Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/5/3231362e3134362e32382e302f32332d3234203d3e203632343839.roa
File:                     3231362e3134362e32382e302f32332d3234203d3e203632343839.roa (raw, json)
Hash identifier:          Hzavyqu94FsHj6mOr4qMQC+L6QEtPTeb+grz4Hl3fYY=
Subject key identifier:   EB:01:63:D8:28:E3:B2:FE:D7:21:A2:EE:D9:A3:C3:00:A8:9C:80:19
Certificate issuer:       /CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
Certificate serial:       6A25BAE81370FE7F79F0AAA4CFEF6D76F55EB738
Authority key identifier: E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/5/3231362e3134362e32382e302f32332d3234203d3e203632343839.roa
Signing time:             Sun 26 Jan 2025 06:29:28 +0000
ROA not before:           Sun 26 Jan 2025 06:24:28 +0000
ROA not after:            Sun 25 Jan 2026 06:29:28 +0000
asID:                     62489
IP address blocks:        216.146.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 09:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:25:ba:e8:13:70:fe:7f:79:f0:aa:a4:cf:ef:6d:76:f5:5e:b7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
        Validity
            Not Before: Jan 26 06:24:28 2025 GMT
            Not After : Jan 25 06:29:28 2026 GMT
        Subject: CN=EB0163D828E3B2FED721A2EED9A3C300A89C8019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bb:a1:bc:97:05:1f:00:34:38:93:fa:8f:26:
                    a1:ae:98:00:fc:99:dd:d2:b4:1c:1c:52:e1:cf:2e:
                    62:63:f6:8e:0e:e3:60:ee:3a:1e:f1:31:3b:e7:4a:
                    df:2d:28:37:53:9c:73:e6:56:36:7f:3f:f3:bf:40:
                    b9:4a:4d:3d:c8:96:bb:f4:90:7d:e1:ba:17:32:64:
                    d3:f3:ae:47:71:a1:08:b6:0c:bb:f9:f8:04:48:94:
                    4d:8b:60:c9:8e:6f:79:9c:d5:2b:46:6c:d6:c6:77:
                    41:ae:6e:f1:72:ad:95:3a:6b:35:5d:fa:65:cd:c8:
                    62:12:35:32:62:f7:b8:b3:ba:91:ae:78:c6:b6:41:
                    c1:9a:eb:a9:1e:c6:75:b2:31:f1:90:4c:09:02:78:
                    9a:30:65:71:d8:6c:91:db:31:57:c3:ae:55:05:12:
                    eb:4e:75:86:4f:a0:69:a3:a4:79:87:46:23:b7:88:
                    56:8a:44:c7:a3:22:94:70:64:5c:03:35:b7:6b:c1:
                    f7:6c:ac:86:b5:38:1e:bc:c2:bb:17:5f:96:6b:28:
                    7e:e5:91:14:3d:26:fc:e5:ab:39:20:06:55:e0:9f:
                    3f:13:81:29:39:27:c3:1d:ea:6b:58:1c:84:d0:5f:
                    f8:f7:d7:12:74:b4:45:82:ab:4a:f2:9e:86:ab:56:
                    45:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:01:63:D8:28:E3:B2:FE:D7:21:A2:EE:D9:A3:C3:00:A8:9C:80:19
            X509v3 Authority Key Identifier:
                keyid:E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/3231362e3134362e32382e302f32332d3234203d3e203632343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:99:d1:b4:1f:ae:6c:90:8a:f9:8d:92:f0:bc:3f:1e:cf:98:
         23:e5:82:b9:21:47:60:26:9c:65:08:af:18:e0:68:cb:a5:ac:
         a4:0f:c4:a3:ff:c4:2b:61:9f:f4:aa:bb:a5:86:a2:ba:b2:e8:
         33:6e:79:3e:ed:3c:ea:70:b9:2e:b2:57:cd:7d:f1:eb:fd:e9:
         93:3f:cd:7a:d2:3c:ef:40:6b:52:19:c7:67:98:09:43:84:ce:
         7a:d3:e0:b6:b8:1b:1d:9b:20:06:ae:a0:59:e9:90:89:51:50:
         a0:f4:7a:3a:22:93:58:df:4b:52:1d:e3:98:1b:2d:55:72:2a:
         3e:20:ac:54:58:3a:ac:4a:39:65:d0:1b:3d:cc:4d:07:92:d3:
         13:b6:6c:95:d4:be:bb:f5:35:14:ba:18:7b:bc:70:b2:00:88:
         67:d2:17:22:bc:b0:07:31:55:28:52:15:2a:66:5a:9f:6e:ef:
         e6:f8:b3:18:7b:36:bd:6c:cf:8b:c4:49:f7:09:dc:35:9e:80:
         98:62:ee:74:5d:ce:8b:4d:2e:2a:5c:bf:b1:62:36:e4:1b:88:
         6a:9a:48:a8:ae:51:13:c6:b5:c2:41:51:73:b4:56:cb:59:b7:
         83:b9:96:0e:7c:ec:e9:39:01:4b:5f:c9:f8:fd:53:87:8e:44:
         31:32:32:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:53:18 2025 by rpki-client