Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a343030303a3a2f34342d3438203d3e20313339383838.roa
File:                     323630313a316430383a343030303a3a2f34342d3438203d3e20313339383838.roa (raw, json)
Hash identifier:          blZcs0P5y2s1vtRgS+t31bSiOxy3/f5IdMo0rrGyx68=
Subject key identifier:   94:08:DF:C9:D8:5F:F4:57:4A:35:BB:DB:7C:23:95:21:B3:96:AC:06
Certificate issuer:       /CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
Certificate serial:       1AE36538278970EAF5F8305C8420C6C16BBE554A
Authority key identifier: 87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a343030303a3a2f34342d3438203d3e20313339383838.roa
Signing time:             Sat 30 Nov 2024 06:49:40 +0000
ROA not before:           Sat 30 Nov 2024 06:44:40 +0000
ROA not after:            Sat 29 Nov 2025 06:49:40 +0000
asID:                     139888
IP address blocks:        2601:1d08:4000::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Jan 2025 19:03:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e3:65:38:27:89:70:ea:f5:f8:30:5c:84:20:c6:c1:6b:be:55:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
        Validity
            Not Before: Nov 30 06:44:40 2024 GMT
            Not After : Nov 29 06:49:40 2025 GMT
        Subject: CN=9408DFC9D85FF4574A35BBDB7C239521B396AC06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:82:8f:47:51:bc:f5:7f:0c:9a:38:34:29:ff:
                    c0:48:8b:93:53:f7:84:fd:6e:94:9d:f6:44:4d:c8:
                    af:da:ea:7c:4c:31:c9:75:2a:48:71:ee:70:14:6f:
                    cf:9f:04:2e:67:24:26:ce:95:61:cc:23:71:4b:8a:
                    ef:2b:92:de:62:d2:d7:a4:16:b9:96:fc:0a:a9:68:
                    35:ad:72:81:ed:99:90:71:00:08:6b:c9:e0:19:6d:
                    6c:a0:28:cf:13:f6:58:35:c5:e7:b2:81:bd:d4:7a:
                    f8:34:56:33:b8:9e:78:65:ab:89:3b:cc:d7:a7:d6:
                    9a:ce:b6:6e:df:2a:48:0f:dd:b1:10:82:f4:0c:fb:
                    a9:f6:af:5c:61:7f:f0:82:48:1f:d9:a8:2a:a8:0d:
                    63:26:5a:53:e9:5b:45:80:3b:20:41:6b:6d:0a:82:
                    dc:50:a6:41:ad:ea:c2:60:61:ec:3d:11:d2:b7:51:
                    17:87:f5:b0:6e:9c:54:c4:b5:c3:18:ea:34:cc:11:
                    03:9c:eb:3c:b0:fd:86:66:0b:86:dc:ca:7b:84:9d:
                    d0:d3:4c:19:12:58:b1:27:86:0d:9c:41:cc:96:f7:
                    b9:a8:5e:ed:a6:fe:e1:af:37:83:42:a9:06:23:65:
                    59:a6:9d:71:f5:46:90:30:21:b9:f3:c0:90:58:38:
                    88:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:08:DF:C9:D8:5F:F4:57:4A:35:BB:DB:7C:23:95:21:B3:96:AC:06
            X509v3 Authority Key Identifier:
                keyid:87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a343030303a3a2f34342d3438203d3e20313339383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08:4000::/44

    Signature Algorithm: sha256WithRSAEncryption
         43:85:33:9b:8c:6a:bb:0a:e5:f6:7e:51:c3:e0:4c:ca:d1:ab:
         ea:e2:15:49:d4:09:fc:2f:fd:db:b5:ba:39:b9:4b:43:1d:a3:
         1d:2e:bd:83:47:27:49:c9:63:0b:10:a8:c6:b5:26:48:50:33:
         04:f3:d6:a4:cf:28:3d:d5:d5:78:c9:b6:6d:96:63:b2:40:34:
         7a:e7:05:8c:72:2e:7a:b6:f1:5a:14:87:3c:4b:58:d9:44:6b:
         10:93:b6:bc:08:56:07:53:bc:1f:23:f8:29:de:4e:d2:25:40:
         10:1f:e9:2f:6a:06:9b:38:91:fe:e2:eb:32:c7:ae:ec:73:fc:
         9e:2f:35:aa:52:39:20:56:d7:a6:d0:5f:a9:da:9f:ce:23:03:
         82:95:da:9f:1f:75:bf:83:2e:90:6a:4d:a0:0e:44:cf:3c:a7:
         b3:4f:a5:05:e4:28:db:3d:8f:9d:52:72:e8:c3:c9:58:43:b4:
         98:5a:a1:c5:98:3e:88:c0:84:61:9b:38:86:45:50:ed:a3:a5:
         02:58:7f:2e:a7:b5:72:a9:da:27:98:34:f9:b1:2e:5f:bc:d9:
         d8:ad:02:5f:da:21:f5:8c:72:1e:a3:b2:f9:db:bb:5a:1c:97:
         4f:d4:5e:3f:02:df:06:07:06:69:28:50:66:61:2e:db:6a:a7:
         7f:42:5b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 16 17:41:32 2025 by rpki-client on console-ams.rpki-client.org