Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa
File:                     323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa (raw, json)
Hash identifier:          U8NclfjymeVnhVvO9e+mPlUrf7xjCoGeZrkDriZtuM4=
Subject key identifier:   4F:D4:87:E9:17:6B:8A:79:CE:46:C1:28:47:86:B6:C4:FA:8C:0A:94
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       46296EA61512E8ED8DC3E1F3ECD56BCCF012FDCE
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa
Signing time:             Mon 18 May 2026 09:21:36 +0000
ROA not before:           Mon 18 May 2026 09:16:36 +0000
ROA not after:            Mon 17 May 2027 09:21:36 +0000
asID:                     47158
IP address blocks:        2602:feda:ab0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 08:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:29:6e:a6:15:12:e8:ed:8d:c3:e1:f3:ec:d5:6b:cc:f0:12:fd:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: May 18 09:16:36 2026 GMT
            Not After : May 17 09:21:36 2027 GMT
        Subject: CN=4FD487E9176B8A79CE46C1284786B6C4FA8C0A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4f:1c:15:b3:37:47:13:8f:69:cd:9b:51:e2:
                    55:5f:aa:b7:65:78:3d:59:b1:20:85:32:b5:4e:d1:
                    99:2c:2e:31:0e:9c:25:d8:f3:f0:e7:17:00:3b:9c:
                    3d:de:97:8d:05:58:67:14:76:49:c4:1c:49:57:fb:
                    f0:39:bf:9a:70:5f:e2:7a:57:46:5b:bd:7e:06:8a:
                    92:e8:e8:99:2a:d3:0e:ae:a3:7f:0b:e0:86:f8:63:
                    65:c2:ae:60:91:bd:dc:f7:9c:28:ec:6a:f8:a3:e3:
                    59:91:c5:11:cc:b3:5f:36:9d:ae:15:af:6d:03:e4:
                    22:0e:06:40:f2:33:58:c9:eb:a4:b3:ee:b6:72:a9:
                    e3:ed:84:f6:54:e2:50:90:b9:94:0a:2e:bd:5f:cc:
                    f4:4f:5d:3e:a9:ca:66:9f:51:bb:aa:27:ff:30:7f:
                    b6:78:20:7d:83:2e:4b:74:e4:e6:2d:92:4b:6e:7c:
                    9b:76:26:03:1d:8e:ba:de:8d:c0:b8:0e:c9:d8:ed:
                    ea:2c:e6:67:3e:12:5b:2d:c8:76:34:ac:0b:22:95:
                    18:36:63:90:08:05:0f:f5:d6:f1:17:bc:26:c8:ea:
                    80:94:fa:06:7c:c9:7b:4f:a6:1c:eb:88:cd:56:e0:
                    ca:1d:f9:1d:f0:7a:ff:3c:eb:39:96:d1:51:0f:40:
                    f3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D4:87:E9:17:6B:8A:79:CE:46:C1:28:47:86:B6:C4:FA:8C:0A:94
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e203437313538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ab0::/44

    Signature Algorithm: sha256WithRSAEncryption
         4e:fd:1f:de:92:b0:35:22:38:1a:a8:82:9d:27:b3:0e:81:90:
         99:f7:d4:40:13:78:2a:42:db:3f:14:cd:75:06:08:e9:b3:b8:
         a4:ae:b4:f5:31:08:c0:d7:7c:c2:c0:37:21:3c:b7:6c:2e:1c:
         6e:8f:00:2a:72:b9:84:46:72:bd:6d:25:c5:cd:77:8c:7d:41:
         26:d0:ee:13:b4:5f:c3:4f:fe:30:fd:c3:d7:11:ac:26:97:4b:
         a3:ab:6c:da:f8:14:e5:0e:60:76:b5:fa:54:9e:8b:56:fd:93:
         94:e6:3b:bc:f2:87:e6:e0:f2:72:dd:9f:33:16:8b:b0:6c:0b:
         fb:5b:9d:25:9c:b2:f2:21:4e:35:5e:f8:cd:3d:88:6b:7d:bf:
         26:0e:39:df:69:7b:f1:ad:5a:eb:f6:8e:8f:f5:0a:3a:09:8f:
         75:b4:78:d7:2c:31:ac:0f:6f:8d:d3:46:a7:68:87:c9:f7:95:
         c5:eb:8b:29:d2:1f:fb:39:30:d5:b9:9e:cc:d5:ad:31:56:2c:
         0a:43:bb:db:64:5c:6c:f9:e6:14:2a:f5:d8:ed:ec:a8:e7:f7:
         51:f4:8e:23:2b:6f:78:c7:94:c4:67:e4:74:96:b2:e5:b0:df:
         e5:bc:54:6f:8f:2f:bd:29:99:23:4d:4e:cd:92:5b:02:e6:0f:
         8c:00:0d:7e
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgIURiluphUS6O2Nw+Hz7NVrzPAS/c4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM2WhcNMjcwNTE3MDkyMTM2
WjAzMTEwLwYDVQQDEyg0RkQ0ODdFOTE3NkI4QTc5Q0U0NkMxMjg0Nzg2QjZDNEZB
OEMwQTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE8cFbM3RxOP
ac2bUeJVX6q3ZXg9WbEghTK1TtGZLC4xDpwl2PPw5xcAO5w93peNBVhnFHZJxBxJ
V/vwOb+acF/ieldGW71+BoqS6OiZKtMOrqN/C+CG+GNlwq5gkb3c95wo7Gr4o+NZ
kcURzLNfNp2uFa9tA+QiDgZA8jNYyeuks+62cqnj7YT2VOJQkLmUCi69X8z0T10+
qcpmn1G7qif/MH+2eCB9gy5LdOTmLZJLbnybdiYDHY663o3AuA7J2O3qLOZnPhJb
Lch2NKwLIpUYNmOQCAUP9dbxF7wmyOqAlPoGfMl7T6Yc64jNVuDKHfkd8Hr/POs5
ltFRD0DzoQIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFE/Uh+kXa4p5zkbBKEeGtsT6
jAqUMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov
L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2
MTYyMzAzYTNhMmYzNDM0MmQzNDM4MjAzZDNlMjAzNDM3MzEzNTM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcEJgL+2gqwMA0GCSqGSIb3DQEBCwUAA4IBAQBO/R/ekrA1IjgaqIKdJ7MOgZCZ
99RAE3gqQts/FM11Bgjps7ikrrT1MQjA13zCwDchPLdsLhxujwAqcrmERnK9bSXF
zXeMfUEm0O4TtF/DT/4w/cPXEawml0ujq2za+BTlDmB2tfpUnotW/ZOU5ju88ofm
4PJy3Z8zFouwbAv7W50lnLLyIU41XvjNPYhrfb8mDjnfaXvxrVrr9o6P9Qo6CY91
tHjXLDGsD2+N00anaIfJ95XF64sp0h/7OTDVuZ7M1a0xViwKQ7vbZFxs+eYUKvXY
7eyo5/dR9I4jK294x5TEZ+R0lrLlsN/lvFRvjy+9KZkjTU7NklsC5g+MAA1+
-----END CERTIFICATE-----
Generated at Sat Jun 6 08:17:10 2026 by rpki-client