Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a38623a3a2f34382d3438203d3e203534323836.roa
File:                     323630323a666161383a38623a3a2f34382d3438203d3e203534323836.roa (raw, json)
Hash identifier:          vT3wIP0GRB5pfHd8YqZBQjRWPv5yln4UkNUlFBPSTVA=
Subject key identifier:   0E:58:EC:66:3B:D2:06:25:BD:45:7A:F4:CC:C4:BE:27:AF:58:BE:7D
Certificate issuer:       /CN=2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d
Certificate serial:       503AD27F217A1FF2BDD490C3CCBBF5DB66670B88
Authority key identifier: 1B:73:4B:F3:B5:DA:86:30:D7:85:2F:BA:FA:DD:1B:82:D8:50:6B:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a38623a3a2f34382d3438203d3e203534323836.roa
Signing time:             Mon 25 Nov 2024 21:26:47 +0000
ROA not before:           Mon 25 Nov 2024 21:21:47 +0000
ROA not after:            Mon 24 Nov 2025 21:26:47 +0000
asID:                     54286
IP address blocks:        2602:faa8:8b::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.crl
                          rsync://oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 18:18:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3a:d2:7f:21:7a:1f:f2:bd:d4:90:c3:cc:bb:f5:db:66:67:0b:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d
        Validity
            Not Before: Nov 25 21:21:47 2024 GMT
            Not After : Nov 24 21:26:47 2025 GMT
        Subject: CN=0E58EC663BD20625BD457AF4CCC4BE27AF58BE7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:88:7a:29:27:7b:27:1e:c8:1f:8e:44:3a:d8:
                    45:94:1b:01:34:c4:77:a5:45:c2:e8:d7:2e:d4:bc:
                    cf:9c:ee:21:2e:af:6b:db:20:1b:7a:95:20:b2:ae:
                    c3:40:89:46:20:97:fb:04:4b:4f:c3:6e:7a:b7:b1:
                    8e:cc:ab:a5:2a:f2:c5:73:ed:57:62:f0:09:13:39:
                    17:e9:56:b9:0c:50:74:0e:d2:18:49:27:9e:eb:fe:
                    66:a0:53:af:45:f9:7e:c0:70:ca:8b:b7:09:73:5f:
                    25:c1:9d:df:5b:27:e5:9c:86:96:63:ae:4f:6f:bf:
                    2c:17:e9:95:ad:64:9c:16:6d:41:c3:8f:b4:63:dc:
                    a5:a0:8e:a7:95:91:23:e7:59:97:05:7f:02:65:d2:
                    87:52:eb:2c:4d:a5:ed:9b:6f:a0:24:97:89:ae:5f:
                    1c:89:82:30:cc:fe:39:96:81:e4:7e:5b:00:cb:97:
                    14:4d:66:66:37:55:7a:3b:9c:be:7d:c7:f9:be:6b:
                    66:e2:1a:05:b3:7f:12:20:e4:8e:10:f9:b3:13:93:
                    9f:99:a8:43:a0:9f:80:54:41:ca:d2:e7:7b:97:e6:
                    53:0e:12:af:9a:39:57:0d:27:39:43:c1:e4:22:cf:
                    3f:e3:fa:f6:b0:fd:31:4f:9a:dd:10:53:18:d9:47:
                    e5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:58:EC:66:3B:D2:06:25:BD:45:7A:F4:CC:C4:BE:27:AF:58:BE:7D
            X509v3 Authority Key Identifier:
                keyid:1B:73:4B:F3:B5:DA:86:30:D7:85:2F:BA:FA:DD:1B:82:D8:50:6B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/202400/0/1B734BF3B5DA8630D7852FBAFADD1B82D8506BC8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/70f5d80c-9daa-4f6f-8f58-181c5f0c4b0a/2a5af74dbbb33a42d3628cf45fd4a146eb9e73a2af91e7e37d.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/202400/0/323630323a666161383a38623a3a2f34382d3438203d3e203534323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:faa8:8b::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:0b:aa:82:bc:68:6c:21:2a:ea:0c:c5:af:f5:3f:95:eb:12:
         2d:b3:a8:2e:36:dc:b1:65:92:0e:31:03:04:0a:32:fd:ac:d9:
         a1:97:03:ca:61:b2:65:0d:61:ff:bd:6b:6d:c5:9a:ca:cb:86:
         93:6f:cc:9b:fc:85:15:46:31:03:cf:df:97:37:57:49:52:5c:
         c4:11:28:fe:c9:4b:9d:28:a1:da:15:5a:86:fd:7a:dd:91:d0:
         f8:29:56:2f:b9:b7:1e:f5:87:4a:d2:30:ea:4d:89:88:86:b9:
         28:9a:25:3f:59:e5:b4:4c:7a:d8:06:85:50:0f:7b:d6:ce:7c:
         18:84:a8:99:28:3d:74:74:82:1a:0c:8e:8d:e4:b4:bd:55:0f:
         7a:a5:2a:2f:e8:cf:04:d3:fe:f1:cb:48:63:22:30:2b:e3:63:
         9e:22:90:ac:0c:1f:64:4f:2a:cc:37:8c:bd:f1:71:46:c2:50:
         df:28:64:85:ba:45:cf:c6:ae:3e:c7:79:b7:29:7d:1c:d5:1b:
         69:92:37:4b:1b:39:a8:da:12:2d:6c:20:04:b0:ab:dd:57:7f:
         4b:95:b3:0f:20:ca:03:4e:8b:f4:69:c4:f4:cf:90:ef:5a:af:
         0a:39:b9:a1:cf:dc:6f:32:42:cc:b5:fb:db:97:ef:05:7a:7e:
         f6:40:af:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 20:31:25 2025 by rpki-client