Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a383030303a3a2f34302d3438203d3e20323133363034.roa
File:                     323630313a316430383a383030303a3a2f34302d3438203d3e20323133363034.roa (raw, json)
Hash identifier:          ApEgEjvPUo0EoQcHXPUCL+tXSSr8DiL0dgagbY4u3e4=
Subject key identifier:   2A:09:43:52:11:1A:73:9A:A7:85:CD:EE:D8:BC:B2:44:14:C9:FF:8C
Certificate issuer:       /CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
Certificate serial:       623FF773C0B3A126E62123E41870DD3743E52BB6
Authority key identifier: 87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a383030303a3a2f34302d3438203d3e20323133363034.roa
Signing time:             Fri 10 Jan 2025 13:32:33 +0000
ROA not before:           Fri 10 Jan 2025 13:27:33 +0000
ROA not after:            Fri 09 Jan 2026 13:32:33 +0000
asID:                     213604
IP address blocks:        2601:1d08:8000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 17:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3f:f7:73:c0:b3:a1:26:e6:21:23:e4:18:70:dd:37:43:e5:2b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
        Validity
            Not Before: Jan 10 13:27:33 2025 GMT
            Not After : Jan  9 13:32:33 2026 GMT
        Subject: CN=2A094352111A739AA785CDEED8BCB24414C9FF8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b4:1f:1b:3b:fb:3d:92:87:fd:69:b5:6d:a7:
                    ad:19:f2:31:29:c4:61:d8:03:d9:b6:cc:4b:b1:d7:
                    13:7f:94:d2:68:56:f5:e9:f1:13:51:fb:c4:cd:35:
                    33:1d:62:8b:93:05:14:e2:24:0b:79:c7:6b:c6:6a:
                    e5:d5:db:52:58:49:ed:eb:5f:f9:3c:0d:d3:81:60:
                    6b:cb:1b:40:8d:72:9e:5c:10:06:98:23:5c:dd:91:
                    36:6e:11:5d:bc:ee:ab:80:56:38:c8:f2:3e:45:46:
                    51:20:04:10:64:4e:be:99:50:83:6c:0b:f0:43:7c:
                    5e:86:07:e5:f0:54:7f:b0:04:69:b7:6b:64:d1:eb:
                    c8:dd:b6:c6:17:0e:87:1f:69:bd:cb:03:39:17:16:
                    20:89:3b:e4:a9:7a:8f:8c:d3:76:36:ac:c6:bc:81:
                    88:46:73:d6:e6:37:62:f6:63:34:09:39:66:22:a2:
                    ff:07:26:3d:08:2e:ee:3e:51:16:02:9c:e9:f5:39:
                    1d:79:de:15:ae:12:97:a5:ae:ca:a9:de:c4:d0:d2:
                    c7:c0:80:54:76:a4:8f:ba:e6:2e:98:70:6c:58:5f:
                    56:fb:f4:24:0f:93:b1:12:7c:36:14:f4:ad:e8:0a:
                    bb:61:57:94:dc:6a:a1:2c:89:07:05:f6:87:56:84:
                    8d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:09:43:52:11:1A:73:9A:A7:85:CD:EE:D8:BC:B2:44:14:C9:FF:8C
            X509v3 Authority Key Identifier:
                keyid:87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a383030303a3a2f34302d3438203d3e20323133363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         15:fe:3c:8e:20:bb:aa:e9:4d:e8:65:18:0b:5d:a9:ba:ad:f9:
         bf:8f:b1:c0:af:58:53:3e:93:0b:a0:63:75:3b:c9:b8:50:43:
         4b:ab:42:5e:45:19:a0:ef:f3:dc:61:0d:0d:28:12:fe:1e:8e:
         a2:5e:0f:bb:e5:71:81:f9:ca:a2:1e:50:55:63:61:c3:0f:8d:
         2d:d6:5a:d5:ec:ce:62:23:04:ed:2f:35:44:6d:45:eb:6f:a6:
         2a:98:37:fd:93:2f:a3:4f:6d:61:17:85:3c:b8:1f:18:17:48:
         32:20:0f:05:7d:15:9e:8d:80:f5:93:6f:ff:93:e0:c2:99:9b:
         04:7d:e6:3a:2f:ba:6a:fc:26:b5:05:25:37:b3:59:d1:4a:eb:
         76:fb:f4:f3:0e:52:1e:86:ba:32:81:41:3b:3b:b0:f9:ec:c4:
         96:0a:b7:af:2b:fc:48:16:06:e9:95:30:44:3c:21:72:29:ae:
         f0:5d:95:16:3e:a4:73:57:98:f2:92:9f:f6:43:94:c1:15:fc:
         09:c4:c2:73:2a:10:39:28:ec:3a:83:d2:db:1e:65:57:a6:ee:
         c7:c3:9c:a2:9e:c1:01:b2:5c:01:11:84:0a:df:14:f7:84:36:
         74:61:5b:eb:a8:3f:57:c7:aa:fc:5c:f2:3b:7d:40:9d:30:f0:
         95:38:ff:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:57:28 2025 by rpki-client