Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/5/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
File:                     3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa (raw, json)
Hash identifier:          df82LJw4olpPdc4fdFAWhIuV1YH6rkxgpQcs7mLre/E=
Subject key identifier:   93:64:36:70:61:9C:F8:FA:8D:18:84:9A:E5:02:D6:18:A5:F3:60:2C
Certificate issuer:       /CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
Certificate serial:       24FAC1BC64824EAB8DA69DAC43136FC8C56A0834
Authority key identifier: E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/5/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
Signing time:             Mon 06 Jan 2025 19:44:30 +0000
ROA not before:           Mon 06 Jan 2025 19:39:30 +0000
ROA not after:            Mon 05 Jan 2026 19:44:30 +0000
asID:                     207731
IP address blocks:        216.146.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 09:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:fa:c1:bc:64:82:4e:ab:8d:a6:9d:ac:43:13:6f:c8:c5:6a:08:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
        Validity
            Not Before: Jan  6 19:39:30 2025 GMT
            Not After : Jan  5 19:44:30 2026 GMT
        Subject: CN=93643670619CF8FA8D18849AE502D618A5F3602C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:68:86:f8:14:dc:05:f8:fe:67:3b:dd:29:c5:
                    0a:59:37:93:0c:43:9a:f3:e2:f9:8a:ff:c9:6e:3b:
                    2f:47:0f:8f:ff:3e:57:76:88:de:2b:35:c2:2d:71:
                    70:78:08:6c:6b:00:f0:8c:3f:ae:80:ca:d7:e0:80:
                    73:e6:fe:21:6a:17:4f:1c:f6:08:42:99:f9:8d:88:
                    44:7c:d0:a4:aa:c1:fb:3f:a8:ec:35:03:63:c2:7b:
                    66:30:54:18:30:10:e9:30:64:eb:48:de:11:6a:0c:
                    72:77:e6:21:66:64:09:33:9a:7a:dc:03:91:d6:14:
                    61:fd:17:e6:66:98:ac:18:59:7a:02:1f:3b:8a:0d:
                    75:48:41:0f:25:d6:66:ac:e7:0f:5c:9d:cd:12:03:
                    a5:bb:43:e8:ec:dd:3c:ed:49:e9:0b:f1:51:7b:05:
                    f3:b8:7f:ff:c9:ca:71:3d:c0:d1:0c:75:04:db:28:
                    de:12:8d:7d:55:c5:ca:75:27:fb:61:6f:79:99:1a:
                    65:f2:64:f6:2c:11:fe:3e:68:00:59:cb:20:0c:9d:
                    f7:92:a4:23:25:d5:ca:11:0f:ce:e5:8e:4d:88:8c:
                    e4:05:c5:b5:b1:e7:b1:ea:1e:2f:93:f4:8d:81:bc:
                    f0:ce:2c:72:17:0e:40:63:70:7c:bc:ff:d1:b5:0c:
                    6f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:64:36:70:61:9C:F8:FA:8D:18:84:9A:E5:02:D6:18:A5:F3:60:2C
            X509v3 Authority Key Identifier:
                keyid:E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:32:4d:0f:7d:18:c0:a7:26:77:7e:82:8c:5d:cc:d8:53:81:
         cc:a7:9e:ae:e1:df:d7:70:17:8f:a3:32:bd:52:6b:f7:89:7a:
         2e:87:07:38:7f:6a:3c:cc:0d:4c:47:25:33:3f:50:91:52:00:
         c5:b2:24:67:79:80:85:2a:91:76:6f:e1:26:79:ff:9e:d6:1b:
         02:be:2e:22:03:0d:26:64:a0:41:a8:fc:80:b8:d0:bf:97:cd:
         44:33:11:50:c5:d6:62:13:62:a0:6e:40:b7:ca:65:f9:d0:e7:
         42:3b:d8:53:63:62:48:f2:2d:68:c5:b9:92:02:65:0a:d1:c2:
         91:ae:49:a4:4e:22:67:74:23:ee:89:63:c4:94:88:ef:a5:55:
         d9:e1:59:88:76:78:e6:65:ca:14:ba:f7:d1:ce:ee:be:33:58:
         91:9e:f8:60:07:f2:e5:f9:50:7c:5a:8e:74:64:7b:23:ba:bb:
         11:5b:3e:51:a8:ec:ff:39:1e:db:5d:0a:f6:ad:3e:7e:6a:83:
         3a:fa:cf:eb:0e:1f:01:62:b0:77:c9:e1:64:af:59:ca:a0:2f:
         fc:61:2c:4f:38:13:9b:e7:3a:77:d7:d2:2a:b1:56:7d:9f:bf:
         70:ae:52:8e:47:a1:68:8b:e6:43:e2:04:b0:cb:79:7b:1c:d8:
         df:95:9a:f2
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIUJPrBvGSCTquNpp2sQxNvyMVqCDQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMDkzNDdlNGMzZTcxZGRjODIxMmFkYTNj
OGEzYzZkOTNhZDMzNmFmZDUwHhcNMjUwMTA2MTkzOTMwWhcNMjYwMTA1MTk0NDMw
WjAzMTEwLwYDVQQDEyg5MzY0MzY3MDYxOUNGOEZBOEQxODg0OUFFNTAyRDYxOEE1
RjM2MDJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWiG+BTcBfj+
ZzvdKcUKWTeTDEOa8+L5iv/JbjsvRw+P/z5XdojeKzXCLXFweAhsawDwjD+ugMrX
4IBz5v4hahdPHPYIQpn5jYhEfNCkqsH7P6jsNQNjwntmMFQYMBDpMGTrSN4Ragxy
d+YhZmQJM5p63AOR1hRh/RfmZpisGFl6Ah87ig11SEEPJdZmrOcPXJ3NEgOlu0Po
7N087UnpC/FRewXzuH//ycpxPcDRDHUE2yjeEo19VcXKdSf7YW95mRpl8mT2LBH+
PmgAWcsgDJ33kqQjJdXKEQ/O5Y5NiIzkBcW1seex6h4vk/SNgbzwzixyFw5AY3B8
vP/RtQxvKQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJNkNnBhnPj6jRiEmuUC1hil
82AsMB8GA1UdIwQYMBaAFONT12yiGsl9Z78skYN8TxeJJEJyMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL290by53YWt1d2FrdS5uZS5q
cC9wa2kvaGEvNS9FMzUzRDc2Q0EyMUFDOTdENjdCRjJDOTE4MzdDNEYxNzg5MjQ0
MjcyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05NjcyLTRjZDkt
YWNjZS0xMzcyMjdlOTcxYWMvZjFhYjhkNDUtYTFhZS00MDhhLTllNDUtYjA0ZmRk
NjYzZjM3LzY1MDZhNjZlZDA5MzQ3ZTRjM2U3MWRkYzgyMTJhZGEzYzhhM2M2ZDkz
YWQzMzZhZmQ1LmNlcjB8BggrBgEFBQcBCwRwMG4wbAYIKwYBBQUHMAuGYHJzeW5j
Oi8vb3RvLndha3V3YWt1Lm5lLmpwL3BraS9oYS81LzMyMzEzNjJlMzEzNDM2MmUz
MzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMDM3MzczMzMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG
AwQA2JIfMA0GCSqGSIb3DQEBCwUAA4IBAQC5Mk0PfRjApyZ3foKMXczYU4HMp56u
4d/XcBePozK9Umv3iXouhwc4f2o8zA1MRyUzP1CRUgDFsiRneYCFKpF2b+Emef+e
1hsCvi4iAw0mZKBBqPyAuNC/l81EMxFQxdZiE2KgbkC3ymX50OdCO9hTY2JI8i1o
xbmSAmUK0cKRrkmkTiJndCPuiWPElIjvpVXZ4VmIdnjmZcoUuvfRzu6+M1iRnvhg
B/Ll+VB8Wo50ZHsjursRWz5RqOz/OR7bXQr2rT5+aoM6+s/rDh8BYrB3yeFkr1nK
oC/8YSxPOBOb5zp319IqsVZ9n79wrlKOR6Foi+ZD4gSwy3l7HNjflZry
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:57:51 2025 by rpki-client