Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/4/32332e3133332e382e302f32342d3234203d3e20393435.roa
File:                     32332e3133332e382e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          vfakShtXOC0DkMBFNq8Y61pWzuAcG0DH0KcB58kl+Lc=
Subject key identifier:   60:DD:0F:EA:CB:05:B2:4C:D5:58:B5:AF:4E:81:5D:7A:36:45:93:A8
Certificate issuer:       /CN=eebda479196a8be373b2ec259267523daff0c9264f0dccda8e
Certificate serial:       3146928F9C64BA2312A5E8FD1629D88958AD2E2E
Authority key identifier: 3B:97:BB:D1:1C:84:0C:34:57:AC:68:48:20:70:F8:C1:64:10:74:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479196a8be373b2ec259267523daff0c9264f0dccda8e.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/4/32332e3133332e382e302f32342d3234203d3e20393435.roa
Signing time:             Mon 21 Oct 2024 16:58:22 +0000
ROA not before:           Mon 21 Oct 2024 16:53:22 +0000
ROA not after:            Mon 20 Oct 2025 16:58:22 +0000
asID:                     945
IP address blocks:        23.133.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/4/3B97BBD11C840C3457AC68482070F8C16410743F.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/4/3B97BBD11C840C3457AC68482070F8C16410743F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479196a8be373b2ec259267523daff0c9264f0dccda8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 22:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:46:92:8f:9c:64:ba:23:12:a5:e8:fd:16:29:d8:89:58:ad:2e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda479196a8be373b2ec259267523daff0c9264f0dccda8e
        Validity
            Not Before: Oct 21 16:53:22 2024 GMT
            Not After : Oct 20 16:58:22 2025 GMT
        Subject: CN=60DD0FEACB05B24CD558B5AF4E815D7A364593A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:14:05:ba:67:3e:90:ef:1f:fe:b8:9b:a1:
                    9c:f3:de:d3:51:a3:1a:37:93:ea:d3:00:f8:48:18:
                    08:fa:6f:61:ca:41:64:0b:c0:3d:2e:e8:ad:7b:66:
                    66:f7:4b:28:94:ad:e0:55:b4:a0:83:ac:f3:27:d8:
                    00:48:99:ce:80:a6:5e:38:f7:7b:83:0d:87:17:b6:
                    cb:c5:e1:da:90:f2:05:37:2d:32:23:43:4c:b3:ab:
                    bb:a1:0c:b9:f4:e8:4d:80:5d:ed:78:57:34:58:3e:
                    92:5e:07:42:a8:6b:22:ec:b0:61:1f:c7:7a:84:fc:
                    36:cc:fc:e1:33:80:b9:af:b7:93:d2:66:9d:3d:c1:
                    9b:97:23:db:d4:2f:ca:cc:71:04:66:c5:3d:14:ae:
                    d0:7a:a3:ef:ec:c3:69:85:20:b4:05:4d:9e:64:b8:
                    ce:fa:33:03:dd:41:9a:56:77:b1:f3:d2:46:1c:43:
                    ab:6b:df:2a:8d:20:74:b5:48:9b:be:87:22:8d:38:
                    69:56:ea:eb:54:83:b8:46:91:b7:12:80:50:e4:a4:
                    7d:3a:b4:c5:74:1d:03:1a:4d:c5:ef:ba:ff:3d:e3:
                    01:d3:b2:38:ba:58:57:3b:cc:fb:4e:c2:c4:2a:e2:
                    d5:00:82:77:80:21:c7:39:47:9f:40:40:e5:ac:f9:
                    c4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DD:0F:EA:CB:05:B2:4C:D5:58:B5:AF:4E:81:5D:7A:36:45:93:A8
            X509v3 Authority Key Identifier:
                keyid:3B:97:BB:D1:1C:84:0C:34:57:AC:68:48:20:70:F8:C1:64:10:74:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/4/3B97BBD11C840C3457AC68482070F8C16410743F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda479196a8be373b2ec259267523daff0c9264f0dccda8e.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/4/32332e3133332e382e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:d1:3e:27:67:43:a2:91:fe:d6:50:09:ca:32:46:70:b7:af:
         91:51:78:b9:40:b9:b9:82:db:f8:0f:b7:27:54:ce:16:98:ae:
         70:2e:06:e4:59:49:87:7c:6b:cc:00:d9:79:62:a7:b7:48:3a:
         a1:69:da:49:b5:4b:5e:15:2a:23:74:f3:4f:02:a7:39:a4:13:
         bd:31:4e:dc:2d:72:3c:b8:50:76:b2:92:f3:18:ab:eb:05:e4:
         d9:d2:78:02:b0:22:c6:c5:71:89:b0:08:9d:c4:e2:d1:74:a3:
         0d:35:7a:47:4c:0c:fb:1d:0c:3c:60:f1:1a:30:b2:be:ef:f8:
         92:aa:42:2a:68:d3:f8:82:3b:ec:c2:89:94:8d:c9:18:98:16:
         1b:2c:f8:36:26:f2:ff:fe:42:5b:51:73:ba:4c:11:ef:f4:f3:
         5d:ce:46:0b:89:9f:9e:9b:08:d5:7b:6c:6a:2e:b2:0d:02:80:
         8c:d9:93:87:80:32:b1:23:e1:d8:6a:e2:5f:a9:73:9c:4b:c9:
         ea:13:64:f9:e9:ee:52:c0:ec:9e:62:85:19:56:39:1d:a8:53:
         8f:8a:75:30:fa:a8:47:b3:a2:96:22:b0:df:a3:91:ee:46:7b:
         d0:30:f4:fc:78:69:10:c3:8c:5f:38:a1:86:7d:81:68:e2:99:
         5c:64:dd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:40 2024 by rpki-client on console-ams.rpki-client.org