Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e20313430393336.roa
File:                     323630323a666564613a6265303a3a2f34342d3438203d3e20313430393336.roa (raw, json)
Hash identifier:          RMskcg+2JpXXN7MYqFuOLkva3X0dbf/d2wiAbtzcrTY=
Subject key identifier:   71:31:A2:B4:DC:A0:9E:9F:4B:DA:CA:9A:F6:32:27:96:9A:E1:FE:35
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       2C425913A547868B000FAB86989A494D0E36A308
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e20313430393336.roa
Signing time:             Mon 18 May 2026 09:21:40 +0000
ROA not before:           Mon 18 May 2026 09:16:40 +0000
ROA not after:            Mon 17 May 2027 09:21:40 +0000
asID:                     140936
IP address blocks:        2602:feda:be0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 08:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:42:59:13:a5:47:86:8b:00:0f:ab:86:98:9a:49:4d:0e:36:a3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: May 18 09:16:40 2026 GMT
            Not After : May 17 09:21:40 2027 GMT
        Subject: CN=7131A2B4DCA09E9F4BDACA9AF63227969AE1FE35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:07:48:ea:02:cf:a8:f1:b3:9d:53:c1:b8:d0:
                    d7:6d:05:c4:b0:74:f5:2a:a4:81:27:32:e8:35:2c:
                    76:13:19:7f:e0:c0:c5:4c:29:24:d6:95:91:9d:ae:
                    b0:6b:8f:01:ae:c2:ce:e5:ba:76:2e:e8:b3:6c:a8:
                    02:e7:cf:fb:57:36:26:10:3f:df:93:57:b2:d9:b9:
                    63:bf:11:67:67:cf:2c:7f:f2:98:3d:bb:94:ca:1c:
                    22:3a:0a:50:d6:4f:a8:38:03:a0:0d:37:4a:07:ef:
                    42:ec:10:88:4d:a8:18:c9:bc:90:86:28:5e:68:cc:
                    58:54:77:2b:fe:d9:56:bc:fc:fe:be:8d:78:13:58:
                    0b:6e:ad:ed:4e:9e:e0:6b:0e:82:eb:7e:c0:78:32:
                    88:36:a8:13:61:f7:d1:f6:29:40:a5:2f:cb:79:92:
                    a8:98:27:02:03:4d:0e:9b:30:61:a0:78:15:ed:da:
                    e9:96:fd:6c:0e:b1:62:97:3d:47:42:ad:f1:79:b4:
                    05:f3:fd:42:34:90:11:41:7d:34:b2:99:84:b0:93:
                    b2:13:ac:42:9a:21:98:ba:1b:9e:9f:ec:a6:5a:c3:
                    d9:07:82:9f:98:0c:59:5d:92:07:93:03:75:ac:31:
                    09:cf:b9:5d:6c:4e:b4:9a:56:d3:1b:2c:05:87:a1:
                    f1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:31:A2:B4:DC:A0:9E:9F:4B:DA:CA:9A:F6:32:27:96:9A:E1:FE:35
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6265303a3a2f34342d3438203d3e20313430393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:be0::/44

    Signature Algorithm: sha256WithRSAEncryption
         7e:db:55:ec:87:ba:c6:bd:a9:b7:f7:e0:2e:bd:2c:c1:11:77:
         f8:d8:09:29:b1:4e:5b:e4:86:c6:56:c5:66:e7:9d:6d:50:35:
         16:12:70:95:86:d1:39:67:ab:34:86:07:ff:22:62:44:67:a0:
         b0:85:c8:65:2d:28:a5:17:ce:5f:47:9a:6c:fd:b3:8e:46:a8:
         aa:9f:86:85:b9:dc:94:7e:d7:d5:c5:90:27:99:88:8f:9d:a2:
         87:f2:db:bc:a7:8a:0a:a8:35:6d:f5:70:1a:4a:94:2b:ba:99:
         0b:be:a7:05:61:05:a7:8e:7f:fa:5e:18:4b:99:d6:73:ca:8b:
         8b:31:50:7e:eb:34:97:f5:9a:82:ee:e4:a8:2e:ad:23:02:27:
         2a:55:05:b7:ec:79:a9:ff:0d:36:86:d7:ae:11:0f:65:33:e1:
         39:c0:97:9b:8a:85:ae:b1:1d:5d:cf:6a:e6:30:99:a4:9c:ce:
         cf:f9:cb:8b:1f:f8:b7:5c:0c:3e:f1:3a:ba:59:b1:f7:1b:ba:
         27:88:cb:f9:2c:cf:bd:1d:72:7c:2c:2f:7e:03:da:14:ac:b0:
         93:d6:a4:3b:2a:5d:2f:a2:3b:b8:28:84:8f:45:d3:e1:94:76:
         a1:40:1c:76:c1:0a:f7:49:49:2c:44:48:55:bd:74:fa:c5:b3:
         fb:9e:d8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:17:58 2026 by rpki-client