Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/4/3231362e3134362e32392e302f32342d3234203d3e203130313033.roa
File:                     3231362e3134362e32392e302f32342d3234203d3e203130313033.roa (raw, json)
Hash identifier:          cr+zrJLQiwGpnwpkC60ZOA0LqzqOdRBFVnPQHfRDmUc=
Subject key identifier:   4E:51:B0:45:9C:A2:8C:5F:57:20:C0:9F:0A:35:51:F7:F3:48:2C:A9
Certificate issuer:       /CN=eebda479196a8be373b2ec259267523daff0c9264f0dccda8e
Certificate serial:       7031CAAFAF774F86B9E55C1B3A615D5D822B2A95
Authority key identifier: 3B:97:BB:D1:1C:84:0C:34:57:AC:68:48:20:70:F8:C1:64:10:74:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479196a8be373b2ec259267523daff0c9264f0dccda8e.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/4/3231362e3134362e32392e302f32342d3234203d3e203130313033.roa
Signing time:             Mon 21 Oct 2024 16:58:32 +0000
ROA not before:           Mon 21 Oct 2024 16:53:32 +0000
ROA not after:            Mon 20 Oct 2025 16:58:32 +0000
asID:                     10103
IP address blocks:        216.146.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/4/3B97BBD11C840C3457AC68482070F8C16410743F.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/4/3B97BBD11C840C3457AC68482070F8C16410743F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479196a8be373b2ec259267523daff0c9264f0dccda8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:31:ca:af:af:77:4f:86:b9:e5:5c:1b:3a:61:5d:5d:82:2b:2a:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda479196a8be373b2ec259267523daff0c9264f0dccda8e
        Validity
            Not Before: Oct 21 16:53:32 2024 GMT
            Not After : Oct 20 16:58:32 2025 GMT
        Subject: CN=4E51B0459CA28C5F5720C09F0A3551F7F3482CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:51:92:45:41:2b:70:80:72:5a:67:b1:f6:
                    c9:a5:96:bc:7d:ec:7b:f7:15:f5:d1:10:2c:55:f6:
                    84:5d:ec:af:fc:c7:2f:9f:4e:77:1e:d5:08:8c:c5:
                    cf:43:f9:da:06:95:17:24:05:0f:7c:3c:c8:5c:9a:
                    cc:cd:6b:e2:95:33:db:33:65:3c:d9:c3:09:48:e2:
                    3a:84:ec:31:95:90:64:b2:12:48:7c:44:1f:f9:b5:
                    1a:fd:d0:0d:4f:aa:f3:ab:56:ea:30:70:0a:ff:19:
                    a0:e9:87:77:ca:97:fe:2d:56:3e:c2:96:da:62:69:
                    37:b2:36:33:31:89:58:cc:8e:1d:00:9b:0a:d9:7c:
                    95:c8:cb:63:8e:78:09:48:32:ce:15:ee:b2:36:2f:
                    70:0b:12:a0:12:95:b5:97:75:8f:48:bc:a1:cf:0a:
                    13:1d:f9:91:2f:28:2c:be:fb:86:90:d5:16:f9:b5:
                    58:57:90:e7:da:d7:4f:21:8c:6e:c8:d7:14:7b:d1:
                    9d:af:e9:27:51:27:da:8c:1f:47:e4:63:74:4c:b8:
                    13:91:ae:4a:b4:9a:dc:45:63:a2:81:80:7b:1f:00:
                    29:75:3e:fd:d8:e9:bb:78:42:9f:6c:ea:6d:77:81:
                    e8:e0:8c:01:10:f5:a5:92:80:3c:0f:5a:40:39:89:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:51:B0:45:9C:A2:8C:5F:57:20:C0:9F:0A:35:51:F7:F3:48:2C:A9
            X509v3 Authority Key Identifier:
                keyid:3B:97:BB:D1:1C:84:0C:34:57:AC:68:48:20:70:F8:C1:64:10:74:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/4/3B97BBD11C840C3457AC68482070F8C16410743F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479196a8be373b2ec259267523daff0c9264f0dccda8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/4/3231362e3134362e32392e302f32342d3234203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:47:15:cc:2a:9a:7a:f8:db:13:76:58:e1:a2:1e:f2:42:99:
         3c:f0:25:2d:ff:40:8a:c6:c5:d8:f5:57:9c:d6:3a:5d:b4:c8:
         2b:04:71:52:a2:62:24:9a:4f:e4:c1:30:f5:ff:29:e6:a8:87:
         b6:45:d2:cb:02:78:fd:cd:89:b9:3d:e9:c3:fc:99:97:fa:3b:
         14:d8:8f:d2:df:2a:f2:f6:23:e9:82:f7:16:d8:90:f5:da:dc:
         4b:55:80:3f:90:88:33:15:17:d2:76:4f:45:8a:ce:2a:dc:5b:
         e9:4d:a9:1c:a5:43:88:50:87:73:0e:30:16:a4:2e:58:0a:4f:
         57:25:95:4e:96:ae:86:8f:64:10:40:85:61:ea:45:a7:1a:78:
         4c:f7:94:70:46:f3:c6:dc:de:98:47:c4:f6:d5:5f:64:c3:cc:
         97:50:b4:62:7d:70:1a:d6:1d:6e:ca:dc:f7:49:47:35:4f:4d:
         21:26:7c:4d:6f:c4:41:fa:bc:d8:1d:e0:c1:31:63:80:fa:ee:
         0e:aa:15:61:32:d1:2b:01:73:41:8d:42:55:bc:cc:4a:94:48:
         47:7d:f0:d8:68:ea:ab:99:64:69:0b:a5:e3:11:d5:83:8e:a0:
         62:4f:c7:6c:63:41:4a:12:c7:8e:73:83:85:7e:13:b2:ee:47:
         c5:6b:6d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:40 2024 by rpki-client on console-ams.rpki-client.org