Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/5/3136352e3134302e3134322e302f32342d3234203d3e2037323537.roa
File:                     3136352e3134302e3134322e302f32342d3234203d3e2037323537.roa (raw, json)
Hash identifier:          F5RTktxQxD+sFl9Cvn7840kwpsDCWdUgvoX9yngUqwU=
Subject key identifier:   BF:60:96:25:2D:85:87:71:B6:C0:8D:B5:03:A8:7F:39:99:5C:75:16
Certificate issuer:       /CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
Certificate serial:       34817D20A0B44572CC672163DBC71C89B902A35F
Authority key identifier: E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/5/3136352e3134302e3134322e302f32342d3234203d3e2037323537.roa
Signing time:             Tue 28 Jan 2025 06:56:35 +0000
ROA not before:           Tue 28 Jan 2025 06:51:35 +0000
ROA not after:            Tue 27 Jan 2026 06:56:35 +0000
asID:                     7257
IP address blocks:        165.140.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 09:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:81:7d:20:a0:b4:45:72:cc:67:21:63:db:c7:1c:89:b9:02:a3:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
        Validity
            Not Before: Jan 28 06:51:35 2025 GMT
            Not After : Jan 27 06:56:35 2026 GMT
        Subject: CN=BF6096252D858771B6C08DB503A87F39995C7516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:63:93:48:cb:8a:0f:0e:22:ec:bc:c6:5d:17:
                    66:39:b9:a8:bd:d5:80:07:e4:72:cb:c4:97:22:63:
                    62:24:11:68:c0:cd:6e:3c:44:fb:9a:b1:5c:d0:0b:
                    fa:cc:2f:1d:d4:95:5f:c5:a4:db:2f:e3:7e:c7:83:
                    cc:dc:df:7b:5e:6d:08:e1:11:86:a1:7b:d8:81:be:
                    5d:74:c9:46:ce:d9:e6:13:62:2b:cf:24:5e:f7:2d:
                    87:cd:74:b9:81:5a:31:70:f9:c3:8c:86:c1:fd:8e:
                    34:7f:24:bd:d2:07:30:91:22:a0:21:50:0d:da:de:
                    24:66:4b:d3:d8:d9:63:2b:25:eb:67:bb:8c:d0:83:
                    70:5c:ff:3d:e6:84:f7:27:d5:0f:04:52:73:33:7e:
                    02:07:bb:54:53:45:b6:ff:01:91:1a:4b:bc:9c:6e:
                    9d:24:d6:87:37:25:22:31:e6:a9:58:ce:ba:2c:02:
                    fb:2c:90:cc:f6:2b:99:43:da:b5:a9:ba:55:68:3f:
                    c2:3d:b7:bd:8c:9f:0d:cb:11:be:6e:f4:9c:16:a0:
                    a3:cd:5e:ff:80:c4:d4:6c:d0:88:e1:69:03:9b:53:
                    33:22:a2:e9:6f:ee:0c:73:56:eb:39:6d:70:52:ce:
                    7f:d7:fd:38:9a:d2:62:71:49:96:70:98:22:43:05:
                    0c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:60:96:25:2D:85:87:71:B6:C0:8D:B5:03:A8:7F:39:99:5C:75:16
            X509v3 Authority Key Identifier:
                keyid:E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/3136352e3134302e3134322e302f32342d3234203d3e2037323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:01:ae:5a:0f:6f:7c:04:87:13:f2:95:89:a2:88:5e:66:81:
         a1:a7:49:16:9a:2e:a3:db:c5:d9:24:f4:95:ef:7c:2b:31:fe:
         8d:87:49:6e:6f:47:30:4b:27:c5:c3:f7:73:13:94:f1:8a:05:
         0b:be:66:1b:a0:3a:4f:16:b4:48:e9:3d:3e:35:15:2c:13:81:
         3e:ea:27:96:6b:49:30:4f:17:92:87:cf:6e:4e:6c:dd:a7:f4:
         c6:1d:bb:9b:19:e8:6d:54:83:64:a7:6f:1f:66:9a:f4:1e:cc:
         f2:23:84:b6:ed:78:f1:fa:12:ab:bd:4b:a9:9a:a4:50:2e:b2:
         66:27:f2:ee:59:54:fc:57:c2:c0:38:2c:01:ae:59:c4:a2:a7:
         b2:57:23:dd:0c:ba:4d:76:e0:25:48:38:1d:e2:23:c9:fa:92:
         fd:40:66:52:02:34:ed:43:78:f1:08:82:49:bc:dc:1a:0b:8a:
         f5:1e:7c:5c:47:cc:f9:e1:9e:0e:24:7a:58:42:ab:d4:09:43:
         94:50:db:9d:12:7e:ee:39:6a:b7:62:30:95:68:5c:f9:4f:aa:
         0c:2c:7e:1c:3b:08:0b:88:2a:12:70:51:a2:1d:05:56:1e:4e:
         1c:fc:00:2c:d4:8e:48:f7:46:c1:75:a4:dc:24:dd:30:64:1b:
         78:d8:38:e4
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgIUNIF9IKC0RXLMZyFj28ccibkCo18wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMDkzNDdlNGMzZTcxZGRjODIxMmFkYTNj
OGEzYzZkOTNhZDMzNmFmZDUwHhcNMjUwMTI4MDY1MTM1WhcNMjYwMTI3MDY1NjM1
WjAzMTEwLwYDVQQDEyhCRjYwOTYyNTJEODU4NzcxQjZDMDhEQjUwM0E4N0YzOTk5
NUM3NTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWOTSMuKDw4i
7LzGXRdmObmovdWAB+Ryy8SXImNiJBFowM1uPET7mrFc0Av6zC8d1JVfxaTbL+N+
x4PM3N97Xm0I4RGGoXvYgb5ddMlGztnmE2IrzyRe9y2HzXS5gVoxcPnDjIbB/Y40
fyS90gcwkSKgIVAN2t4kZkvT2NljKyXrZ7uM0INwXP895oT3J9UPBFJzM34CB7tU
U0W2/wGRGku8nG6dJNaHNyUiMeapWM66LAL7LJDM9iuZQ9q1qbpVaD/CPbe9jJ8N
yxG+bvScFqCjzV7/gMTUbNCI4WkDm1MzIqLpb+4Mc1brOW1wUs5/1/04mtJicUmW
cJgiQwUMCwIDAQABo4ICZDCCAmAwHQYDVR0OBBYEFL9gliUthYdxtsCNtQOofzmZ
XHUWMB8GA1UdIwQYMBaAFONT12yiGsl9Z78skYN8TxeJJEJyMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL290by53YWt1d2FrdS5uZS5q
cC9wa2kvaGEvNS9FMzUzRDc2Q0EyMUFDOTdENjdCRjJDOTE4MzdDNEYxNzg5MjQ0
MjcyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05NjcyLTRjZDkt
YWNjZS0xMzcyMjdlOTcxYWMvZjFhYjhkNDUtYTFhZS00MDhhLTllNDUtYjA0ZmRk
NjYzZjM3LzY1MDZhNjZlZDA5MzQ3ZTRjM2U3MWRkYzgyMTJhZGEzYzhhM2M2ZDkz
YWQzMzZhZmQ1LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5j
Oi8vb3RvLndha3V3YWt1Lm5lLmpwL3BraS9oYS81LzMxMzYzNTJlMzEzNDMwMmUz
MTM0MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNzMyMzUzNy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
AKWMjjANBgkqhkiG9w0BAQsFAAOCAQEAmgGuWg9vfASHE/KViaKIXmaBoadJFpou
o9vF2ST0le98KzH+jYdJbm9HMEsnxcP3cxOU8YoFC75mG6A6Txa0SOk9PjUVLBOB
PuonlmtJME8XkofPbk5s3af0xh27mxnobVSDZKdvH2aa9B7M8iOEtu148foSq71L
qZqkUC6yZify7llU/FfCwDgsAa5ZxKKnslcj3Qy6TXbgJUg4HeIjyfqS/UBmUgI0
7UN48QiCSbzcGguK9R58XEfM+eGeDiR6WEKr1AlDlFDbnRJ+7jlqt2IwlWhc+U+q
DCx+HDsIC4gqEnBRoh0FVh5OHPwALNSOSPdGwXWk3CTdMGQbeNg45A==
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:57:50 2025 by rpki-client