Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/4/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
File:                     3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa (raw, json)
Hash identifier:          jPnymYoKxZzT5aAmynzUplYIDzXu7GqDoiLpdyvb4Mc=
Subject key identifier:   2B:30:0B:EE:58:E8:13:06:35:37:85:57:E7:25:90:10:48:F0:F0:F4
Certificate issuer:       /CN=eebda479196a8be373b2ec259267523daff0c9264f0dccda8e
Certificate serial:       20FD552A9C4BB73401E5F3B526993F583F3C6541
Authority key identifier: 3B:97:BB:D1:1C:84:0C:34:57:AC:68:48:20:70:F8:C1:64:10:74:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479196a8be373b2ec259267523daff0c9264f0dccda8e.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/4/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
Signing time:             Mon 21 Oct 2024 16:58:53 +0000
ROA not before:           Mon 21 Oct 2024 16:53:53 +0000
ROA not after:            Mon 20 Oct 2025 16:58:53 +0000
asID:                     207731
IP address blocks:        216.146.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/4/3B97BBD11C840C3457AC68482070F8C16410743F.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/4/3B97BBD11C840C3457AC68482070F8C16410743F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479196a8be373b2ec259267523daff0c9264f0dccda8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:fd:55:2a:9c:4b:b7:34:01:e5:f3:b5:26:99:3f:58:3f:3c:65:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda479196a8be373b2ec259267523daff0c9264f0dccda8e
        Validity
            Not Before: Oct 21 16:53:53 2024 GMT
            Not After : Oct 20 16:58:53 2025 GMT
        Subject: CN=2B300BEE58E8130635378557E725901048F0F0F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:34:4a:3e:39:60:cf:fd:e9:2a:f3:e8:68:ca:
                    1e:4b:73:e2:4a:e0:1e:0d:69:b2:35:e7:42:f4:6e:
                    06:b0:fc:26:b4:f4:b3:7a:79:a1:ab:14:5e:24:0b:
                    66:4a:d3:0f:85:aa:f4:5c:65:1a:93:18:99:76:46:
                    17:b7:5e:3a:c2:63:47:13:d5:9a:e1:9e:89:a9:dd:
                    f0:f7:2e:d5:e1:d5:e7:3e:37:ca:2b:47:e4:37:61:
                    85:b8:87:3b:8b:f2:02:b0:a0:24:0e:c7:8f:96:55:
                    e6:d7:84:7a:76:c8:71:a2:2f:ff:2f:16:6d:c0:a7:
                    96:64:8c:00:ab:fa:2b:a8:18:36:8b:f1:b2:31:94:
                    21:98:b7:94:e1:c1:f2:c1:cc:b8:fb:88:18:a5:a9:
                    05:09:79:8f:ee:e0:9c:c1:d4:f9:01:b5:73:49:b4:
                    3d:b6:78:f0:ea:0e:84:5c:69:1f:ca:e9:c8:2c:e4:
                    ce:96:e0:dd:46:44:7e:b7:f2:4b:34:cb:a6:b4:a1:
                    6b:ea:cb:e6:01:6c:5c:7e:79:52:f7:ac:29:f1:29:
                    86:09:b6:a3:1f:f9:ab:7a:06:9f:e0:4e:87:e7:02:
                    9b:f0:e7:c4:e1:44:9b:21:d1:70:df:0b:75:8c:76:
                    b2:61:8b:75:75:6c:00:17:a9:14:da:56:ee:d5:a7:
                    d7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:30:0B:EE:58:E8:13:06:35:37:85:57:E7:25:90:10:48:F0:F0:F4
            X509v3 Authority Key Identifier:
                keyid:3B:97:BB:D1:1C:84:0C:34:57:AC:68:48:20:70:F8:C1:64:10:74:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/4/3B97BBD11C840C3457AC68482070F8C16410743F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479196a8be373b2ec259267523daff0c9264f0dccda8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/4/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e9:dd:29:40:21:e3:7a:15:48:04:c7:e2:7d:80:2f:e9:51:b7:
         0b:f2:9b:ec:73:72:dd:5b:ad:5c:95:fb:e6:a4:59:7b:72:66:
         a3:35:10:4d:b9:d5:50:9a:88:23:78:6c:1f:d5:a9:cd:90:8f:
         e3:58:cb:0b:8e:35:f1:8f:cf:ba:43:73:d3:f6:d9:52:22:17:
         86:ea:d3:6f:36:ce:5e:fd:90:25:eb:c5:47:73:3d:c0:20:a9:
         1f:62:b1:04:77:7e:57:f3:82:8b:f8:7d:80:f5:8e:1b:62:bb:
         13:49:87:66:a5:43:41:b8:70:63:35:ec:5e:7d:76:7c:3b:c7:
         b6:9f:0c:c8:97:60:d6:99:01:2f:60:9c:64:08:56:79:e5:22:
         44:96:85:24:02:3e:ea:71:c1:45:77:51:34:89:f8:1d:4a:e4:
         13:88:b9:cc:25:92:50:cf:8b:c9:e4:46:24:85:92:3d:a1:06:
         a5:d3:dc:a2:d6:80:a0:f5:07:2b:56:71:e7:06:5a:be:8e:cf:
         d0:49:d3:30:3a:a6:d5:fa:f6:53:d6:91:0f:b6:17:c2:16:cc:
         f9:3f:d8:74:15:39:9d:7c:15:ef:9e:00:bf:1e:a1:f8:d7:53:
         a3:c9:59:2d:db:97:7c:66:09:b5:6e:bf:28:e7:fb:e7:66:2b:
         ad:da:24:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:20 2024 by rpki-client on console-fra.rpki-client.org