Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa
File:                     323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa (raw, json)
Hash identifier:          OHRw/TtzHS+0iGj9OsmSgGe0pg51tF18J1LAhDYIkPk=
Subject key identifier:   D8:CD:06:D1:6F:3A:E2:5E:DA:1B:80:52:02:C9:98:2C:3F:09:D9:F4
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       12BBA21654C381319A2E4329BD91ABAC807700CA
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa
Signing time:             Mon 18 May 2026 09:21:32 +0000
ROA not before:           Mon 18 May 2026 09:16:32 +0000
ROA not after:            Mon 17 May 2027 09:21:32 +0000
asID:                     35251
IP address blocks:        2602:feda:180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 08:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:bb:a2:16:54:c3:81:31:9a:2e:43:29:bd:91:ab:ac:80:77:00:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: May 18 09:16:32 2026 GMT
            Not After : May 17 09:21:32 2027 GMT
        Subject: CN=D8CD06D16F3AE25EDA1B805202C9982C3F09D9F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a1:6e:b1:20:fe:1b:ca:33:4e:bb:59:8d:a8:
                    6a:85:c8:e5:70:4c:75:7a:d0:45:ff:59:67:7c:07:
                    92:df:03:3c:40:93:e3:d8:46:f1:a5:40:9b:e2:10:
                    66:a5:70:d7:a7:4b:ec:38:95:c4:21:a5:04:c1:03:
                    c5:5f:bc:ee:b0:d1:35:fe:b3:7a:f1:a6:fa:73:87:
                    b4:61:8f:96:37:fb:9c:bb:63:5f:2e:d3:38:00:39:
                    63:15:e2:49:a2:1d:b3:c0:00:c6:5e:55:70:6c:97:
                    dd:e2:ca:ca:a4:d4:87:9c:51:44:f3:44:c1:ed:78:
                    87:58:da:d6:57:b3:61:46:87:70:36:2c:bb:99:0a:
                    9d:f5:2d:84:71:f1:c7:06:06:9b:de:82:a6:3b:ad:
                    4d:84:cc:eb:93:54:33:02:2e:30:3f:72:00:80:b0:
                    10:e7:b7:70:20:0e:cb:87:4f:8d:77:54:06:7f:90:
                    c5:f9:eb:a7:a8:36:2f:cd:3d:e7:95:4d:59:ca:fb:
                    4f:13:dd:61:93:3b:0b:55:1b:77:8e:bc:48:a0:08:
                    3b:20:7b:1c:6f:72:ab:c3:ac:a2:26:76:2c:39:8d:
                    70:2d:7f:d9:aa:ca:6d:1f:07:e9:36:d8:2b:16:16:
                    a0:87:4b:3c:aa:51:4a:e4:69:a5:3a:be:c4:f1:bc:
                    d5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:CD:06:D1:6F:3A:E2:5E:DA:1B:80:52:02:C9:98:2C:3F:09:D9:F4
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3138303a3a2f34382d3438203d3e203335323531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:180::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:1a:f0:ca:fb:db:ad:05:37:0e:a3:cf:59:d2:b2:f0:af:7c:
         a0:14:e4:dc:46:18:f6:a3:72:45:59:81:7a:3b:b2:c9:08:fb:
         d0:89:1f:f9:f8:b7:00:66:cc:f6:43:49:9f:e8:5e:13:56:41:
         b5:21:5b:27:d0:41:2c:1e:86:c4:35:9a:75:59:fe:fd:6d:b0:
         42:b4:5a:15:06:a6:5a:11:67:f9:66:1a:4e:fc:b3:74:d6:4a:
         55:b3:94:0b:0c:db:06:2c:af:98:77:83:2c:64:e8:e7:46:3c:
         b1:4c:c2:d7:15:2d:01:31:b0:06:e5:ce:5a:b4:2a:aa:71:de:
         f9:cf:a6:9c:d6:6f:4f:78:c1:5c:e8:51:ef:7b:fa:32:e2:b3:
         a5:7c:f3:20:41:fc:92:a3:9c:ed:89:57:b9:60:ad:0c:0a:3d:
         77:69:2a:ab:a1:6d:3d:a6:96:f3:84:25:45:1a:c5:d5:fc:16:
         70:0d:57:67:08:8e:04:bc:92:66:47:b9:65:77:11:31:73:cf:
         75:54:a1:20:aa:a0:cb:b2:69:37:47:3d:37:5e:7b:27:af:1b:
         3d:3a:b7:18:38:3b:7f:72:9f:bf:be:00:34:44:cb:fa:63:46:
         58:e3:3e:76:9a:59:68:a3:e9:f0:8e:95:72:bc:be:76:5c:a1:
         57:09:88:22
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgIUEruiFlTDgTGaLkMpvZGrrIB3AMowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjMyWhcNMjcwNTE3MDkyMTMy
WjAzMTEwLwYDVQQDEyhEOENEMDZEMTZGM0FFMjVFREExQjgwNTIwMkM5OTgyQzNG
MDlEOUY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56FusSD+G8oz
TrtZjahqhcjlcEx1etBF/1lnfAeS3wM8QJPj2EbxpUCb4hBmpXDXp0vsOJXEIaUE
wQPFX7zusNE1/rN68ab6c4e0YY+WN/ucu2NfLtM4ADljFeJJoh2zwADGXlVwbJfd
4srKpNSHnFFE80TB7XiHWNrWV7NhRodwNiy7mQqd9S2EcfHHBgab3oKmO61NhMzr
k1QzAi4wP3IAgLAQ57dwIA7Lh0+Nd1QGf5DF+eunqDYvzT3nlU1ZyvtPE91hkzsL
VRt3jrxIoAg7IHscb3Krw6yiJnYsOY1wLX/ZqsptHwfpNtgrFhagh0s8qlFK5Gml
Or7E8bzVkwIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFNjNBtFvOuJe2huAUgLJmCw/
Cdn0MB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov
L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez
MTM4MzAzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM1MzIzNTMxLnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAJgL+2gGAMA0GCSqGSIb3DQEBCwUAA4IBAQBvGvDK+9utBTcOo89Z0rLwr3yg
FOTcRhj2o3JFWYF6O7LJCPvQiR/5+LcAZsz2Q0mf6F4TVkG1IVsn0EEsHobENZp1
Wf79bbBCtFoVBqZaEWf5ZhpO/LN01kpVs5QLDNsGLK+Yd4MsZOjnRjyxTMLXFS0B
MbAG5c5atCqqcd75z6ac1m9PeMFc6FHve/oy4rOlfPMgQfySo5ztiVe5YK0MCj13
aSqroW09ppbzhCVFGsXV/BZwDVdnCI4EvJJmR7lldxExc891VKEgqqDLsmk3Rz03
Xnsnrxs9OrcYODt/cp+/vgA0RMv6Y0ZY4z52mlloo+nwjpVyvL52XKFXCYgi
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:17:49 2026 by rpki-client