Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6263303a3a2f34342d3438203d3e20323039323937.roa
File:                     323630323a666564613a6263303a3a2f34342d3438203d3e20323039323937.roa (raw, json)
Hash identifier:          8rnbQfRJWoU30R32QzEwsMks5rO9zhAiP1r3eT4ZeaA=
Subject key identifier:   61:71:72:43:E2:A1:E7:E0:FA:C8:3F:48:E7:4C:A6:F8:70:57:01:9E
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       0556DBA8136F8A4946E90893FC1F09F535FF349D
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6263303a3a2f34342d3438203d3e20323039323937.roa
Signing time:             Mon 15 Jul 2024 08:50:05 +0000
ROA not before:           Mon 15 Jul 2024 08:45:05 +0000
ROA not after:            Mon 14 Jul 2025 08:50:05 +0000
asID:                     209297
IP address blocks:        2602:feda:bc0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 09:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:56:db:a8:13:6f:8a:49:46:e9:08:93:fc:1f:09:f5:35:ff:34:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul 15 08:45:05 2024 GMT
            Not After : Jul 14 08:50:05 2025 GMT
        Subject: CN=61717243E2A1E7E0FAC83F48E74CA6F87057019E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a6:6c:0c:2a:b7:73:bf:bc:16:83:38:9d:1e:
                    e0:e4:5e:01:d3:a5:fe:61:c1:5e:86:f3:f1:92:1c:
                    e1:bf:ab:82:e0:e2:0d:5b:2b:ff:5f:b5:2e:8f:f2:
                    b6:4a:95:41:8c:ec:c3:c9:bc:1f:e5:f3:17:09:31:
                    00:7d:ad:fb:63:65:0f:03:2c:0d:92:83:8a:06:98:
                    aa:65:00:c1:ad:05:95:aa:7e:45:90:dc:3d:92:0d:
                    33:f6:4a:76:b5:0b:e1:32:1f:cd:ec:29:95:48:1b:
                    a9:fc:5f:d0:90:6b:b1:b1:0f:bd:cd:a2:ad:97:f5:
                    b1:04:34:3b:1e:b6:20:98:e1:67:48:d8:d1:2c:29:
                    ab:08:74:bb:76:11:ae:27:4c:e0:86:2b:c3:32:39:
                    ff:c6:76:df:32:ff:de:47:8b:de:a1:15:8e:90:97:
                    d2:30:25:a3:06:04:da:54:85:e6:f7:8a:8c:f8:d0:
                    73:0c:b6:a3:a7:62:87:7f:5b:ac:8d:5e:8d:5f:62:
                    f1:ec:ac:18:99:61:84:9c:d4:e9:d2:e9:2e:ad:41:
                    46:6d:d0:e6:4f:d4:46:a0:42:47:60:3e:7a:d9:d6:
                    4e:44:0a:e9:78:37:94:59:42:ae:d5:4e:70:4c:89:
                    57:2b:27:b4:53:39:8f:5a:22:04:c6:16:e8:83:d3:
                    b2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:71:72:43:E2:A1:E7:E0:FA:C8:3F:48:E7:4C:A6:F8:70:57:01:9E
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6263303a3a2f34342d3438203d3e20323039323937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:bc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         0a:ab:aa:49:09:38:a1:c8:2b:70:c5:c6:3e:b1:99:e1:f0:ab:
         b1:f7:17:0b:53:41:fe:04:43:82:a7:1a:8f:6f:f4:de:2f:ab:
         de:f9:6f:da:05:55:9c:3b:6b:34:39:82:53:53:34:4f:2e:0d:
         20:2a:b6:d6:cb:1c:be:8d:44:c7:48:97:4f:ea:51:25:af:71:
         45:d8:03:3b:43:6c:b9:59:9b:c3:cb:46:9c:eb:6f:64:0a:5d:
         4f:e7:19:62:37:9c:33:f4:93:72:4d:53:12:bc:ca:d1:8e:25:
         f4:dc:28:fd:3d:af:04:b2:10:e0:30:4e:65:b0:2c:e2:10:e3:
         52:49:1b:47:27:ca:6f:26:54:88:ff:27:22:ad:ee:7b:5f:67:
         89:e8:81:bf:9a:c6:b9:6e:b9:4a:f0:ed:06:66:5e:7b:87:0a:
         4b:13:cf:f6:10:98:4a:60:68:46:f8:1d:ea:ba:9a:b4:de:52:
         e2:19:18:de:4a:50:84:98:ec:d3:b2:63:46:43:e5:86:7c:6d:
         38:44:8e:15:27:89:6b:4f:1e:18:3b:55:48:f7:14:54:d2:d2:
         77:54:d0:15:9a:9f:59:aa:84:87:7d:e1:23:63:1a:12:f6:e1:
         b3:5e:e1:35:41:75:55:a0:ef:e4:4a:6c:5a:b5:62:5d:d0:65:
         22:93:52:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:22:03 2025 by rpki-client