Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/5/3231362e3134362e32382e302f32322d3234203d3e20393435.roa
File:                     3231362e3134362e32382e302f32322d3234203d3e20393435.roa (raw, json)
Hash identifier:          hIDHtBWHafX9hz8VaBKEeP8smamBXDwTm3AGYU/MRQc=
Subject key identifier:   BD:48:E5:EC:9E:DB:2C:EA:6E:B7:0F:05:3F:BE:2B:EB:1D:7F:29:8A
Certificate issuer:       /CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
Certificate serial:       2EB1D4D66B9C0ED1C41FB46D61CF92F40C26F933
Authority key identifier: E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/5/3231362e3134362e32382e302f32322d3234203d3e20393435.roa
Signing time:             Thu 09 Jan 2025 18:28:42 +0000
ROA not before:           Thu 09 Jan 2025 18:23:42 +0000
ROA not after:            Thu 08 Jan 2026 18:28:42 +0000
asID:                     945
IP address blocks:        216.146.28.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Feb 2025 15:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b1:d4:d6:6b:9c:0e:d1:c4:1f:b4:6d:61:cf:92:f4:0c:26:f9:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
        Validity
            Not Before: Jan  9 18:23:42 2025 GMT
            Not After : Jan  8 18:28:42 2026 GMT
        Subject: CN=BD48E5EC9EDB2CEA6EB70F053FBE2BEB1D7F298A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e9:5e:c8:b0:45:9b:2e:58:17:c7:b4:db:a5:
                    80:78:a2:a7:bd:94:21:75:96:e4:87:30:00:79:b2:
                    c8:c5:b1:73:6e:2c:80:79:75:2b:03:aa:94:74:88:
                    dd:01:b0:60:49:b9:87:ff:d7:ec:0d:7b:ee:3e:84:
                    47:78:68:af:bd:d8:9d:fb:b7:89:57:6d:2c:18:75:
                    b2:de:1f:97:4c:47:69:94:c1:1c:e9:6b:7d:ae:0b:
                    5e:f8:cf:21:76:35:5b:ad:03:ab:0d:2c:80:4f:66:
                    e3:27:af:98:d4:22:1d:d8:4e:1e:b3:0c:f1:e3:ad:
                    ac:0c:2c:6c:69:a7:dc:70:cb:64:a8:19:67:0f:aa:
                    a0:68:20:88:9a:03:35:d8:cf:36:bb:7b:c7:15:61:
                    37:9c:14:6c:3b:44:87:02:b8:ea:54:d7:c5:0c:e4:
                    f2:f2:d2:6d:af:54:44:23:79:1f:78:87:8c:f0:17:
                    87:66:e0:90:26:0c:43:8e:00:6d:ed:49:50:0c:0b:
                    ca:23:6a:83:e1:d7:e5:2b:81:9c:4b:e9:8e:c5:b0:
                    93:57:c8:b0:ac:7b:19:44:eb:09:d1:95:a6:44:6a:
                    8a:1e:58:0a:c1:e9:fd:73:3f:cb:3e:e5:08:33:a4:
                    fc:05:38:b9:80:0b:0f:f2:85:b0:3c:2b:08:98:e5:
                    58:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:48:E5:EC:9E:DB:2C:EA:6E:B7:0F:05:3F:BE:2B:EB:1D:7F:29:8A
            X509v3 Authority Key Identifier:
                keyid:E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/3231362e3134362e32382e302f32322d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:19:f4:63:9e:c9:15:b0:55:75:c8:05:6b:5e:49:a0:20:c6:
         65:61:2d:65:54:8e:07:6d:ce:e6:46:fe:71:b2:4d:82:c8:fa:
         d8:2f:9f:5b:72:2e:99:1a:77:e2:ca:ff:e5:b5:e1:c6:33:2a:
         a3:7d:89:12:f6:a3:e2:4c:f7:87:c9:50:6e:b5:e0:d0:7e:7f:
         5d:d7:c7:6f:a4:bc:12:b7:e9:95:a1:b5:3f:bb:16:27:6e:b7:
         0f:26:82:d6:6c:73:e7:22:7d:66:2d:e8:36:a0:08:26:47:31:
         26:ee:53:cf:11:64:31:cd:25:88:ac:76:40:25:8e:bd:7f:a2:
         3f:a4:02:bf:ad:e7:e4:88:fe:64:51:4d:06:4a:2c:53:c6:a3:
         b2:ac:53:c9:2d:24:06:71:f8:6f:c1:82:a1:2b:9e:67:10:1d:
         0c:24:84:d1:c1:b3:b8:a3:0a:8c:94:76:36:36:45:57:e8:17:
         fc:70:29:57:01:b5:e0:6e:00:7b:b6:b3:9d:e1:95:22:a9:8a:
         7e:7c:ed:59:c6:95:bf:2f:16:2f:58:1f:6d:39:d8:b7:48:18:
         c3:50:a7:41:98:ff:30:94:d4:82:3f:2b:2f:48:32:04:75:38:
         e2:1d:8b:02:fa:37:9a:a9:d8:de:b9:a5:17:94:a3:8c:54:8b:
         78:5e:b4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 04:47:34 2025 by rpki-client