Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa
File:                     323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa (raw, json)
Hash identifier:          pHXCq1d3bV8PAChACqD3odbkVfjv4YPNoyZbpH33OiQ=
Subject key identifier:   C7:19:27:9D:B4:74:85:18:89:CB:2B:70:6E:27:53:4A:8B:D4:05:62
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       310FB6AAE5186EDA0235CF7212412B9B2A291FDB
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa
Signing time:             Mon 18 May 2026 09:21:39 +0000
ROA not before:           Mon 18 May 2026 09:16:39 +0000
ROA not after:            Mon 17 May 2027 09:21:39 +0000
asID:                     133492
IP address blocks:        2602:feda:2d0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 08:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0f:b6:aa:e5:18:6e:da:02:35:cf:72:12:41:2b:9b:2a:29:1f:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: May 18 09:16:39 2026 GMT
            Not After : May 17 09:21:39 2027 GMT
        Subject: CN=C719279DB474851889CB2B706E27534A8BD40562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:36:93:1b:41:b4:81:ee:8e:94:74:3e:2b:f4:
                    cc:b7:3f:75:0d:72:da:e3:26:c4:28:38:49:e5:4e:
                    e3:2f:53:88:30:72:f6:6e:ed:8b:cf:2d:d7:8c:ee:
                    ed:cc:d1:e4:3c:5b:41:8f:f2:2e:11:6b:76:67:18:
                    58:1c:06:0f:96:ca:2f:14:ad:08:ec:39:fb:ce:6f:
                    1d:b3:f8:44:dd:22:d7:9f:f5:87:eb:6b:e2:5b:97:
                    2e:19:25:ab:c6:e5:75:f5:81:06:be:30:91:8f:52:
                    96:89:b0:79:2e:42:ad:5c:ca:6c:45:dc:ca:06:07:
                    75:5e:ec:6e:37:0a:d6:5a:f0:fa:93:94:af:74:d8:
                    aa:2e:81:42:c1:c6:c0:c6:69:86:58:f0:3a:07:32:
                    ea:4b:c2:51:95:42:e3:b1:ed:78:1f:ce:03:1c:dc:
                    5d:89:22:95:1c:5e:21:d0:60:3e:35:0f:61:ff:3e:
                    3f:88:5c:09:f8:d0:a1:51:8a:24:0d:d0:e3:19:f5:
                    58:b8:9c:cc:d0:bb:f2:c0:35:cb:a7:77:b7:fe:c7:
                    57:b8:d1:67:d5:db:5a:f2:88:ec:ee:62:1e:50:25:
                    ae:88:1f:68:d4:b3:a7:d6:7d:8b:1b:cd:ee:3d:0b:
                    f8:a9:2b:3b:08:9e:3e:29:4b:c5:6a:59:f9:d1:4a:
                    04:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:19:27:9D:B4:74:85:18:89:CB:2B:70:6E:27:53:4A:8B:D4:05:62
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3264303a3a2f34342d3438203d3e20313333343932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:2d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         91:be:36:3a:80:45:88:cd:a7:21:f8:44:cf:ba:5a:62:1e:de:
         20:3c:14:ca:f9:e4:6f:8a:ad:ba:d9:c4:da:e3:79:31:23:87:
         fd:b2:97:3f:03:4a:a8:af:09:95:24:2a:6c:b5:cd:ff:d6:d7:
         83:49:d8:cc:ed:10:c4:ec:87:25:a4:c7:c5:33:e2:de:6d:e9:
         66:57:af:61:b3:97:cf:3a:8a:a7:3f:76:4e:c0:dd:bb:69:84:
         79:65:61:de:2e:47:fa:90:a1:2f:f7:c8:63:7a:d5:8e:96:62:
         cd:b3:7c:76:13:ee:a0:82:11:66:0b:4c:04:f8:4c:7a:29:e7:
         3f:f1:9f:5e:df:1e:3e:1a:7b:89:29:7c:27:36:82:35:71:38:
         a0:ca:a8:64:8e:65:de:ed:74:02:04:4a:6d:45:c7:bb:11:8a:
         7e:9e:af:30:e3:54:6a:c4:7e:b3:fb:56:e2:04:69:19:0e:7e:
         98:3b:b0:1d:01:48:36:98:1d:f2:97:9b:50:ec:d7:95:fc:4e:
         c8:8a:38:3d:86:b8:77:d1:7a:be:4a:75:b0:fd:c9:8c:71:59:
         04:c7:6f:f6:0c:af:22:dd:de:dc:36:9f:e4:40:9c:28:1d:bb:
         9f:e3:65:82:f8:79:50:a6:4d:b7:c8:76:1d:d0:2b:06:13:b4:
         89:59:a3:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:17:11 2026 by rpki-client