Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/5/323630323a666266363a3a2f33362d3438203d3e203632383533.roa
File:                     323630323a666266363a3a2f33362d3438203d3e203632383533.roa (raw, json)
Hash identifier:          zIT6uyWmlCgYWPbeBKlS/q7oQrZbCrbOMOdJDRLyxJU=
Subject key identifier:   CA:DA:48:BF:D1:0A:D5:29:18:46:4F:62:60:11:4B:53:1B:9D:22:3C
Certificate issuer:       /CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
Certificate serial:       21383692C88F323BFF8A35893D500DE3D5F08046
Authority key identifier: E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/5/323630323a666266363a3a2f33362d3438203d3e203632383533.roa
Signing time:             Mon 03 Feb 2025 15:23:07 +0000
ROA not before:           Mon 03 Feb 2025 15:18:07 +0000
ROA not after:            Mon 02 Feb 2026 15:23:07 +0000
asID:                     62853
IP address blocks:        2602:fbf6::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 09:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:38:36:92:c8:8f:32:3b:ff:8a:35:89:3d:50:0d:e3:d5:f0:80:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
        Validity
            Not Before: Feb  3 15:18:07 2025 GMT
            Not After : Feb  2 15:23:07 2026 GMT
        Subject: CN=CADA48BFD10AD52918464F6260114B531B9D223C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:60:92:51:96:06:06:ef:8c:bf:38:51:4b:e9:
                    18:b9:e7:17:55:2e:1f:14:63:09:36:7e:1c:aa:1a:
                    9c:fe:eb:bf:94:2b:9a:c7:fc:d9:82:d5:65:f5:6e:
                    ed:27:0d:2d:21:6f:3d:f6:5f:b7:f6:bd:f6:43:7d:
                    75:0a:ad:4e:88:24:77:70:10:36:f6:a4:1b:ce:41:
                    6e:f0:ed:f9:e4:eb:27:18:36:8d:5f:82:f5:80:ec:
                    b3:0f:a4:a1:25:98:91:ac:ca:ab:38:d9:64:65:7c:
                    70:4c:e3:f7:00:5d:b8:fb:8b:22:6b:34:6f:4a:af:
                    94:a9:62:9e:14:a2:e1:01:65:a7:91:5e:b3:8e:be:
                    0f:3a:e9:65:c8:04:4e:d0:fb:55:db:2d:7c:7b:50:
                    1e:bc:e2:72:ef:a5:02:12:b3:90:1f:0d:99:14:e2:
                    50:03:a4:ce:e9:dd:05:9e:ba:6d:64:b6:cc:38:1e:
                    ee:a6:fe:e2:7e:ac:04:aa:a2:ac:6c:57:03:cd:37:
                    c9:3a:e6:9a:a3:12:78:e9:86:a3:fa:1e:07:16:7a:
                    43:5f:0a:92:44:5f:a3:46:60:4e:c7:63:6e:f5:72:
                    a1:b0:9c:f2:40:e6:19:09:8f:64:73:98:d6:23:ab:
                    9f:30:41:a5:bd:b2:53:f6:ec:4e:ec:63:5a:36:b9:
                    cd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DA:48:BF:D1:0A:D5:29:18:46:4F:62:60:11:4B:53:1B:9D:22:3C
            X509v3 Authority Key Identifier:
                keyid:E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/323630323a666266363a3a2f33362d3438203d3e203632383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fbf6::/36

    Signature Algorithm: sha256WithRSAEncryption
         8c:22:09:58:8d:26:5a:be:8c:2a:e4:6f:43:b0:eb:d6:1d:ff:
         a8:59:64:49:26:f6:3c:0e:66:fb:db:ba:2e:e3:37:ad:93:0f:
         53:b8:0c:89:c0:c8:af:ae:9b:f3:b1:1b:e8:b8:3a:cc:e2:5e:
         bf:23:6a:65:36:ba:96:4e:9a:b8:6d:83:b7:ce:6b:d2:18:ea:
         68:cd:1e:5f:a3:f3:ae:95:15:70:e1:86:86:c4:a6:3e:dc:89:
         2a:1a:63:ee:40:3e:fc:d2:da:2a:91:f7:59:71:b0:c2:6a:05:
         ad:a3:5f:6b:aa:0b:eb:31:30:74:cf:a9:93:53:60:a5:c2:1a:
         3b:db:2d:b9:96:f9:c2:a7:8c:53:e8:ea:ba:73:ba:3a:25:62:
         4c:34:f0:fb:f3:08:cd:ca:31:11:dd:59:9d:79:20:03:24:58:
         bf:ed:a0:a6:67:26:cc:9a:22:df:1a:48:34:c1:a3:77:61:0c:
         4e:5c:6d:b0:ad:0f:d7:00:67:b4:00:bd:dc:5e:45:56:0c:6b:
         b1:23:d1:7f:95:5f:9c:e8:c2:0d:0b:2f:11:26:00:a0:14:50:
         6e:52:11:d3:9b:23:4c:52:d0:ab:a1:e2:1e:82:00:a0:ce:58:
         d6:0c:1e:25:cf:de:4d:3d:68:94:58:93:65:4d:60:39:e8:b9:
         e7:16:98:70
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgIUITg2ksiPMjv/ijWJPVAN49XwgEYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUwNmE2NmVkMDkzNDdlNGMzZTcxZGRjODIxMmFkYTNj
OGEzYzZkOTNhZDMzNmFmZDUwHhcNMjUwMjAzMTUxODA3WhcNMjYwMjAyMTUyMzA3
WjAzMTEwLwYDVQQDEyhDQURBNDhCRkQxMEFENTI5MTg0NjRGNjI2MDExNEI1MzFC
OUQyMjNDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGCSUZYGBu+M
vzhRS+kYuecXVS4fFGMJNn4cqhqc/uu/lCuax/zZgtVl9W7tJw0tIW899l+39r32
Q311Cq1OiCR3cBA29qQbzkFu8O355OsnGDaNX4L1gOyzD6ShJZiRrMqrONlkZXxw
TOP3AF24+4siazRvSq+UqWKeFKLhAWWnkV6zjr4POullyARO0PtV2y18e1AevOJy
76UCErOQHw2ZFOJQA6TO6d0FnrptZLbMOB7upv7ifqwEqqKsbFcDzTfJOuaaoxJ4
6Yaj+h4HFnpDXwqSRF+jRmBOx2Nu9XKhsJzyQOYZCY9kc5jWI6ufMEGlvbJT9uxO
7GNaNrnNewIDAQABo4ICZDCCAmAwHQYDVR0OBBYEFMraSL/RCtUpGEZPYmARS1Mb
nSI8MB8GA1UdIwQYMBaAFONT12yiGsl9Z78skYN8TxeJJEJyMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL290by53YWt1d2FrdS5uZS5q
cC9wa2kvaGEvNS9FMzUzRDc2Q0EyMUFDOTdENjdCRjJDOTE4MzdDNEYxNzg5MjQ0
MjcyLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05NjcyLTRjZDkt
YWNjZS0xMzcyMjdlOTcxYWMvZjFhYjhkNDUtYTFhZS00MDhhLTllNDUtYjA0ZmRk
NjYzZjM3LzY1MDZhNjZlZDA5MzQ3ZTRjM2U3MWRkYzgyMTJhZGEzYzhhM2M2ZDkz
YWQzMzZhZmQ1LmNlcjB4BggrBgEFBQcBCwRsMGowaAYIKwYBBQUHMAuGXHJzeW5j
Oi8vb3RvLndha3V3YWt1Lm5lLmpwL3BraS9oYS81LzMyMzYzMDMyM2E2NjYyNjYz
NjNhM2EyZjMzMzYyZDM0MzgyMDNkM2UyMDM2MzIzODM1MzMucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQm
Avv2ADANBgkqhkiG9w0BAQsFAAOCAQEAjCIJWI0mWr6MKuRvQ7Dr1h3/qFlkSSb2
PA5m+9u6LuM3rZMPU7gMicDIr66b87Eb6Lg6zOJevyNqZTa6lk6auG2Dt85r0hjq
aM0eX6PzrpUVcOGGhsSmPtyJKhpj7kA+/NLaKpH3WXGwwmoFraNfa6oL6zEwdM+p
k1NgpcIaO9stuZb5wqeMU+jqunO6OiViTDTw+/MIzcoxEd1ZnXkgAyRYv+2gpmcm
zJoi3xpINMGjd2EMTlxtsK0P1wBntAC93F5FVgxrsSPRf5VfnOjCDQsvESYAoBRQ
blIR05sjTFLQq6HiHoIAoM5Y1gweJc/eTT1olFiTZU1gOei55xaYcA==
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:52:39 2025 by rpki-client