Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/3/3139392e3138392e3135362e302f32322d3234203d3e20343031313131.roa
File:                     3139392e3138392e3135362e302f32322d3234203d3e20343031313131.roa (raw, json)
Hash identifier:          rmF0vgwx01PPe+dSW8TTeKFy9OTBnFjw5e45sTn5jjI=
Subject key identifier:   F3:4E:1B:F0:56:DE:51:01:27:D5:37:5D:59:A4:78:C3:F3:ED:43:33
Certificate issuer:       /CN=7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500
Certificate serial:       5A84E4A581FB39C53D34735F7D3CE545F774FF55
Authority key identifier: 9B:6B:FA:A0:8E:CB:D2:49:F7:D9:74:6F:19:56:E2:94:4C:81:24:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/3/3139392e3138392e3135362e302f32322d3234203d3e20343031313131.roa
Signing time:             Thu 17 Oct 2024 16:52:11 +0000
ROA not before:           Thu 17 Oct 2024 16:47:11 +0000
ROA not after:            Thu 16 Oct 2025 16:52:11 +0000
asID:                     401111
IP address blocks:        199.189.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/3/9B6BFAA08ECBD249F7D9746F1956E2944C812494.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/3/9B6BFAA08ECBD249F7D9746F1956E2944C812494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 12 Dec 2024 02:05:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:84:e4:a5:81:fb:39:c5:3d:34:73:5f:7d:3c:e5:45:f7:74:ff:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500
        Validity
            Not Before: Oct 17 16:47:11 2024 GMT
            Not After : Oct 16 16:52:11 2025 GMT
        Subject: CN=F34E1BF056DE510127D5375D59A478C3F3ED4333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:43:f2:b4:ee:e2:58:d4:97:16:8f:f8:3c:4e:
                    c2:7b:74:a1:d8:69:85:33:9b:a1:3c:af:bd:3b:96:
                    91:79:43:e6:38:12:47:2c:6e:52:ce:b8:8b:98:4f:
                    89:ee:41:52:54:9a:27:b3:b7:cf:f2:fd:4e:f4:33:
                    f2:95:34:89:87:85:65:8c:be:0a:05:59:c6:72:14:
                    ce:3a:cb:db:28:36:b8:4f:70:8a:37:c3:96:1e:14:
                    38:43:01:8e:e3:17:2d:0a:a5:c4:99:d9:0e:10:91:
                    89:a2:80:84:06:47:3a:26:8d:1d:ca:de:aa:9a:8b:
                    9a:dd:10:17:88:a0:41:79:fa:4a:4e:cd:6c:00:e6:
                    b1:3e:a9:b3:11:66:d6:58:c8:13:c0:10:08:5b:fd:
                    5e:ae:73:6c:51:e6:a3:07:44:4f:a2:5f:65:70:a2:
                    c0:c4:40:a7:8c:f1:f8:88:ee:83:10:a7:44:bf:a0:
                    ee:e3:97:6a:4f:95:09:12:15:e3:21:28:0f:cf:6a:
                    17:ad:23:f4:5b:87:4e:70:97:ce:4c:b1:7c:c8:75:
                    f0:9b:c9:34:6d:a5:5e:9e:f0:bc:66:d5:10:76:ee:
                    00:cb:c1:07:2c:6d:07:be:8b:dd:ba:c6:5e:3b:f2:
                    23:7d:14:eb:e8:77:b2:20:9d:55:98:76:1e:53:10:
                    6a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4E:1B:F0:56:DE:51:01:27:D5:37:5D:59:A4:78:C3:F3:ED:43:33
            X509v3 Authority Key Identifier:
                keyid:9B:6B:FA:A0:8E:CB:D2:49:F7:D9:74:6F:19:56:E2:94:4C:81:24:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/3/9B6BFAA08ECBD249F7D9746F1956E2944C812494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/3/3139392e3138392e3135362e302f32322d3234203d3e20343031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:0a:d1:06:a7:ad:cd:2f:89:b5:2a:be:4c:91:bd:79:17:1d:
         5a:e1:20:7b:28:9b:23:d3:8c:56:c9:89:41:17:11:ae:f7:61:
         6b:57:ca:c6:64:1a:0b:2b:48:76:35:be:66:8e:ca:d0:6c:90:
         20:61:2c:98:32:e1:0f:b9:10:ce:69:ff:ac:ba:98:98:6c:f1:
         63:e9:a0:64:52:64:03:b4:6b:13:f2:8f:4c:c2:d1:f4:79:cf:
         69:a1:04:50:40:06:af:d0:d9:a4:04:f5:92:36:8c:41:67:97:
         98:7d:00:0e:de:f4:14:d7:c3:c0:c0:29:ee:db:a3:1c:27:20:
         47:cd:21:b1:ee:1d:02:db:17:fc:d5:bd:84:d6:a0:3f:8c:16:
         b4:a6:f7:3c:c4:f4:f5:27:17:da:bb:eb:89:ec:74:30:32:3d:
         27:ec:85:27:f2:4a:c6:20:84:95:f0:9b:6f:7e:17:28:99:23:
         bc:13:21:e5:68:f1:22:9e:43:8f:00:95:49:e3:ae:b5:47:78:
         f3:7a:e0:03:67:9a:df:dc:84:00:cd:f6:58:3f:8f:2b:f2:81:
         e2:ff:3b:06:f8:ae:0f:bb:34:76:3f:12:9e:2a:67:2c:68:c6:
         90:45:93:26:dc:5e:1a:f3:21:77:39:05:1e:28:3c:cd:de:09:
         a9:ac:ef:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 11 00:51:22 2024 by rpki-client on console-ams.rpki-client.org