Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6337303a3a2f34342d3434203d3e20323132333537.roa
File:                     323630323a666564613a6337303a3a2f34342d3434203d3e20323132333537.roa (raw, json)
Hash identifier:          NTw7F9Xtz2Mi8UiIM296s6nm31QR41Rg8vmgP0IfbsU=
Subject key identifier:   65:B9:61:79:A4:8B:84:BD:2F:A0:00:13:A0:33:A7:61:4F:1C:B1:5B
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       669825A6ABF82212610CE7926AF18C9397328358
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6337303a3a2f34342d3434203d3e20323132333537.roa
Signing time:             Mon 18 May 2026 09:21:40 +0000
ROA not before:           Mon 18 May 2026 09:16:40 +0000
ROA not after:            Mon 17 May 2027 09:21:40 +0000
asID:                     212357
IP address blocks:        2602:feda:c70::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 08:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:98:25:a6:ab:f8:22:12:61:0c:e7:92:6a:f1:8c:93:97:32:83:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: May 18 09:16:40 2026 GMT
            Not After : May 17 09:21:40 2027 GMT
        Subject: CN=65B96179A48B84BD2FA00013A033A7614F1CB15B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:03:2d:63:30:f0:65:a8:a5:2c:5a:72:5c:51:
                    94:3a:79:8c:6d:93:5d:6f:f0:45:74:82:1f:09:76:
                    e6:89:b5:d4:3c:e4:a4:e1:a5:0b:25:3c:e7:27:f8:
                    ab:38:b0:a5:90:c3:1f:11:a0:85:11:9e:91:17:bf:
                    40:cb:2f:15:ce:ec:cd:c1:81:2a:b2:e7:82:a2:9a:
                    20:31:b2:91:81:4d:e2:87:eb:63:29:9c:93:c8:39:
                    37:7b:37:98:4f:db:bc:56:32:3b:a2:71:60:6e:f7:
                    a7:b3:2d:b8:19:7a:47:4c:d3:6b:23:42:7a:67:57:
                    bb:4b:46:2b:df:95:92:7f:c1:7d:c2:17:f0:01:aa:
                    1c:62:a8:c2:50:1f:e8:ab:db:ad:40:de:84:d9:e3:
                    de:1d:90:b2:93:56:17:c9:7a:7b:1b:4e:90:67:75:
                    a7:f1:0e:07:af:fe:19:d0:c4:dc:4c:71:13:3e:8c:
                    cc:b5:8c:b7:87:f1:03:02:bf:f0:cd:4d:2f:4e:24:
                    61:d4:41:db:42:59:12:43:e2:3d:67:cd:40:6d:0b:
                    ed:a5:69:4d:a2:26:94:c5:47:d4:b6:f0:e9:eb:7e:
                    85:ca:de:75:57:6a:13:5a:5c:3e:b5:d4:da:b2:5f:
                    7c:cb:bb:e7:46:03:7e:f5:46:22:ff:cc:6e:06:ce:
                    7c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:B9:61:79:A4:8B:84:BD:2F:A0:00:13:A0:33:A7:61:4F:1C:B1:5B
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6337303a3a2f34342d3434203d3e20323132333537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:c70::/44

    Signature Algorithm: sha256WithRSAEncryption
         4a:e0:b9:e0:af:d5:b1:90:6b:0e:88:ee:59:2a:b9:cf:51:90:
         a2:f4:b4:56:dd:c5:d3:01:1e:c0:38:ac:7a:ca:79:69:43:b1:
         c1:26:31:b3:4f:fc:4b:17:8c:16:73:0d:40:80:49:e1:29:ff:
         8d:a3:62:b3:3b:58:8a:b7:00:a3:00:56:0c:6d:d4:85:ae:ef:
         f2:a6:20:95:44:84:25:5a:9f:1f:ab:9d:99:23:a8:45:c6:c7:
         80:f1:1c:3f:55:c2:2e:5d:5a:0a:d5:b7:54:2c:88:27:40:96:
         19:86:38:1b:97:aa:34:75:fb:14:55:3f:13:42:ba:e0:1c:5c:
         0f:5f:03:28:b4:2a:eb:99:55:41:77:07:46:33:0b:cc:db:1a:
         20:61:5b:aa:e0:ee:fb:c7:f6:a4:cb:8a:d2:b1:22:ab:69:73:
         e5:58:51:86:4a:57:57:94:6a:62:07:48:e7:bb:a9:cb:76:de:
         c2:7a:60:3b:3e:82:17:03:1a:fd:cf:66:4e:1b:c5:85:55:47:
         8d:6b:d9:f4:7c:36:57:a4:32:a6:b3:62:ee:47:32:eb:53:8b:
         37:a9:e8:8a:65:bb:1a:68:2d:be:bc:1e:78:a0:41:f8:e8:e3:
         d2:08:f4:1f:03:84:15:68:e5:b0:60:44:84:d6:13:41:5d:ec:
         8d:5e:fb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:17:57 2026 by rpki-client