Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6336303a3a2f34342d3434203d3e20333939303135.roa
File:                     323630323a666564613a6336303a3a2f34342d3434203d3e20333939303135.roa (raw, json)
Hash identifier:          iZjK16Gxgy7tumcfxhDLoU8tIqS0z88GC82sVTz3SiM=
Subject key identifier:   A5:46:6F:E2:34:87:BB:87:A7:F5:33:1B:FE:2C:38:35:7E:A9:20:02
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       06DA3D513C82C09012F574A7B7B60C7993B588FB
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6336303a3a2f34342d3434203d3e20333939303135.roa
Signing time:             Mon 18 May 2026 09:21:30 +0000
ROA not before:           Mon 18 May 2026 09:16:30 +0000
ROA not after:            Mon 17 May 2027 09:21:30 +0000
asID:                     399015
IP address blocks:        2602:feda:c60::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 08:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:da:3d:51:3c:82:c0:90:12:f5:74:a7:b7:b6:0c:79:93:b5:88:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: May 18 09:16:30 2026 GMT
            Not After : May 17 09:21:30 2027 GMT
        Subject: CN=A5466FE23487BB87A7F5331BFE2C38357EA92002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4b:00:2a:66:e0:3c:cf:ee:d0:74:06:81:e3:
                    7d:2c:62:f2:3e:4e:44:cb:20:66:60:ef:2b:bf:5e:
                    9b:fc:d2:9d:fb:50:d9:17:83:d2:a0:58:f5:b7:32:
                    ed:75:5b:9f:92:d2:cf:18:24:71:ab:48:45:9a:8e:
                    04:62:c6:92:e6:72:7e:62:c4:54:b4:2a:c2:98:7f:
                    c4:99:3d:d9:89:9a:07:6c:d8:da:91:23:6a:ac:54:
                    64:df:9a:e2:c8:65:b3:4e:a2:82:b1:a9:cd:c4:ab:
                    c5:81:e8:53:bd:39:ed:cd:b7:19:ea:01:44:f8:8e:
                    9e:3b:22:8b:ab:80:7b:e6:52:5f:77:89:98:b7:36:
                    52:9b:19:59:e5:03:43:3b:3d:49:d1:ec:be:6d:1a:
                    4e:c5:22:1b:c3:84:a2:6b:63:c1:5e:e9:e3:12:36:
                    57:e0:36:75:1a:0b:5d:ce:08:9d:db:89:12:e6:6e:
                    27:ba:bd:4c:c6:f4:c1:c7:25:85:36:a1:34:17:85:
                    ea:72:3e:02:e4:59:64:62:4d:49:51:ce:e5:43:38:
                    48:36:17:de:8a:f3:2a:83:c7:91:11:6f:a5:cc:f2:
                    2e:4f:5f:17:85:f2:bf:f2:04:86:50:32:ff:52:b3:
                    43:7f:24:81:2a:b3:43:4a:77:47:eb:9f:63:36:d1:
                    25:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:46:6F:E2:34:87:BB:87:A7:F5:33:1B:FE:2C:38:35:7E:A9:20:02
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6336303a3a2f34342d3434203d3e20333939303135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:c60::/44

    Signature Algorithm: sha256WithRSAEncryption
         97:96:2f:ca:3d:24:12:6c:bc:ae:c0:65:46:af:fd:f5:e4:a1:
         81:a6:83:b2:fe:00:27:02:da:b8:62:65:e8:38:e7:cd:9d:9f:
         12:9b:43:ab:92:5d:ba:a6:c6:9d:3e:0c:79:20:4f:43:7b:f5:
         11:3b:40:5b:92:aa:e6:15:db:fd:e9:82:48:4d:22:ec:f5:47:
         d8:67:db:84:15:00:92:03:ac:14:67:00:cb:9e:59:bb:d4:83:
         b2:de:e9:b8:c6:f3:a1:ed:37:25:36:e6:89:99:ab:4b:fa:68:
         fe:64:85:e7:29:cf:9f:38:c4:87:09:62:db:8a:80:66:15:54:
         ee:7a:47:54:3b:a9:ab:ab:9c:54:d3:c8:43:57:ab:8b:ab:43:
         60:b0:46:c6:59:83:3e:7d:8c:98:34:d9:74:94:aa:89:19:9c:
         fc:f0:61:94:8b:67:ea:5c:c9:31:d4:df:f9:40:b0:cc:b7:56:
         1b:6a:2e:27:54:74:ca:1e:f8:b6:41:dc:ca:18:84:65:1d:66:
         9f:0d:47:eb:9d:30:9a:0d:bc:f3:40:19:d9:ef:fa:63:a8:b0:
         67:f7:1c:ae:df:56:2b:7a:b5:59:a4:4e:6b:89:17:2e:0f:cf:
         46:e7:86:8d:7c:b1:fd:8d:5b:a3:66:dc:1c:8c:2f:7d:3d:6a:
         47:01:93:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:18:14 2026 by rpki-client