Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/4/3231362e3134362e32382e302f32322d3234203d3e20343031313131.roa
File:                     3231362e3134362e32382e302f32322d3234203d3e20343031313131.roa (raw, json)
Hash identifier:          vlej5nLGIQY34J8/L559wwxHffmEBPckJtnpcWfhUyk=
Subject key identifier:   5C:AF:D0:E1:CB:32:36:37:69:D2:77:AD:57:0B:85:73:75:FC:F9:FB
Certificate issuer:       /CN=eebda479196a8be373b2ec259267523daff0c9264f0dccda8e
Certificate serial:       4A717D0D9206EBBD20265324C90D719979799C1A
Authority key identifier: 3B:97:BB:D1:1C:84:0C:34:57:AC:68:48:20:70:F8:C1:64:10:74:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479196a8be373b2ec259267523daff0c9264f0dccda8e.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/4/3231362e3134362e32382e302f32322d3234203d3e20343031313131.roa
Signing time:             Mon 21 Oct 2024 16:58:46 +0000
ROA not before:           Mon 21 Oct 2024 16:53:46 +0000
ROA not after:            Mon 20 Oct 2025 16:58:46 +0000
asID:                     401111
IP address blocks:        216.146.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/4/3B97BBD11C840C3457AC68482070F8C16410743F.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/4/3B97BBD11C840C3457AC68482070F8C16410743F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479196a8be373b2ec259267523daff0c9264f0dccda8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 03:09:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:71:7d:0d:92:06:eb:bd:20:26:53:24:c9:0d:71:99:79:79:9c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda479196a8be373b2ec259267523daff0c9264f0dccda8e
        Validity
            Not Before: Oct 21 16:53:46 2024 GMT
            Not After : Oct 20 16:58:46 2025 GMT
        Subject: CN=5CAFD0E1CB32363769D277AD570B857375FCF9FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:38:e8:b1:e7:d8:f2:83:b3:bd:91:1e:da:09:
                    b5:e1:d1:73:2b:47:64:2c:cd:ec:60:66:7f:e7:4d:
                    53:68:64:36:6c:52:8b:d9:20:01:79:9b:3f:d0:a0:
                    f1:49:83:20:a6:98:f7:b3:29:86:1c:1b:b3:e5:8d:
                    ae:f0:77:c1:0a:ca:5b:35:65:c1:31:f2:a0:d6:49:
                    b9:6a:2f:f9:44:8b:a6:12:b0:25:cb:77:b2:da:db:
                    e4:54:2a:79:a2:13:c3:c1:10:20:35:ea:45:05:64:
                    02:af:fd:fd:5c:78:9a:96:2b:79:43:20:7d:3e:9a:
                    fa:bd:6b:02:6f:09:7e:92:2c:56:12:ae:5c:d1:e9:
                    ce:81:47:f8:ae:4e:87:45:da:1c:9f:46:81:e2:3c:
                    ab:75:99:00:2f:5a:cf:02:ff:51:38:90:f7:8e:83:
                    31:7f:a2:5c:e0:3b:33:12:44:5e:77:57:fa:a6:a8:
                    75:60:b0:02:d8:a5:52:47:6a:3a:8d:35:c6:f1:2e:
                    c3:f1:59:fb:0d:42:df:18:ac:55:d5:d9:a2:7d:0d:
                    d0:0b:69:ab:55:e0:b1:f4:88:5f:8e:3e:e4:8c:b8:
                    71:07:a3:5b:38:66:97:24:f4:d3:ad:af:9b:16:68:
                    65:33:81:00:05:80:90:29:bf:fe:be:36:4a:d7:6d:
                    77:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AF:D0:E1:CB:32:36:37:69:D2:77:AD:57:0B:85:73:75:FC:F9:FB
            X509v3 Authority Key Identifier:
                keyid:3B:97:BB:D1:1C:84:0C:34:57:AC:68:48:20:70:F8:C1:64:10:74:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/4/3B97BBD11C840C3457AC68482070F8C16410743F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479196a8be373b2ec259267523daff0c9264f0dccda8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/4/3231362e3134362e32382e302f32322d3234203d3e20343031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b5:ee:91:5b:d5:19:fc:41:5f:49:51:a6:b5:c5:3c:c0:5e:be:
         06:ef:8e:2f:30:f3:d7:49:91:a0:64:6b:bc:63:9d:52:25:c9:
         f2:38:b0:d5:95:d3:71:f7:da:38:fe:c0:dd:c9:1c:d4:35:6c:
         1a:5c:be:f8:11:bb:10:ed:74:2d:d6:2f:7a:80:8d:8d:bd:c9:
         4c:12:54:d4:20:3b:ba:0b:1c:9a:87:9d:56:ae:22:90:3b:30:
         13:ea:f4:5d:dc:a3:f6:aa:4f:f5:ee:dd:81:78:db:e4:62:73:
         c5:e6:0e:fb:e2:8f:53:21:7a:25:57:c0:73:43:8a:86:ce:94:
         a9:37:d8:50:5e:bf:ad:49:a8:aa:95:a2:94:91:c5:8c:f3:5d:
         85:03:43:e3:c5:34:8f:31:30:2f:f1:d2:9b:65:3b:44:e3:2a:
         17:d8:5b:f8:9d:cb:2f:97:ea:56:0d:d1:89:c4:49:f6:9c:82:
         ee:01:71:4c:73:3b:a1:c1:53:34:65:ae:12:12:e4:b8:47:05:
         6c:6c:c4:ec:06:67:1e:df:89:60:cf:d7:53:b3:26:82:0c:fc:
         d9:32:ef:8e:f5:b1:b6:d0:ae:bf:7b:49:f7:ee:53:11:92:3c:
         cc:65:78:8f:f0:1e:87:e8:8a:ad:ee:de:1f:8c:ee:cf:a9:49:
         68:de:8b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:56 2024 by rpki-client on console-fra.rpki-client.org