:A4:78:F2:B6:9C:82:B8:4C:42:54:51:F9:64:37:1C
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66333a3a2f34382d3438203d3e20323035303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:f3::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:d6:cd:06:60:6f:13:72:9d:c6:26:4e:04:47:78:ce:1c:01:
         ca:08:81:eb:e3:e0:e0:9b:0b:c8:d4:72:f1:af:92:2d:b4:49:
         8a:4e:95:86:f4:c2:10:78:be:f2:f4:c8:33:2b:ad:1b:28:d1:
         f1:07:64:ee:3a:f9:79:57:20:d8:55:85:8e:2f:ad:a6:73:78:
         d4:d0:47:41:fb:b7:45:0b:19:ab:ca:44:d5:fb:b0:64:7a:52:
         9d:d4:52:82:d4:a4:73:11:86:f7:57:e8:86:ec:14:5c:02:72:
         7c:c7:21:8e:b6:dc:41:3e:fd:08:b7:7c:a6:eb:f8:fa:b7:6d:
         04:bd:fa:43:8d:3a:40:69:3e:b5:ce:98:24:92:8b:35:9d:b3:
         7c:28:8b:48:16:95:25:2b:97:87:b3:d9:fb:e9:b5:c4:f4:6b:
         6b:53:56:73:a2:ab:3b:f6:2d:69:49:47:93:b5:8e:39:56:33:
         d1:96:d9:44:7f:40:22:ee:f3:87:28:e9:65:30:2a:b2:20:74:
         dd:19:a7:c8:34:31:24:65:a6:55:cc:f1:97:14:24:59:9d:eb:
         2d:23:39:ca:0a:24:2b:77:fe:d3:7f:2e:9e:f7:77:3e:14:1f:
         a7:a9:7f:f3:51:ab:18:7b:0b:c2:5f:3f:fd:0d:8f:97:54:f9:
         4d:53:92:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 01:19:52 2024 by rpki-client on console-fra.rpki-client.org