Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f34302d3438203d3e203632383533.roa
File:                     323630313a316430303a3a2f34302d3438203d3e203632383533.roa (raw, json)
Hash identifier:          PRIN0rBnTzAR3OigZLvhHeW+RLM3x0hbrjo5iKi+yGw=
Subject key identifier:   24:7C:67:06:03:8C:C9:DE:78:4C:68:D2:67:FC:FF:3C:33:4A:EF:C6
Certificate issuer:       /CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
Certificate serial:       223F42A3092DD5C85F551FDDAA80786BDA97618F
Authority key identifier: 87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f34302d3438203d3e203632383533.roa
Signing time:             Tue 22 Oct 2024 22:39:08 +0000
ROA not before:           Tue 22 Oct 2024 22:34:08 +0000
ROA not after:            Tue 21 Oct 2025 22:39:08 +0000
asID:                     62853
IP address blocks:        2601:1d00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 01:38:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3f:42:a3:09:2d:d5:c8:5f:55:1f:dd:aa:80:78:6b:da:97:61:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
        Validity
            Not Before: Oct 22 22:34:08 2024 GMT
            Not After : Oct 21 22:39:08 2025 GMT
        Subject: CN=247C6706038CC9DE784C68D267FCFF3C334AEFC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:17:43:8f:fb:3f:d5:60:67:a6:50:ea:b4:1d:
                    8b:65:ae:6a:07:07:ae:e9:3a:2c:c2:35:92:5e:82:
                    cb:27:4c:1f:d0:ca:0c:8b:35:8b:34:1b:60:2b:4c:
                    64:75:aa:89:85:d3:73:ca:f3:26:ab:8c:c2:5e:21:
                    8e:92:6a:8a:1b:d4:39:e9:59:8c:48:28:7b:ba:2b:
                    0d:a0:62:a9:89:f1:b0:4a:cc:9b:44:17:77:2a:70:
                    e0:90:ca:94:59:2e:21:2c:ce:1e:62:d3:96:f6:1c:
                    54:1f:06:98:a8:ef:d2:82:9c:6b:51:e4:a5:74:72:
                    79:b8:65:ac:1b:be:09:02:bd:73:04:00:4a:e3:06:
                    05:45:fc:52:66:c8:ba:c5:32:65:ee:5d:df:06:ce:
                    3a:f2:a5:10:39:19:a7:e2:57:83:c1:df:65:bd:16:
                    90:4e:cc:e9:6c:17:58:b1:36:4c:17:4d:36:13:b0:
                    f1:e3:2d:a4:63:de:ef:ea:f7:c3:23:88:38:9e:9f:
                    77:25:ea:81:71:22:a5:cc:7a:90:aa:f5:b3:2f:e6:
                    b3:98:12:9f:ee:ce:27:4c:d4:f1:25:23:9d:0e:78:
                    b7:32:57:e5:28:2c:48:81:84:67:16:c9:8a:74:08:
                    8e:1a:e5:8f:4c:f2:19:dc:fa:fe:33:78:5f:ee:9c:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:7C:67:06:03:8C:C9:DE:78:4C:68:D2:67:FC:FF:3C:33:4A:EF:C6
            X509v3 Authority Key Identifier:
                keyid:87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f34302d3438203d3e203632383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         97:e1:2f:6f:fa:de:4f:7f:ed:4c:80:98:3b:c2:31:08:ba:5d:
         5d:62:bc:86:2c:f4:9f:f9:0b:7b:bb:d4:11:e7:76:56:6a:0f:
         72:fd:77:17:17:16:97:0e:60:ce:fe:bc:0a:c5:2c:05:eb:8f:
         ae:4a:df:e6:e6:c2:2f:74:d2:7e:25:02:43:3c:9d:2e:35:06:
         5e:0f:c8:3a:38:fd:19:07:71:68:8c:39:e8:77:88:49:74:6b:
         37:2d:04:db:14:cb:4d:2e:ff:0c:3b:17:3b:04:21:33:27:28:
         43:0a:ee:b4:92:3a:39:04:4a:d2:21:3a:67:ff:9b:fc:e9:0c:
         5b:4c:6a:37:42:cc:69:3a:c8:f5:34:16:45:21:31:ab:ec:2a:
         f4:d6:6e:dc:3e:9f:80:eb:51:9d:33:e2:1b:93:b3:cc:94:4f:
         bb:b4:d9:fd:30:9d:6d:ff:01:ae:08:2d:97:0d:1c:f1:34:48:
         c2:39:08:06:b4:74:39:15:c6:76:fb:2e:8e:d7:37:1c:5b:d4:
         80:62:66:2c:44:48:6e:c0:2c:a4:26:1d:78:a5:0e:c2:29:23:
         2b:30:37:2e:41:ef:be:83:0e:12:2e:e1:e8:f4:1f:fa:39:99:
         15:a8:a0:87:08:84:2b:ef:5d:e4:7e:c2:0e:31:4d:31:fa:a9:
         9e:53:67:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 23:38:09 2024 by rpki-client on console-fra.rpki-client.org