Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a3431623a3a2f34382d3438203d3e20323135393334.roa
File:                     323630323a666161383a3431623a3a2f34382d3438203d3e20323135393334.roa (raw, json)
Hash identifier:          s7wUp/Sn3hG/pYt3CW467SlrvL4aOV+MyhTWeLZoWPk=
Subject key identifier:   EA:BB:B1:CC:77:40:18:1A:B2:9E:74:3E:A6:ED:C8:CB:1C:5B:8F:88
Certificate issuer:       /CN=2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d
Certificate serial:       1A349B0D9758877B1D79FE18EBC2874945DBD261
Authority key identifier: 1B:73:4B:F3:B5:DA:86:30:D7:85:2F:BA:FA:DD:1B:82:D8:50:6B:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a3431623a3a2f34382d3438203d3e20323135393334.roa
Signing time:             Mon 25 Nov 2024 21:26:46 +0000
ROA not before:           Mon 25 Nov 2024 21:21:46 +0000
ROA not after:            Mon 24 Nov 2025 21:26:46 +0000
asID:                     215934
IP address blocks:        2602:faa8:41b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.crl
                          rsync://oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 18:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:34:9b:0d:97:58:87:7b:1d:79:fe:18:eb:c2:87:49:45:db:d2:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d
        Validity
            Not Before: Nov 25 21:21:46 2024 GMT
            Not After : Nov 24 21:26:46 2025 GMT
        Subject: CN=EABBB1CC7740181AB29E743EA6EDC8CB1C5B8F88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:68:c9:43:be:80:b7:94:94:76:c6:0d:15:eb:
                    9f:88:11:8b:31:bf:3b:bb:04:fa:83:08:51:4c:2a:
                    11:9e:23:e7:a3:09:26:73:be:99:fc:91:5c:64:03:
                    6b:d1:e0:66:13:eb:f7:06:d5:8d:96:f9:43:a6:e9:
                    5d:be:64:6e:a5:44:6d:77:34:76:4b:2b:09:4e:c8:
                    ce:ae:7b:85:1c:68:a5:b9:12:f7:e9:b2:20:fd:18:
                    60:3f:46:37:57:88:1d:43:93:3d:29:fd:8a:25:e4:
                    d9:20:b4:85:5e:b6:33:6b:2c:1f:8d:9a:ec:d3:66:
                    7e:22:f4:82:d0:65:a7:41:be:68:b4:6a:5c:fa:a1:
                    b6:59:f9:3a:ce:7a:75:a1:83:25:21:4e:c6:48:c4:
                    e9:d8:bf:3c:87:55:1b:f2:b3:ca:25:73:a8:51:38:
                    1c:23:ae:de:ce:54:49:6b:d2:9a:2b:48:bb:d2:bb:
                    3d:25:b1:27:6d:c4:70:b9:29:7c:4b:fa:a4:59:92:
                    d9:17:2e:25:4c:57:16:9f:48:91:86:0c:5c:33:0c:
                    3a:29:14:f1:95:cc:3c:96:d9:d7:a9:90:c6:c1:3d:
                    41:56:c8:11:09:37:da:8d:32:04:6b:08:32:90:d4:
                    f0:5f:42:e0:6a:8c:c8:03:f9:8e:7f:e0:1b:a6:5a:
                    63:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BB:B1:CC:77:40:18:1A:B2:9E:74:3E:A6:ED:C8:CB:1C:5B:8F:88
            X509v3 Authority Key Identifier:
                keyid:1B:73:4B:F3:B5:DA:86:30:D7:85:2F:BA:FA:DD:1B:82:D8:50:6B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a3431623a3a2f34382d3438203d3e20323135393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:41b::/48

    Signature Algorithm: sha256WithRSAEncryption
         ea:2c:32:c4:ff:dd:23:11:ea:4e:37:89:ad:fa:ef:5c:b3:58:
         cd:1b:21:7b:b5:12:a9:c2:24:dc:e6:05:51:05:aa:0c:30:98:
         0e:0e:d4:f6:3a:17:44:a2:42:9f:cc:7d:30:9f:d5:a7:ed:3c:
         0a:40:93:4c:d9:22:bf:da:1f:34:d9:61:4f:98:0a:d8:08:db:
         83:89:81:1f:d5:51:9c:ce:ce:58:0a:0b:44:96:3a:4a:7a:f0:
         21:de:04:45:00:6f:06:f6:40:87:54:fd:bb:da:ac:f4:2f:6f:
         90:57:4d:57:b9:c6:a7:0f:f2:3e:6b:c9:a2:1e:1e:e2:b8:33:
         25:7d:26:38:24:56:89:08:d8:fa:e7:28:4f:83:d5:82:04:60:
         ea:1c:9e:a9:76:77:b8:30:34:5d:53:6e:d7:34:d2:a7:e8:64:
         5f:7c:c9:dd:a4:f4:95:91:e6:66:8b:b5:a5:6e:8e:87:a9:ab:
         09:3a:e1:d5:83:13:6c:61:07:d8:e3:08:9f:3f:00:7b:4e:62:
         03:4e:0e:17:f4:c2:a5:9e:73:68:34:d9:d5:da:f4:37:9f:71:
         c7:1e:0e:70:9d:96:cc:47:f8:b7:2f:37:4c:d2:df:fe:30:fc:
         86:2d:56:d3:de:5b:ab:a3:98:2c:ee:38:10:29:b5:f2:b1:53:
         06:47:99:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 20:35:26 2025 by rpki-client