Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/5/3231362e3134362e33302e302f32342d3234203d3e203130313033.roa
File:                     3231362e3134362e33302e302f32342d3234203d3e203130313033.roa (raw, json)
Hash identifier:          NnvYp9IhPIdQdoDkgCPuh6xoS9EzxZ7R/cBcfSkEMow=
Subject key identifier:   1F:72:D2:86:7A:AF:36:78:27:47:0B:B0:AE:12:21:99:29:EA:2E:51
Certificate issuer:       /CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
Certificate serial:       69324F0B8244749EA3259FFBA646AB2C2A936783
Authority key identifier: E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/5/3231362e3134362e33302e302f32342d3234203d3e203130313033.roa
Signing time:             Mon 06 Jan 2025 19:44:30 +0000
ROA not before:           Mon 06 Jan 2025 19:39:30 +0000
ROA not after:            Mon 05 Jan 2026 19:44:30 +0000
asID:                     10103
IP address blocks:        216.146.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 09:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:32:4f:0b:82:44:74:9e:a3:25:9f:fb:a6:46:ab:2c:2a:93:67:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
        Validity
            Not Before: Jan  6 19:39:30 2025 GMT
            Not After : Jan  5 19:44:30 2026 GMT
        Subject: CN=1F72D2867AAF367827470BB0AE12219929EA2E51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:a6:1d:7a:d6:06:59:b7:40:a3:27:b3:fa:
                    60:5a:10:d4:48:37:b4:05:1c:44:6f:3f:24:ff:e3:
                    cc:6a:da:34:1f:01:73:87:b0:9b:96:52:84:2c:60:
                    57:c9:c9:d1:03:f9:90:c6:0c:62:c3:6d:fa:90:19:
                    3b:9e:d1:f2:79:6b:23:d1:ca:c5:d0:fd:6c:be:92:
                    f5:e2:a7:58:48:6a:e9:57:e7:60:0a:14:fe:d7:5c:
                    56:d3:b5:5d:20:22:25:e3:74:70:87:d7:3c:47:45:
                    a3:f4:7f:e3:13:14:05:23:9a:86:3f:2c:0a:7d:11:
                    a3:ef:4f:93:dc:e2:73:84:d2:f7:83:b1:32:05:b7:
                    9b:c0:3d:3b:4b:0d:9a:d2:5a:92:c8:3e:a2:cb:0c:
                    45:42:c4:2b:b9:04:a9:0c:7f:b7:be:60:0f:0c:d0:
                    96:ef:60:54:7a:ea:d4:42:18:27:78:15:c4:f1:aa:
                    2f:d9:05:73:e0:74:d3:b7:1c:ff:b6:22:e5:9c:86:
                    a1:e5:c5:3b:0c:93:c9:52:ed:bb:95:34:a7:df:87:
                    d6:a9:bf:3e:2f:0b:21:5b:6f:ff:b3:f1:cc:0b:49:
                    a8:fb:69:17:5d:51:d9:42:19:df:e3:14:17:68:89:
                    c4:8a:f1:f8:c5:db:6c:bc:fe:78:e4:1d:37:9e:da:
                    44:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:72:D2:86:7A:AF:36:78:27:47:0B:B0:AE:12:21:99:29:EA:2E:51
            X509v3 Authority Key Identifier:
                keyid:E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/3231362e3134362e33302e302f32342d3234203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:f4:42:9d:a6:a2:f5:20:fc:91:48:99:e6:99:10:a6:10:87:
         f9:6c:6c:46:16:e7:48:8e:dd:f8:13:04:1c:e4:96:02:73:51:
         50:5e:cf:a4:71:24:d4:2a:68:09:fc:72:c9:1e:61:c2:28:46:
         3f:e2:50:a5:f1:90:04:12:e0:42:da:cf:28:27:4f:0a:0b:ef:
         a0:55:b5:3f:e5:36:0f:24:75:e6:08:5c:7d:65:20:9e:2d:80:
         1c:23:d3:52:39:9a:15:22:c1:24:b3:e1:7d:f0:dd:8d:50:7e:
         38:43:e3:93:7c:87:ff:a5:98:e9:7c:86:cf:8e:73:4f:b3:dc:
         12:8c:a7:e4:59:b9:77:81:2b:dd:72:e6:b8:cf:94:39:e7:eb:
         3b:46:a5:4a:0a:42:c2:cc:ec:11:54:91:20:48:31:d3:62:38:
         0f:1a:e6:b8:bf:15:bb:40:b9:aa:5a:20:89:07:0d:98:8f:e8:
         9e:c4:ee:a1:ec:6d:70:70:43:64:d5:70:e1:21:28:76:66:af:
         b8:c9:87:37:1b:f2:d4:5f:9c:44:88:78:d0:ae:39:58:6d:ce:
         90:fe:c7:89:ce:45:00:6d:b5:da:03:a1:bc:68:cd:53:de:07:
         56:f1:cc:4e:72:28:3c:f7:7a:9f:1a:23:d9:1f:ee:ef:3b:04:
         9b:4c:e9:cf
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgIUaTJPC4JEdJ6jJZ/7pkarLCqTZ4MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMDkzNDdlNGMzZTcxZGRjODIxMmFkYTNj
OGEzYzZkOTNhZDMzNmFmZDUwHhcNMjUwMTA2MTkzOTMwWhcNMjYwMTA1MTk0NDMw
WjAzMTEwLwYDVQQDEygxRjcyRDI4NjdBQUYzNjc4Mjc0NzBCQjBBRTEyMjE5OTI5
RUEyRTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrSmHXrWBlm3
QKMns/pgWhDUSDe0BRxEbz8k/+PMato0HwFzh7CbllKELGBXycnRA/mQxgxiw236
kBk7ntHyeWsj0crF0P1svpL14qdYSGrpV+dgChT+11xW07VdICIl43Rwh9c8R0Wj
9H/jExQFI5qGPywKfRGj70+T3OJzhNL3g7EyBbebwD07Sw2a0lqSyD6iywxFQsQr
uQSpDH+3vmAPDNCW72BUeurUQhgneBXE8aov2QVz4HTTtxz/tiLlnIah5cU7DJPJ
Uu27lTSn34fWqb8+LwshW2//s/HMC0mo+2kXXVHZQhnf4xQXaInEivH4xdtsvP54
5B03ntpEowIDAQABo4ICZDCCAmAwHQYDVR0OBBYEFB9y0oZ6rzZ4J0cLsK4SIZkp
6i5RMB8GA1UdIwQYMBaAFONT12yiGsl9Z78skYN8TxeJJEJyMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL290by53YWt1d2FrdS5uZS5q
cC9wa2kvaGEvNS9FMzUzRDc2Q0EyMUFDOTdENjdCRjJDOTE4MzdDNEYxNzg5MjQ0
MjcyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05NjcyLTRjZDkt
YWNjZS0xMzcyMjdlOTcxYWMvZjFhYjhkNDUtYTFhZS00MDhhLTllNDUtYjA0ZmRk
NjYzZjM3LzY1MDZhNjZlZDA5MzQ3ZTRjM2U3MWRkYzgyMTJhZGEzYzhhM2M2ZDkz
YWQzMzZhZmQ1LmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5j
Oi8vb3RvLndha3V3YWt1Lm5lLmpwL3BraS9oYS81LzMyMzEzNjJlMzEzNDM2MmUz
MzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMDMxMzAzMy5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANiSHjANBgkqhkiG9w0BAQsFAAOCAQEACfRCnaai9SD8kUiZ5pkQphCH+WxsRhbn
SI7d+BMEHOSWAnNRUF7PpHEk1CpoCfxyyR5hwihGP+JQpfGQBBLgQtrPKCdPCgvv
oFW1P+U2DyR15ghcfWUgni2AHCPTUjmaFSLBJLPhffDdjVB+OEPjk3yH/6WY6XyG
z45zT7PcEoyn5Fm5d4Er3XLmuM+UOefrO0alSgpCwszsEVSRIEgx02I4DxrmuL8V
u0C5qlogiQcNmI/onsTuoextcHBDZNVw4SEodmavuMmHNxvy1F+cRIh40K45WG3O
kP7Hic5FAG212gOhvGjNU94HVvHMTnIoPPd6nxoj2R/u7zsEm0zpzw==
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:54:26 2025 by rpki-client