Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a3230333a3a2f34382d3438203d3e20313939323033.roa
File:                     323630323a666161383a3230333a3a2f34382d3438203d3e20313939323033.roa (raw, json)
Hash identifier:          ojYfZp8XcbafGPhC0lFLeNemvTUxUrYYRmYpmfUl0sI=
Subject key identifier:   2E:64:02:55:DA:DE:7B:A9:0A:90:0E:BF:DB:B9:D7:0A:E6:C1:7D:6D
Certificate issuer:       /CN=2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d
Certificate serial:       5D8E2A6836C2F58BFB4B180D1F24AF8C77318530
Authority key identifier: 1B:73:4B:F3:B5:DA:86:30:D7:85:2F:BA:FA:DD:1B:82:D8:50:6B:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a3230333a3a2f34382d3438203d3e20313939323033.roa
Signing time:             Mon 25 Nov 2024 21:26:45 +0000
ROA not before:           Mon 25 Nov 2024 21:21:45 +0000
ROA not after:            Mon 24 Nov 2025 21:26:45 +0000
asID:                     199203
IP address blocks:        2602:faa8:203::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.crl
                          rsync://oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 18:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:8e:2a:68:36:c2:f5:8b:fb:4b:18:0d:1f:24:af:8c:77:31:85:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d
        Validity
            Not Before: Nov 25 21:21:45 2024 GMT
            Not After : Nov 24 21:26:45 2025 GMT
        Subject: CN=2E640255DADE7BA90A900EBFDBB9D70AE6C17D6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:18:fd:a7:cf:dc:92:8c:69:cd:b6:00:11:86:
                    15:90:65:6a:aa:d6:13:c6:f6:aa:24:f3:41:e9:84:
                    cb:3c:2a:01:4a:a3:4c:84:65:89:02:40:2a:3d:f4:
                    e0:3d:47:38:c8:d0:55:66:78:99:80:b9:ca:38:d8:
                    c8:be:fd:56:d9:8c:dd:b0:f4:d7:f2:b6:3f:22:26:
                    0e:b9:a3:67:1c:92:cc:1d:4d:4b:62:53:cb:43:2f:
                    44:a3:87:e4:fd:cc:5c:7e:1c:31:44:15:ed:c0:5e:
                    45:f0:11:19:ab:89:e4:e8:56:d6:36:3d:ff:75:c8:
                    fa:65:f6:f2:2b:2e:a6:c6:9f:04:62:ba:27:ad:d2:
                    d2:ac:04:23:c3:8b:27:e5:69:03:0a:0b:38:74:12:
                    98:89:b3:5f:15:dd:db:9e:66:ac:22:c0:11:5d:90:
                    f4:40:60:1c:9e:ba:cd:ad:eb:d2:7a:f7:72:b6:45:
                    06:69:b7:05:37:ba:ae:03:a9:88:38:9c:f2:a6:9f:
                    c8:5f:2d:69:bb:ca:a9:54:ce:bf:28:ac:35:4f:fc:
                    95:55:64:2f:78:c1:84:69:b0:5f:7f:9e:f6:56:d9:
                    ab:34:c3:4d:7d:ef:a7:44:aa:8a:79:d0:dc:3f:0f:
                    0a:12:b7:17:9c:d6:40:9c:1a:70:f6:bf:3d:ce:bc:
                    03:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:64:02:55:DA:DE:7B:A9:0A:90:0E:BF:DB:B9:D7:0A:E6:C1:7D:6D
            X509v3 Authority Key Identifier:
                keyid:1B:73:4B:F3:B5:DA:86:30:D7:85:2F:BA:FA:DD:1B:82:D8:50:6B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a3230333a3a2f34382d3438203d3e20313939323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:203::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:73:bb:e9:a4:c2:c7:29:a6:9b:4e:c6:09:4a:8d:46:44:c0:
         41:8c:42:91:bb:0e:c9:a7:ed:71:d0:4c:60:8f:7b:99:bf:bc:
         73:23:ef:74:8e:c9:bb:6e:b1:29:f5:6d:98:2d:36:9d:8d:e3:
         bd:da:9d:5f:74:c5:a1:47:8c:60:0c:01:9b:e7:02:6a:bd:f2:
         16:14:68:62:7d:12:cf:2c:ce:6f:55:a0:10:da:1b:91:77:77:
         b1:63:b0:91:0e:d9:b8:98:54:3c:c1:7b:d2:28:99:3d:e6:cb:
         8b:55:ba:fa:52:6c:42:7b:b5:38:5a:c7:66:81:3a:d4:9a:86:
         59:37:85:25:41:25:69:c9:8d:72:2b:6f:d4:f4:a5:3b:61:43:
         b7:69:83:ec:83:09:19:98:53:8b:21:b3:8d:d5:8c:26:0c:cb:
         16:b0:99:19:5c:35:bc:da:15:f8:98:9a:2b:66:eb:1e:ff:c6:
         60:c1:9b:4a:d2:3e:1e:07:5e:e0:e3:e0:b2:e1:bb:37:c6:81:
         20:72:92:79:f9:a7:bf:6b:90:3e:15:84:5f:77:d5:b6:5d:ef:
         1f:19:35:c8:80:23:85:a2:c6:4d:aa:c8:29:bd:3b:fd:42:c4:
         2a:a3:a6:1f:ca:3c:44:a9:5d:01:b2:dd:af:88:92:af:f9:af:
         19:da:22:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:52:13 2025 by rpki-client