Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66333a3a2f34382d3438203d3e20323035303538.roa
File:                     323630323a666564613a66333a3a2f34382d3438203d3e20323035303538.roa (raw, json)
Hash identifier:          n01wGws5XZGjA91JHnQu6Hf7bmPuzuT9hEHqnG1qqVw=
Subject key identifier:   07:65:0C:83:D9:44:63:8F:A3:EB:8D:B0:EA:2D:9C:E6:30:E3:95:38
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       3905EA68A095B40F23EE25E38D962D5BE2D8E59C
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66333a3a2f34382d3438203d3e20323035303538.roa
Signing time:             Mon 18 May 2026 09:21:35 +0000
ROA not before:           Mon 18 May 2026 09:16:35 +0000
ROA not after:            Mon 17 May 2027 09:21:35 +0000
asID:                     205058
IP address blocks:        2602:feda:f3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 08:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:05:ea:68:a0:95:b4:0f:23:ee:25:e3:8d:96:2d:5b:e2:d8:e5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: May 18 09:16:35 2026 GMT
            Not After : May 17 09:21:35 2027 GMT
        Subject: CN=07650C83D944638FA3EB8DB0EA2D9CE630E39538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3d:dc:13:f0:7f:d9:d9:74:d2:80:5d:da:35:
                    46:35:62:04:1f:07:68:75:eb:0d:4c:ad:85:aa:09:
                    25:0e:38:ea:e3:04:b5:ad:1b:ae:20:69:6d:af:f2:
                    66:52:0b:bd:94:23:13:5e:8e:80:d5:c7:a1:bb:e8:
                    03:e8:1e:5d:a4:c9:27:6b:3f:b0:79:d5:22:5c:64:
                    30:a6:c7:93:4b:e7:68:d4:f5:b9:2e:88:f1:5c:91:
                    31:c8:06:d6:51:49:ca:84:f0:99:90:c9:e2:31:f1:
                    0e:24:24:4e:e6:7f:c0:2c:6f:7c:93:41:7a:6b:f9:
                    ab:ee:70:4c:fb:c9:40:97:31:a0:e1:53:98:9d:81:
                    53:93:61:6c:b7:b1:a2:24:00:ac:13:b8:0c:df:8e:
                    de:db:3a:29:d3:3f:76:1d:6d:06:f2:f1:f4:15:08:
                    c2:fa:fd:30:62:67:24:2b:f9:b0:0c:8c:9e:a6:2a:
                    a9:27:82:2f:e1:b8:1f:d4:dd:a2:35:1f:2e:bd:40:
                    c8:fe:66:60:b4:6a:c3:f0:ac:13:63:b1:8f:bc:82:
                    3d:93:b3:46:62:ec:39:1d:8c:bf:34:6a:61:c8:2b:
                    cc:eb:0a:6a:0f:56:67:94:9f:b8:54:5d:36:10:27:
                    59:36:af:39:cf:db:b4:aa:12:35:ca:a1:37:af:72:
                    8b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:65:0C:83:D9:44:63:8F:A3:EB:8D:B0:EA:2D:9C:E6:30:E3:95:38
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66333a3a2f34382d3438203d3e20323035303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:f3::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:42:5a:83:fe:da:3c:1f:d5:c6:a2:f9:9d:05:18:77:dc:58:
         b4:14:d6:5a:21:39:0f:9d:8f:07:cf:61:2a:4a:2c:c7:e9:c5:
         47:bb:0a:92:bf:ad:8f:bc:02:f9:a7:9a:6d:dd:86:3e:f1:d6:
         21:49:a5:77:30:a3:07:c3:5a:d7:88:3c:01:9e:84:39:9e:4f:
         a9:6c:a6:d3:e7:4f:12:f2:63:ff:5b:10:ac:2c:94:02:9d:44:
         bf:38:66:0e:90:0d:e2:90:1a:27:a2:97:eb:9e:eb:fe:37:18:
         60:d2:0d:93:af:38:97:68:42:96:79:af:bc:25:ae:a9:ba:a5:
         1b:cf:0d:55:fb:9a:07:04:a1:29:f0:6e:67:29:5c:e9:2c:f3:
         be:20:03:f4:7e:e4:8b:09:f4:a9:e2:c5:49:d4:c1:7d:29:7a:
         b2:3b:68:0f:a3:7e:6f:09:94:9d:99:f8:ed:92:cb:6f:19:4b:
         14:4c:21:4b:6f:0e:ae:e2:cc:a3:96:81:7d:29:8d:68:c1:98:
         41:ad:76:42:06:6e:cf:3a:0d:55:72:56:06:13:01:f4:6d:ab:
         3c:fd:03:ec:67:fc:37:2e:3e:10:9e:37:21:08:f0:9e:b7:c3:
         96:79:27:61:4e:41:f8:14:a7:87:a7:80:00:c6:90:92:30:1c:
         45:43:41:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:16:04 2026 by rpki-client