Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a3431303a3a2f34342d3438203d3e20323136313233.roa
File:                     323630323a666161383a3431303a3a2f34342d3438203d3e20323136313233.roa (raw, json)
Hash identifier:          bUAt4eYkYwccuONERal421TpKLejZuBmG62Gt2WIilU=
Subject key identifier:   96:B9:06:3B:CF:7D:7B:0D:FB:8B:0B:C3:52:C2:61:92:D5:1C:45:A0
Certificate issuer:       /CN=2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d
Certificate serial:       4BE7D852D2C2797460A2BADADC8D82EAF8A55A98
Authority key identifier: 1B:73:4B:F3:B5:DA:86:30:D7:85:2F:BA:FA:DD:1B:82:D8:50:6B:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a3431303a3a2f34342d3438203d3e20323136313233.roa
Signing time:             Mon 25 Nov 2024 21:26:44 +0000
ROA not before:           Mon 25 Nov 2024 21:21:44 +0000
ROA not after:            Mon 24 Nov 2025 21:26:44 +0000
asID:                     216123
IP address blocks:        2602:faa8:410::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.crl
                          rsync://oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 23:43:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:e7:d8:52:d2:c2:79:74:60:a2:ba:da:dc:8d:82:ea:f8:a5:5a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d
        Validity
            Not Before: Nov 25 21:21:44 2024 GMT
            Not After : Nov 24 21:26:44 2025 GMT
        Subject: CN=96B9063BCF7D7B0DFB8B0BC352C26192D51C45A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f8:38:cc:73:a3:da:53:8d:25:ae:4a:c3:08:
                    f2:e6:e7:ae:be:1c:da:64:91:73:94:0a:35:00:16:
                    ea:dd:2d:df:0d:51:d6:88:93:e6:2c:bb:33:3d:99:
                    c8:e2:df:1e:32:8a:b4:5f:ae:01:51:b4:10:da:74:
                    70:30:e6:b2:44:64:aa:da:5d:08:87:31:2b:ee:73:
                    f8:bf:4e:c5:cd:23:91:ac:6e:fd:3b:a9:ef:62:df:
                    07:4c:31:6b:65:ac:98:52:1d:4d:8e:44:47:80:fa:
                    8f:ce:b5:37:84:6e:d5:cc:10:52:82:ba:fe:86:89:
                    16:b5:9b:06:92:cf:ff:04:e6:ef:76:ec:3d:eb:4b:
                    2c:91:bc:35:2a:09:2a:33:f9:4f:30:6b:e8:5f:12:
                    eb:62:1c:bc:a7:92:48:73:8c:0f:0f:b5:af:06:6f:
                    22:5c:6e:58:a6:73:3b:83:f5:c6:26:da:52:45:0b:
                    31:e2:b4:b6:da:79:51:81:83:a9:9e:2d:43:ff:f0:
                    7e:31:8d:b8:a1:b1:ca:4d:9c:95:78:15:27:07:26:
                    a8:65:3c:60:88:23:4d:2e:93:b7:c1:00:1e:0b:5a:
                    04:0d:69:42:be:50:df:c9:80:48:a2:40:b4:14:60:
                    20:97:97:41:fc:19:49:51:e9:69:c9:4c:9b:91:b7:
                    f0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:B9:06:3B:CF:7D:7B:0D:FB:8B:0B:C3:52:C2:61:92:D5:1C:45:A0
            X509v3 Authority Key Identifier:
                keyid:1B:73:4B:F3:B5:DA:86:30:D7:85:2F:BA:FA:DD:1B:82:D8:50:6B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a3431303a3a2f34342d3438203d3e20323136313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:410::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:42:2b:0e:70:13:8a:c9:94:69:18:34:fe:cb:ba:90:14:19:
         dd:6e:bd:11:fa:09:57:98:96:41:67:12:10:cc:ed:e6:8e:6f:
         4f:73:eb:1e:88:dd:b3:6a:64:48:90:f3:66:8b:1b:08:62:9a:
         a3:93:a1:22:29:c8:58:a1:23:d4:70:0e:0e:f9:a0:f2:8f:a1:
         9d:51:49:d4:ad:14:dc:03:14:5d:5c:ca:d1:b8:63:2a:a8:ff:
         58:7b:18:2b:6a:4d:88:01:1d:d8:b1:7e:ef:78:58:cf:1b:01:
         f5:59:6a:ca:ba:a3:78:43:16:18:4f:3b:9f:e3:0e:b1:70:b8:
         3e:bf:bb:cf:46:39:82:48:1c:06:b8:72:8a:99:13:f9:85:87:
         b0:a9:23:1f:52:42:c2:af:d6:e0:d2:eb:55:9f:2d:ae:16:2a:
         19:34:a4:56:36:11:42:e4:84:7c:06:24:78:58:3b:4b:19:38:
         2b:f7:a4:b9:56:aa:d6:4a:47:bd:43:9c:54:ff:37:21:b5:45:
         9e:5e:e2:21:5a:8a:d4:05:22:ba:83:d1:42:58:16:2a:e5:50:
         df:60:a6:4d:9e:9f:9a:73:c5:53:b9:a8:50:9c:81:5a:46:a9:
         4a:9c:58:af:30:80:f2:5b:58:85:d2:36:0a:5b:b8:93:c1:d3:
         10:b9:40:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 14:54:53 2025 by rpki-client