Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430343a3a2f33372d3438203d3e203632343839.roa
File:                     323630313a316430343a3a2f33372d3438203d3e203632343839.roa (raw, json)
Hash identifier:          e01FhBK9z01zsK69wC2MfJJP8AicJUvBBD/ij8Hg8m0=
Subject key identifier:   B3:93:A7:F4:FE:65:56:68:DE:13:26:37:76:54:A1:45:BF:25:97:71
Certificate issuer:       /CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
Certificate serial:       66C2401321D5E18932CFD7252B62271E6327EE49
Authority key identifier: 87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430343a3a2f33372d3438203d3e203632343839.roa
Signing time:             Tue 22 Oct 2024 22:39:26 +0000
ROA not before:           Tue 22 Oct 2024 22:34:26 +0000
ROA not after:            Tue 21 Oct 2025 22:39:26 +0000
asID:                     62489
IP address blocks:        2601:1d04::/37 maxlen: 48

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c2:40:13:21:d5:e1:89:32:cf:d7:25:2b:62:27:1e:63:27:ee:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
        Validity
            Not Before: Oct 22 22:34:26 2024 GMT
            Not After : Oct 21 22:39:26 2025 GMT
        Subject: CN=B393A7F4FE655668DE1326377654A145BF259771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:1a:90:11:67:3b:d7:fc:b9:03:d1:84:59:
                    00:16:3f:db:83:71:0b:02:f7:a1:55:69:e1:d2:3d:
                    2c:84:76:d9:84:7d:10:12:6c:53:6d:19:07:6e:37:
                    1f:6b:32:ae:3c:18:e0:54:ec:c9:d0:1f:10:ff:67:
                    8e:be:85:7d:fb:ee:12:6f:7b:cb:a0:c2:26:1b:19:
                    24:92:0d:36:22:c3:62:f4:e9:37:56:25:1a:2a:f2:
                    f0:bb:f7:09:06:ea:1b:98:80:1c:fc:70:30:50:15:
                    2b:37:8f:a6:c8:db:71:66:90:5f:62:c3:f4:dd:06:
                    af:77:5a:40:31:c8:5a:aa:c1:b1:86:b4:2d:b0:a8:
                    7f:a0:af:c5:1d:cf:33:fe:7a:86:2e:84:31:d2:e6:
                    e3:48:86:0b:51:f2:c6:fa:1a:e0:2e:09:83:50:73:
                    a6:e9:6c:e2:4e:ba:cc:e1:93:72:b5:af:04:8b:76:
                    ae:47:3b:8e:3e:86:8d:ae:8b:29:69:bd:97:10:74:
                    aa:d3:0d:6a:49:cb:34:97:b5:d3:8a:44:44:32:45:
                    6c:12:29:c9:c6:45:33:19:95:26:72:e8:1c:51:95:
                    28:a3:d1:8d:a6:45:fe:1d:72:ce:6c:73:5a:dc:22:
                    43:13:a3:d8:1b:6d:6d:c5:dd:cd:e7:b2:c0:58:ef:
                    c4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:93:A7:F4:FE:65:56:68:DE:13:26:37:76:54:A1:45:BF:25:97:71
            X509v3 Authority Key Identifier:
                keyid:87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430343a3a2f33372d3438203d3e203632343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d04::/37

    Signature Algorithm: sha256WithRSAEncryption
         90:b8:ba:8e:2a:3b:02:5f:d8:f2:ed:22:bb:3b:c9:9e:7f:7e:
         62:a2:4a:7f:8e:13:92:01:c5:ae:e8:e8:de:47:4d:15:52:5c:
         cb:91:e8:5d:1a:39:77:ea:a0:ba:cf:16:04:bc:99:5a:57:d5:
         35:a8:29:26:b3:05:f8:71:0b:4d:9f:3e:45:55:4b:73:f3:85:
         97:d8:1a:c1:01:9e:85:30:21:e3:7d:41:32:3b:46:e2:e2:a3:
         58:49:d6:9c:2d:f0:e5:42:17:21:ac:f6:11:10:08:4b:2e:23:
         0b:1a:ec:40:5e:87:28:42:ac:19:80:6f:e4:04:a1:cc:58:44:
         72:a1:22:a0:dc:62:d3:e6:b4:b5:60:bb:66:3d:95:1c:66:e0:
         9a:fe:4c:77:9e:c7:43:62:22:65:7f:cb:95:ee:8d:79:c3:47:
         b2:cd:68:31:d2:af:bb:be:e3:82:0e:32:43:ce:b4:63:34:93:
         16:db:1f:55:64:96:c2:bf:08:fe:64:32:3a:86:ac:f5:d9:d6:
         bc:9b:39:47:82:5b:4f:36:2e:3d:48:53:94:10:72:e4:11:af:
         01:67:49:14:b0:b0:96:89:09:12:4a:58:a7:87:5a:48:41:d5:
         6d:30:29:1e:72:1f:8e:f7:17:0a:74:13:5a:70:e3:df:d8:94:
         26:65:3c:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:23 2024 by rpki-client on console-ams.rpki-client.org