Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f32382d3438203d3e20343031313131.roa
File:                     323630313a316430303a3a2f32382d3438203d3e20343031313131.roa (raw, json)
Hash identifier:          sHDgCODU7hGRz8+LbFS+LL2jfJJ8M2oY89r/3JoN0Vc=
Subject key identifier:   C2:7E:29:F7:03:46:BC:0D:C4:12:AE:9F:4C:D1:08:4D:BD:A7:85:C1
Certificate issuer:       /CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
Certificate serial:       5BF12C4C587ABE0F3DACC411D07740E3097F7FA0
Authority key identifier: 87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f32382d3438203d3e20343031313131.roa
Signing time:             Thu 19 Sep 2024 10:06:49 +0000
ROA not before:           Thu 19 Sep 2024 10:01:49 +0000
ROA not after:            Thu 18 Sep 2025 10:06:49 +0000
asID:                     401111
IP address blocks:        2601:1d00::/28 maxlen: 48

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Oct 2024 04:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:f1:2c:4c:58:7a:be:0f:3d:ac:c4:11:d0:77:40:e3:09:7f:7f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
        Validity
            Not Before: Sep 19 10:01:49 2024 GMT
            Not After : Sep 18 10:06:49 2025 GMT
        Subject: CN=C27E29F70346BC0DC412AE9F4CD1084DBDA785C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a6:e3:49:93:e8:22:86:ce:b6:95:84:48:ac:
                    5a:46:cf:c1:f1:03:bf:b5:71:1d:db:f3:b3:e3:75:
                    0b:e0:0c:dc:a3:65:60:98:ce:9b:6b:bd:0a:0d:c8:
                    a4:14:2b:59:d3:5f:7f:64:1d:1a:d4:4c:65:34:77:
                    51:4c:da:99:55:a1:48:bd:eb:a3:67:a1:b4:91:26:
                    e6:b8:f3:a5:43:df:53:18:64:ce:b2:74:92:a5:26:
                    f8:85:9e:b7:57:8a:ae:41:b9:db:d2:1b:46:cc:ef:
                    77:f6:43:ab:ae:07:0a:7e:50:fa:f4:89:b3:8c:ee:
                    ba:00:e9:5e:27:0a:e4:5e:79:c7:eb:55:b0:70:35:
                    7b:68:46:b1:eb:3d:ed:26:d5:32:d0:03:94:e4:e8:
                    61:2a:f1:59:6b:05:06:c1:74:aa:0f:32:d9:6a:cc:
                    88:5e:20:54:ec:92:b1:17:ba:6f:94:8d:96:f4:9b:
                    e1:e5:6b:ca:22:b4:a2:e5:38:a5:18:fc:8c:38:8c:
                    f8:6c:32:b8:9a:04:01:42:1a:e5:71:41:a2:dd:97:
                    d0:9e:e0:cb:b7:b4:1e:80:b8:00:90:34:0e:61:10:
                    ac:cb:4e:9b:ac:de:84:b6:6f:10:3f:31:68:3e:75:
                    a5:81:16:8d:63:aa:bd:b0:38:0c:95:f5:01:e7:79:
                    ed:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7E:29:F7:03:46:BC:0D:C4:12:AE:9F:4C:D1:08:4D:BD:A7:85:C1
            X509v3 Authority Key Identifier:
                keyid:87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f32382d3438203d3e20343031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d00::/28

    Signature Algorithm: sha256WithRSAEncryption
         4c:8d:42:53:1d:d1:bd:ef:ed:73:9c:89:ef:52:27:bb:1b:ea:
         b7:23:05:32:d1:0f:27:15:ba:aa:87:03:f5:d0:55:49:7c:e2:
         d4:34:a5:32:bf:93:bd:24:f9:e7:61:54:0b:8d:87:35:29:e6:
         11:93:da:8f:08:e8:a1:21:1b:34:8e:88:bb:62:f4:bb:c6:21:
         38:5a:f7:0f:74:64:51:11:57:99:6b:81:e3:16:13:6e:43:17:
         be:bc:da:98:fe:4f:f4:f4:7a:17:85:f8:3a:09:ee:51:62:3f:
         f1:d9:cd:4d:20:53:10:59:dd:b7:7d:51:7e:ff:e4:61:20:24:
         21:f4:e8:ca:f3:81:ec:49:e9:24:4a:2b:2e:00:97:ce:df:fb:
         00:13:a2:b3:f8:8f:9f:ab:e6:58:3a:92:b2:50:5b:1a:82:9f:
         ac:95:7d:5f:a0:8b:15:c0:8d:40:f1:f2:cb:50:9f:49:de:e8:
         d2:79:7a:15:c0:8b:a0:d0:1b:e7:8a:0c:69:ee:9a:51:e9:85:
         11:d1:a0:78:f8:61:07:74:60:35:a5:a8:1c:1b:d3:79:e5:75:
         ff:40:20:4f:f5:62:c8:39:d3:b7:57:85:2c:8e:c6:62:86:32:
         f4:35:2d:7c:84:98:49:23:fc:db:de:a0:b5:d4:2c:37:57:c0:
         45:84:2c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 02:17:06 2024 by rpki-client on console-fra.rpki-client.org