Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f32392d3438203d3e20343031313131.roa
File:                     323630313a316430303a3a2f32392d3438203d3e20343031313131.roa (raw, json)
Hash identifier:          aFGVjRj1mkLmQrUrwNphskFn6i8LIUMG+IauGMPh/os=
Subject key identifier:   DE:69:0F:81:12:FB:77:B9:58:D0:55:E9:61:B0:0B:7B:4D:6E:98:77
Certificate issuer:       /CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
Certificate serial:       097047023D59EF8852106D23CBA4ABED238794DF
Authority key identifier: 87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f32392d3438203d3e20343031313131.roa
Signing time:             Thu 26 Dec 2024 21:04:35 +0000
ROA not before:           Thu 26 Dec 2024 20:59:35 +0000
ROA not after:            Thu 25 Dec 2025 21:04:35 +0000
asID:                     401111
IP address blocks:        2601:1d00::/29 maxlen: 48
Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 17:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:70:47:02:3d:59:ef:88:52:10:6d:23:cb:a4:ab:ed:23:87:94:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
        Validity
            Not Before: Dec 26 20:59:35 2024 GMT
            Not After : Dec 25 21:04:35 2025 GMT
        Subject: CN=DE690F8112FB77B958D055E961B00B7B4D6E9877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:17:0b:d9:76:de:64:f6:50:72:da:92:a2:99:
                    9b:0e:98:5e:b5:88:53:57:6b:6c:93:4a:65:22:77:
                    3d:4a:36:8c:14:d9:76:a7:ce:ee:a6:d8:84:dc:78:
                    50:1b:56:6e:33:18:ad:dc:69:77:c2:2b:f9:f0:6b:
                    a4:e2:e9:24:6c:6d:92:b2:63:c0:ac:b2:8f:a0:81:
                    c0:fc:71:ab:4d:f9:61:33:6d:46:7b:98:b3:94:11:
                    63:af:f5:91:ca:e7:c9:ca:85:2f:0c:eb:43:8f:43:
                    29:6a:79:1f:cb:49:22:b4:5b:79:0b:1f:72:9c:a9:
                    86:99:30:82:7b:dd:49:6e:6c:81:83:f9:1d:e9:59:
                    b4:e1:25:60:c0:1c:03:b4:bb:f0:1c:ab:6f:f5:e8:
                    a4:52:b5:e8:07:98:7e:0b:4f:1e:e9:8b:cb:6b:18:
                    0e:96:01:09:af:53:c7:2b:cd:c7:53:81:d9:c4:c3:
                    b0:8f:dd:c3:47:d2:6f:7a:54:3c:b9:0c:b9:26:15:
                    48:28:04:bc:bd:ce:ce:ea:85:90:84:af:2c:65:1f:
                    56:c7:a2:79:1b:cf:4f:eb:b7:6e:5f:5f:b7:e0:21:
                    6b:66:a1:67:ae:0b:bf:5e:1e:c8:58:4c:d7:4c:c4:
                    95:cb:3d:4f:c4:f6:53:32:44:a8:77:c9:4a:a1:be:
                    61:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:69:0F:81:12:FB:77:B9:58:D0:55:E9:61:B0:0B:7B:4D:6E:98:77
            X509v3 Authority Key Identifier:
                keyid:87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f32392d3438203d3e20343031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d00::/29

    Signature Algorithm: sha256WithRSAEncryption
         8e:15:b9:c7:20:06:a9:a8:48:e4:a0:f0:6b:60:00:f1:55:bf:
         64:88:29:2f:a3:de:6e:7c:38:4b:38:b5:f9:3c:85:8f:49:3f:
         72:e8:69:0c:0d:6d:b2:27:e8:cd:a3:cd:0c:6f:cf:b5:c8:84:
         96:ec:9c:11:6b:9a:46:28:98:33:d6:86:4c:b6:67:0f:bd:04:
         01:1c:12:59:67:01:25:8e:0d:ed:d2:55:e0:1b:5c:21:6d:c4:
         da:48:22:3e:58:9d:83:10:a2:e0:69:ab:9d:c0:d1:c1:2e:56:
         27:ac:ce:ee:c6:29:ad:04:cc:09:b4:fb:b6:92:14:6f:7f:6c:
         c0:84:bd:67:8d:a4:90:b2:a5:07:ad:19:ff:fb:61:91:af:f2:
         e4:e7:f0:56:a1:22:3d:52:bf:a9:11:27:fa:ca:fc:b4:b0:3a:
         83:9d:6f:ea:47:bb:a6:6c:ef:b0:a4:8a:5d:09:22:2f:10:4f:
         f5:19:ae:6b:0f:5a:bf:3d:ea:4a:2b:ba:d3:08:44:4d:46:50:
         c1:ac:d2:6a:da:21:08:f3:d8:b9:74:dd:32:6b:6a:d9:a6:3e:
         6b:69:70:ef:b0:4b:f4:a8:22:84:73:f9:08:05:66:86:bb:b8:
         44:4b:d1:b2:d8:27:32:a6:81:8e:54:d4:c6:73:4c:44:8d:42:
         b6:c7:9b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:44:57 2025 by rpki-client