Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/4/3231362e3134362e33302e302f32342d3234203d3e203130313033.roa
File:                     3231362e3134362e33302e302f32342d3234203d3e203130313033.roa (raw, json)
Hash identifier:          DMqdSO5XhyA+RhQ+Yo/6UTv1Pufur8qD/LpBSk0BRig=
Subject key identifier:   E3:A5:2F:BC:55:D8:1C:C2:30:4B:EF:53:F1:27:D8:85:81:94:FE:77
Certificate issuer:       /CN=eebda479196a8be373b2ec259267523daff0c9264f0dccda8e
Certificate serial:       7F581968AE98B14109CB0C174F052618A46909D6
Authority key identifier: 3B:97:BB:D1:1C:84:0C:34:57:AC:68:48:20:70:F8:C1:64:10:74:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479196a8be373b2ec259267523daff0c9264f0dccda8e.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/4/3231362e3134362e33302e302f32342d3234203d3e203130313033.roa
Signing time:             Mon 21 Oct 2024 16:58:39 +0000
ROA not before:           Mon 21 Oct 2024 16:53:39 +0000
ROA not after:            Mon 20 Oct 2025 16:58:39 +0000
asID:                     10103
IP address blocks:        216.146.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/4/3B97BBD11C840C3457AC68482070F8C16410743F.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/4/3B97BBD11C840C3457AC68482070F8C16410743F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479196a8be373b2ec259267523daff0c9264f0dccda8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:58:19:68:ae:98:b1:41:09:cb:0c:17:4f:05:26:18:a4:69:09:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda479196a8be373b2ec259267523daff0c9264f0dccda8e
        Validity
            Not Before: Oct 21 16:53:39 2024 GMT
            Not After : Oct 20 16:58:39 2025 GMT
        Subject: CN=E3A52FBC55D81CC2304BEF53F127D8858194FE77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:e1:0b:96:d6:33:91:27:a9:4c:38:c9:ca:
                    f5:27:d8:6d:5f:5e:b0:0f:a7:fa:28:d2:de:d1:4c:
                    22:30:78:73:ea:47:dd:3e:a1:7d:a6:bb:9d:01:ef:
                    10:31:5f:7d:98:e2:71:82:bd:39:95:13:f0:1f:74:
                    bb:81:3c:93:4e:68:51:a3:02:88:70:ff:c2:31:1c:
                    48:3b:ed:bc:6f:25:c7:68:52:da:70:a1:0e:f7:17:
                    bd:88:8a:79:44:be:1c:cd:09:db:fb:24:0c:79:61:
                    00:b0:0f:44:50:81:08:29:23:f8:52:96:63:84:3e:
                    70:4b:99:79:a0:57:76:a7:96:07:c4:26:66:52:54:
                    d2:76:63:0b:0b:ef:01:55:15:eb:a4:d0:ea:07:41:
                    67:d1:ba:ca:04:29:1f:0a:95:e5:a2:85:da:ba:2a:
                    b5:c0:0e:c8:a6:90:4f:1b:57:74:26:bc:4d:e0:2b:
                    e3:d8:09:9f:6a:b0:c9:46:86:ea:d3:9f:23:5d:b6:
                    f9:4a:2a:d4:37:8b:e0:95:8e:7b:15:51:40:42:01:
                    29:19:d2:40:4b:f1:c8:a0:75:83:79:12:d5:39:c8:
                    27:03:3e:06:5c:fe:0c:6f:f0:f1:8d:42:0a:8d:5d:
                    d2:c6:e5:e1:fc:27:c5:c0:00:06:f3:eb:3c:26:3a:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A5:2F:BC:55:D8:1C:C2:30:4B:EF:53:F1:27:D8:85:81:94:FE:77
            X509v3 Authority Key Identifier:
                keyid:3B:97:BB:D1:1C:84:0C:34:57:AC:68:48:20:70:F8:C1:64:10:74:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/4/3B97BBD11C840C3457AC68482070F8C16410743F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479196a8be373b2ec259267523daff0c9264f0dccda8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/4/3231362e3134362e33302e302f32342d3234203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:51:8c:84:22:08:95:6a:1e:80:d1:31:2a:5f:3d:27:3b:e4:
         c3:c8:0e:88:b1:47:e6:d1:44:a9:b0:fd:56:64:b4:4c:fe:66:
         30:f8:68:fd:cc:be:87:2e:4e:74:59:25:83:fc:af:9e:7c:0f:
         25:fb:af:9a:a3:9a:e6:f1:a6:b6:d6:ce:4f:66:9e:e4:0c:5d:
         63:ee:fb:24:18:bd:ab:30:8c:f3:c1:e9:28:25:07:32:2e:c8:
         28:e6:b5:17:46:3b:1c:f6:29:f4:0d:45:12:4d:dc:9f:ab:99:
         8a:4f:27:1e:fb:53:b5:7f:82:c1:b3:f9:7d:73:17:c8:ce:f7:
         08:b9:6a:4e:37:ac:55:f0:93:85:63:f4:1b:56:86:0b:1b:9e:
         dd:9c:12:bb:54:e5:21:28:48:45:ce:22:43:0c:be:d4:75:98:
         fe:59:b6:c1:a0:ad:5c:5f:98:9d:11:6d:fb:a0:ba:ee:fc:72:
         c2:e9:5a:0e:a4:28:af:fc:c3:b0:f9:36:55:e2:7b:38:54:44:
         54:e1:84:b2:6d:77:83:6b:97:46:9e:a3:f8:22:7c:44:e0:8d:
         94:8d:11:cf:48:6f:88:63:25:57:ca:e0:a4:e3:67:59:58:d4:
         df:08:1a:3c:3f:8b:9f:a8:a7:a0:38:73:71:1a:2b:ae:0f:bd:
         ac:e0:80:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:20 2024 by rpki-client on console-fra.rpki-client.org