Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165323a3a2f34372d3438203d3e20313338313831.roa
File:                     323630323a666564613a6165323a3a2f34372d3438203d3e20313338313831.roa (raw, json)
Hash identifier:          ur2rIKYbsYVC4b8muDn+DThsXb4DsZTSQplI72BuaOE=
Subject key identifier:   44:70:35:E9:C1:26:11:09:C1:CF:E0:60:80:04:B0:11:3F:81:50:FC
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       1CC78CFA3D2D51E1B8FD52F8330BEA01064E59C7
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165323a3a2f34372d3438203d3e20313338313831.roa
Signing time:             Mon 18 May 2026 09:21:39 +0000
ROA not before:           Mon 18 May 2026 09:16:39 +0000
ROA not after:            Mon 17 May 2027 09:21:39 +0000
asID:                     138181
IP address blocks:        2602:feda:ae2::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 08:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c7:8c:fa:3d:2d:51:e1:b8:fd:52:f8:33:0b:ea:01:06:4e:59:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: May 18 09:16:39 2026 GMT
            Not After : May 17 09:21:39 2027 GMT
        Subject: CN=447035E9C1261109C1CFE0608004B0113F8150FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:41:71:67:2d:32:31:ae:0d:10:de:b3:f6:b2:
                    34:ae:31:7c:ea:52:21:ed:96:c1:ed:19:b3:bb:20:
                    a2:b0:25:19:df:b3:76:30:95:ec:92:d8:a6:a4:a9:
                    84:f7:05:6a:25:fc:bb:b9:95:e5:37:d1:c3:2e:b6:
                    80:84:a2:16:b5:1a:67:b9:5d:56:94:da:07:6b:10:
                    f9:20:e6:73:e8:73:9d:f7:e9:25:7e:fb:a1:9b:b1:
                    31:16:48:60:47:91:64:bc:4b:34:2a:f2:32:f8:4d:
                    b5:2d:7e:f6:23:15:76:9c:1d:32:b0:7f:d5:76:fe:
                    cc:2c:12:b9:78:75:b5:1f:4b:71:3b:b3:1a:ca:d2:
                    13:b5:41:b8:c2:5f:df:ce:cb:80:cd:63:98:d2:71:
                    6c:63:c8:43:9c:88:70:08:39:e4:4b:4f:97:1a:91:
                    f3:e4:86:b1:a8:8c:75:83:6b:bb:d5:b0:e6:7a:38:
                    b6:17:62:08:f2:a9:97:89:93:a1:98:97:b6:00:4f:
                    62:4a:67:1c:53:0d:e2:7e:17:01:fb:18:8f:bc:42:
                    61:22:23:5a:79:2f:21:46:9f:9c:31:aa:b9:84:a6:
                    13:17:6c:6a:c8:63:79:a8:4b:bc:e4:df:86:0e:9b:
                    b2:43:9a:e1:f9:4c:09:ed:91:2c:83:65:34:ed:23:
                    12:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:70:35:E9:C1:26:11:09:C1:CF:E0:60:80:04:B0:11:3F:81:50:FC
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165323a3a2f34372d3438203d3e20313338313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ae2::/47

    Signature Algorithm: sha256WithRSAEncryption
         2f:98:a0:64:4f:99:7f:09:06:a3:3a:1d:e2:8a:0d:91:45:9e:
         b6:40:c0:2f:57:0e:51:fc:dc:91:85:e8:31:32:c2:e5:d8:5e:
         4b:ee:86:34:4e:3f:a2:63:2a:da:7d:01:18:1a:e0:04:e0:a0:
         18:91:d2:e7:da:40:27:ad:13:5c:26:f1:b9:5f:eb:5e:2e:53:
         c8:c0:48:0b:b4:5c:1a:3e:c7:78:6b:cc:87:0f:1d:8e:ad:8a:
         c3:35:e0:99:f0:8a:c6:5b:cc:01:fe:0e:11:be:64:3c:d7:36:
         5f:c5:7c:8d:bc:10:ba:d4:85:65:c4:7b:d0:91:ff:43:a8:40:
         1c:7f:6a:b9:47:91:f1:5f:55:62:73:2e:0f:ec:1f:4c:90:c5:
         96:79:0e:0b:b3:bc:65:98:33:46:a6:fc:26:b3:07:4c:42:85:
         e6:b2:b3:2b:99:25:46:c0:3c:5e:d7:32:4c:41:05:8c:01:99:
         bf:c2:b4:10:18:b0:4e:0e:66:cb:cd:2d:72:9d:d3:a7:05:bc:
         03:6c:7c:7d:20:e7:bb:b2:4c:08:9a:68:46:3f:eb:f2:1c:7d:
         04:76:5a:8e:26:c0:21:42:c2:2f:f8:25:f1:db:6d:34:a2:f9:
         48:c2:38:57:69:8a:71:13:22:74:8b:27:f3:52:ba:6f:bf:34:
         e0:be:a7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:18:14 2026 by rpki-client