Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a3a2f34382d3438203d3e203439383637.roa
File:                     323630313a316430383a3a2f34382d3438203d3e203439383637.roa (raw, json)
Hash identifier:          xhf3aOsBFzY8E+Smjc4ftCTyzVSLj+2TiH+VaIInrM4=
Subject key identifier:   51:B6:DC:FC:18:7C:55:31:18:16:C1:80:83:6C:33:FD:A6:11:46:7A
Certificate issuer:       /CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
Certificate serial:       7D45073265AD103EF123C63AD1645AD10D30A07A
Authority key identifier: 87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a3a2f34382d3438203d3e203439383637.roa
Signing time:             Thu 26 Dec 2024 15:04:40 +0000
ROA not before:           Thu 26 Dec 2024 14:59:40 +0000
ROA not after:            Thu 25 Dec 2025 15:04:40 +0000
asID:                     49867
IP address blocks:        2601:1d08::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 17:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:45:07:32:65:ad:10:3e:f1:23:c6:3a:d1:64:5a:d1:0d:30:a0:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
        Validity
            Not Before: Dec 26 14:59:40 2024 GMT
            Not After : Dec 25 15:04:40 2025 GMT
        Subject: CN=51B6DCFC187C55311816C180836C33FDA611467A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e2:7f:b8:17:b5:ce:f7:a0:c9:e1:9a:cc:e4:
                    1a:eb:b4:47:87:63:1e:2b:ea:ff:e5:19:a6:21:e2:
                    64:bd:28:c3:dc:d2:ca:7a:41:2c:e2:d3:70:4c:5b:
                    d4:d1:72:4f:dc:89:f0:cc:67:55:aa:06:3d:8c:91:
                    04:20:2b:24:c7:c3:a8:38:ba:fd:e9:46:a1:52:e1:
                    31:c8:1a:dc:35:3b:ac:6a:fd:db:3b:e9:bf:7c:79:
                    d0:b2:ae:93:6c:31:01:44:e3:78:d0:49:64:f2:cb:
                    b2:f5:71:0e:f0:60:8b:bb:2e:bd:d8:1b:ef:57:ac:
                    92:fc:5d:b5:70:ae:31:12:89:6a:a7:aa:ed:c9:7c:
                    b6:d8:5c:5b:b5:db:5e:fb:7a:1d:ad:58:d4:90:e2:
                    2a:41:e8:bb:81:f4:db:49:d8:e9:a0:4a:49:7f:f2:
                    9d:f7:79:de:79:77:a1:c9:9e:ad:a1:d4:27:52:5c:
                    44:8e:03:b9:9a:4d:32:18:49:e3:18:ab:af:5c:be:
                    8b:c7:90:54:b1:35:1c:e7:85:62:76:37:32:e3:8e:
                    bb:69:bd:58:c8:87:31:e3:46:dc:8c:7d:e1:e2:d7:
                    7b:5e:1c:f2:7a:6f:0f:1a:98:b4:b9:ed:b5:0a:85:
                    fd:4f:23:0e:5f:c5:ec:77:70:34:65:e5:5e:b4:18:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B6:DC:FC:18:7C:55:31:18:16:C1:80:83:6C:33:FD:A6:11:46:7A
            X509v3 Authority Key Identifier:
                keyid:87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a3a2f34382d3438203d3e203439383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2601:1d08::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:00:9d:11:28:8c:84:04:9d:52:86:9c:99:3d:e9:30:60:16:
         e3:46:a7:6e:64:94:12:07:06:6a:7c:54:61:dc:63:aa:42:a4:
         f4:c1:42:84:20:4b:25:3a:c3:26:57:14:e0:9b:03:0b:ba:7a:
         46:e7:cc:f3:37:3a:e3:be:39:3e:42:e3:c2:b2:18:c3:0d:e5:
         e7:80:9f:7c:fb:21:23:43:e6:ab:87:57:a1:04:42:3f:ac:98:
         95:52:6e:a9:6c:7c:ed:41:da:3f:fe:bc:b0:92:a8:ff:43:c9:
         5e:ce:2f:74:15:07:f4:2b:bb:71:8f:ab:4d:3b:f2:f2:7c:43:
         b5:86:e3:ad:9a:01:ea:0a:46:f3:db:7b:3d:d8:0d:0a:d4:50:
         63:c7:93:89:cc:c4:87:e6:3f:53:aa:57:9e:56:14:f0:c5:10:
         4f:fc:74:ac:a5:3c:02:d7:8c:ea:67:a1:37:13:8a:ff:18:b8:
         47:57:55:01:ac:a3:85:b8:b5:76:17:e4:0d:43:ec:5b:f6:ef:
         a7:42:b8:a4:89:d4:0d:50:44:12:88:2d:ba:25:ae:d1:71:23:
         58:18:2f:c4:ed:3d:60:94:bf:6b:9f:78:80:87:da:13:57:7e:
         51:1d:ee:b3:17:2c:46:f7:9d:4d:3a:8e:18:84:65:3f:a7:d4:
         27:0a:dc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 06:36:05 2025 by rpki-client