Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/1/32332e3135302e382e302f32342d3234203d3e20393435.roa
File:                     32332e3135302e382e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          quKjuRAlGJImvqXFk4tWKChi94eDQ/xpmPT64FvZtYw=
Subject key identifier:   DC:FE:2D:FC:2B:7B:A3:4A:4F:86:B9:4C:C9:B5:20:CF:03:B4:C0:BB
Certificate issuer:       /CN=a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7
Certificate serial:       14B2A4BFCF16FA1ADAEDF9EDFB19480E43FEBDD8
Authority key identifier: 5F:6A:78:7C:1D:0A:9C:15:86:23:4E:60:78:A0:CD:6F:00:B1:DA:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/1/32332e3135302e382e302f32342d3234203d3e20393435.roa
Signing time:             Sat 09 Nov 2024 14:13:18 +0000
ROA not before:           Sat 09 Nov 2024 14:08:18 +0000
ROA not after:            Sat 08 Nov 2025 14:13:18 +0000
asID:                     945
IP address blocks:        23.150.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/1/5F6A787C1D0A9C1586234E6078A0CD6F00B1DA62.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/1/5F6A787C1D0A9C1586234E6078A0CD6F00B1DA62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/46c07e76-66d8-48d7-826a-85de29c66a22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/46c07e76-66d8-48d7-826a-85de29c66a22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:b2:a4:bf:cf:16:fa:1a:da:ed:f9:ed:fb:19:48:0e:43:fe:bd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7
        Validity
            Not Before: Nov  9 14:08:18 2024 GMT
            Not After : Nov  8 14:13:18 2025 GMT
        Subject: CN=DCFE2DFC2B7BA34A4F86B94CC9B520CF03B4C0BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:68:fd:53:70:ac:e8:16:9a:f6:7c:09:0a:28:
                    b0:25:f8:17:a1:8e:9e:22:bd:c4:29:03:e2:1b:76:
                    a4:5e:96:ae:5a:07:ea:01:c1:9f:f6:5a:04:55:5f:
                    a7:58:04:0b:ad:b3:fb:3e:65:b8:c4:f3:ae:56:84:
                    64:b4:aa:2f:1b:eb:58:d7:28:ad:02:3f:e4:72:8c:
                    6a:69:58:a8:ac:23:3f:e2:d6:52:bb:4d:cc:e1:74:
                    8c:d5:ff:e8:c3:48:61:97:8e:cb:c0:19:db:61:5c:
                    62:a2:92:22:98:2d:48:68:20:de:50:89:78:ee:0e:
                    36:0d:40:69:b5:ad:9c:76:79:f8:c2:47:88:69:65:
                    c0:d1:9c:a0:0d:7c:80:2a:32:f7:cf:18:71:78:5b:
                    33:a2:0a:46:1c:db:7b:67:0d:a8:2e:46:44:55:a0:
                    a1:9f:61:79:de:55:18:2b:41:0b:98:4c:6f:5d:7c:
                    1d:07:e0:d3:6f:51:c3:56:53:8c:65:c3:9b:11:73:
                    29:63:3b:56:c8:9b:c8:82:21:79:10:58:fa:65:23:
                    f1:3b:4a:ef:35:67:36:db:31:51:cb:83:62:38:90:
                    d2:fe:1e:d1:0f:09:f0:34:6c:bb:71:65:e3:da:10:
                    43:7f:fa:dc:f9:84:04:4f:d5:53:dd:e7:15:17:6b:
                    09:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FE:2D:FC:2B:7B:A3:4A:4F:86:B9:4C:C9:B5:20:CF:03:B4:C0:BB
            X509v3 Authority Key Identifier:
                keyid:5F:6A:78:7C:1D:0A:9C:15:86:23:4E:60:78:A0:CD:6F:00:B1:DA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/1/5F6A787C1D0A9C1586234E6078A0CD6F00B1DA62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/1/32332e3135302e382e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:79:18:2b:34:df:42:7c:11:b1:43:e4:53:69:13:73:1b:92:
         aa:69:ba:4b:e6:53:78:9b:08:27:a0:fa:04:b2:e6:ec:ff:10:
         cc:b1:ec:a5:14:83:a2:b5:97:c6:a4:b9:68:9a:70:89:33:0d:
         61:6b:fc:3a:30:66:f0:a3:2a:fe:78:c9:5e:85:ad:f9:cf:b5:
         bb:f8:c3:c6:85:2b:36:08:f3:bd:fd:07:39:34:58:50:d4:93:
         39:8d:5d:d3:9b:59:7e:57:42:e9:99:9d:6e:16:be:82:b4:3b:
         9d:b8:a3:8e:b6:28:6c:e7:90:74:18:4a:b1:3f:6d:ab:97:29:
         91:3d:d1:2b:93:4a:e4:00:ae:f0:be:78:a1:cb:c6:17:a6:87:
         c4:a9:d3:fe:08:e1:33:05:33:87:3b:e9:a2:5e:ed:92:dd:df:
         2b:68:2e:eb:29:a6:f0:7c:a0:0d:7b:50:86:97:59:bd:7f:ae:
         ac:09:19:dd:66:37:49:10:09:f2:72:be:ca:5a:6e:67:81:cd:
         e9:18:dd:ad:88:69:22:0d:75:97:16:23:46:ce:a0:66:9e:70:
         68:9b:7b:af:e4:3a:77:fe:5a:e0:2d:60:e4:32:bb:9e:79:9a:
         2e:bc:34:77:12:86:f6:b8:ad:48:85:9a:c1:ac:d0:63:ea:2b:
         5f:4e:81:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:22 2024 by rpki-client on console-ams.rpki-client.org