Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa
File:                     323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa (raw, json)
Hash identifier:          Inog9NW9Kr8XcIddsRGNfRlxICXsuEQsidk+k03aB3Q=
Subject key identifier:   A8:60:FF:49:30:7C:83:6F:94:41:AE:01:14:32:BA:5F:D7:45:19:32
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       358F2A1D7EDBA6BFB204FFB9FDB54640970F3158
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa
Signing time:             Mon 18 May 2026 09:21:33 +0000
ROA not before:           Mon 18 May 2026 09:16:33 +0000
ROA not after:            Mon 17 May 2027 09:21:33 +0000
asID:                     149285
IP address blocks:        2602:feda:e40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 08:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:8f:2a:1d:7e:db:a6:bf:b2:04:ff:b9:fd:b5:46:40:97:0f:31:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: May 18 09:16:33 2026 GMT
            Not After : May 17 09:21:33 2027 GMT
        Subject: CN=A860FF49307C836F9441AE011432BA5FD7451932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e4:d9:91:17:14:9b:8d:85:16:71:7b:0b:8a:
                    fc:1b:b3:9a:ab:de:e5:63:27:a7:ff:fa:c8:af:9d:
                    54:78:33:fd:3b:24:00:11:f7:79:7a:b7:a6:9e:70:
                    d4:30:7a:9e:e7:17:ca:b2:a7:78:c5:26:71:04:cb:
                    7a:cf:2e:c9:94:2f:47:c6:6d:e3:a8:2e:29:00:ca:
                    9b:f8:64:22:d6:72:eb:c1:0d:65:e5:bb:b9:9c:5a:
                    7b:f7:3f:bb:d8:cb:16:b1:15:ac:3d:79:be:e9:64:
                    a6:1e:a4:0f:39:e8:04:0f:10:ac:0d:47:f0:ab:0a:
                    9a:4e:34:2c:08:f2:89:af:4a:85:b8:ef:f4:e0:41:
                    f2:9f:7d:a7:8a:2a:05:ac:cd:fa:b6:b8:66:25:19:
                    05:30:aa:aa:14:2b:d1:e2:b2:11:57:79:d4:0a:0b:
                    64:3d:b3:77:fe:81:67:3d:8c:14:61:b6:81:24:98:
                    4e:e3:ce:c5:fe:e8:5b:61:62:d6:57:d8:33:fc:39:
                    40:c2:b5:77:3c:53:d9:c0:20:fa:cc:17:58:ce:1e:
                    78:db:88:78:44:4b:d7:c0:cd:a4:59:83:90:6c:e2:
                    3c:b3:66:54:68:c9:2e:52:4b:b0:c0:e5:3a:e5:79:
                    bf:f1:d7:11:8e:4f:91:77:55:91:7a:44:f8:db:e8:
                    33:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:60:FF:49:30:7C:83:6F:94:41:AE:01:14:32:BA:5F:D7:45:19:32
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:e40::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:13:dd:a0:cd:65:b4:16:49:e3:a3:67:66:94:0f:ee:47:52:
         0b:aa:3d:4d:c9:17:fe:49:a9:0d:5a:0f:42:92:65:2d:71:e2:
         09:2a:7a:36:c0:89:cb:a0:76:be:ac:f0:2a:34:73:1f:08:9a:
         99:3b:fa:3b:23:fd:1a:97:65:da:8f:33:d7:e5:61:cb:95:ee:
         cc:60:a9:e9:e6:e0:b8:7e:bc:f4:55:6b:2e:e6:fb:4a:31:f3:
         2a:5a:2c:f8:2d:d6:44:d0:9e:b8:59:a3:66:94:36:e2:58:84:
         04:1e:aa:18:60:fc:13:ae:6a:17:39:96:8c:5e:c0:35:12:a7:
         d1:1d:22:d8:7f:01:30:ef:8b:9d:99:50:c3:5d:3c:e1:bd:b3:
         0e:91:59:93:05:89:b3:76:41:4a:39:df:b0:1d:fd:00:d9:f9:
         10:56:4d:0d:0a:aa:55:58:d8:bd:ea:98:ab:df:f8:f4:c0:07:
         aa:48:ef:69:9c:7e:19:a4:cb:9a:93:01:57:23:32:32:98:95:
         6a:87:57:80:36:57:48:ec:1b:5f:4e:b3:4d:ee:dc:da:a6:2f:
         f5:1a:75:7b:23:78:9a:5d:de:1d:6a:98:46:1f:75:ba:0a:21:
         d8:64:3e:2d:99:f2:08:99:6d:f9:32:3f:26:ad:28:21:f8:9c:
         57:aa:4c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:18:14 2026 by rpki-client