Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/1/32332e3135302e392e302f32342d3234203d3e2037303138.roa
File:                     32332e3135302e392e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          GhtPQEsT+fHOmAQzNVnM3LkUTXNg44A48zbmGQxxunc=
Subject key identifier:   FA:04:C2:BC:9B:F9:E6:E9:8F:AD:C5:5C:98:E8:CC:5D:E1:1D:85:43
Certificate issuer:       /CN=a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7
Certificate serial:       22D3C97F7A87A2AC9CF8385ABFF153CCC9ABACD6
Authority key identifier: 5F:6A:78:7C:1D:0A:9C:15:86:23:4E:60:78:A0:CD:6F:00:B1:DA:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/1/32332e3135302e392e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 21 Oct 2024 17:08:40 +0000
ROA not before:           Mon 21 Oct 2024 17:03:40 +0000
ROA not after:            Mon 20 Oct 2025 17:08:40 +0000
asID:                     7018
IP address blocks:        23.150.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/1/5F6A787C1D0A9C1586234E6078A0CD6F00B1DA62.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/1/5F6A787C1D0A9C1586234E6078A0CD6F00B1DA62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/46c07e76-66d8-48d7-826a-85de29c66a22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/46c07e76-66d8-48d7-826a-85de29c66a22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 21:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:d3:c9:7f:7a:87:a2:ac:9c:f8:38:5a:bf:f1:53:cc:c9:ab:ac:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7
        Validity
            Not Before: Oct 21 17:03:40 2024 GMT
            Not After : Oct 20 17:08:40 2025 GMT
        Subject: CN=FA04C2BC9BF9E6E98FADC55C98E8CC5DE11D8543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e4:ee:36:4f:a5:6d:25:f3:ce:23:fc:f5:50:
                    c1:36:a9:f8:72:f8:e1:62:ae:a8:f4:6c:8c:23:f9:
                    b0:57:b5:63:c5:12:ad:54:20:2f:e5:a8:a3:0c:1e:
                    83:6a:eb:f7:bc:75:81:3b:13:78:97:e6:84:3d:38:
                    fe:55:5a:d0:2b:5a:01:ad:fa:69:8a:0c:38:f4:b4:
                    c9:d3:9a:d6:b8:d3:48:b3:e4:6c:76:a4:e0:eb:51:
                    92:cd:a1:75:4e:91:b5:cf:1f:d3:4d:8e:cf:86:b0:
                    a2:ee:c7:74:20:bb:5d:2f:4f:0d:36:40:eb:01:92:
                    06:70:d8:df:72:3a:92:29:a0:4f:60:47:f5:39:09:
                    33:0c:84:d7:3f:83:8b:dc:cb:6c:d0:c1:17:64:9e:
                    20:5d:a0:76:15:5a:67:16:16:eb:a5:51:7c:2b:a6:
                    d7:e4:f1:ed:cf:35:84:53:3d:a6:ba:0a:3a:99:35:
                    69:01:dd:6a:76:94:06:3f:06:52:56:02:08:ea:2f:
                    13:a4:1f:07:85:ad:3d:9b:bb:86:d7:ca:9b:fe:00:
                    cf:b3:bb:15:2e:94:27:bf:cf:81:db:06:aa:13:59:
                    01:8c:59:18:c4:1a:e4:d5:9e:d2:27:9e:b3:4a:c8:
                    aa:3b:9e:51:ed:d0:c0:d2:6e:94:23:1f:f6:51:dc:
                    7e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:04:C2:BC:9B:F9:E6:E9:8F:AD:C5:5C:98:E8:CC:5D:E1:1D:85:43
            X509v3 Authority Key Identifier:
                keyid:5F:6A:78:7C:1D:0A:9C:15:86:23:4E:60:78:A0:CD:6F:00:B1:DA:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/1/5F6A787C1D0A9C1586234E6078A0CD6F00B1DA62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c4595e9ed4465f92728c363237199779e2535ffa7.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/1/32332e3135302e392e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:62:d5:7a:65:55:52:55:6a:bc:fa:b4:05:06:07:b5:f3:c1:
         35:5e:8c:d3:74:a9:a8:9f:a9:6d:c2:01:e7:8a:bf:f5:85:8a:
         d1:6a:98:64:88:fa:bd:29:f2:45:4a:87:4d:4e:5c:19:1c:26:
         25:7b:24:12:50:52:a8:43:47:3e:2b:b5:c3:c5:f5:90:08:7f:
         36:bc:ff:b7:ba:26:8f:6a:95:d9:24:02:52:8d:3f:dd:35:07:
         ee:75:7e:ed:26:66:45:3f:41:52:ea:b0:9e:1d:6f:41:8c:2b:
         4d:21:2c:30:71:16:07:62:26:75:7c:61:c3:02:cb:16:5f:50:
         53:a1:d9:85:8b:2c:ea:e5:92:b3:3f:d0:ae:aa:7b:3d:6f:34:
         c6:61:26:1d:22:4e:7b:c7:5c:ba:f8:f9:cc:d4:f9:8b:4b:f8:
         a2:d9:a6:01:ee:a7:b5:65:18:de:b6:56:29:06:90:ea:d8:87:
         0e:73:b2:68:58:b4:1e:cf:fc:ca:02:08:29:c6:49:22:40:a2:
         57:e6:9c:40:d6:f9:96:07:a7:65:bb:37:47:a9:17:ea:9c:cb:
         a0:09:1f:90:5f:3a:f1:40:2e:d7:4b:77:73:bf:c3:d5:1b:87:
         16:47:76:ce:c6:b5:32:04:c7:4a:9c:96:2d:10:1b:79:6b:bd:
         3d:3a:5c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:16 2024 by rpki-client on console-fra.rpki-client.org