Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66363a3a2f34382d3438203d3e20323035303538.roa
File:                     323630323a666564613a66363a3a2f34382d3438203d3e20323035303538.roa (raw, json)
Hash identifier:          TeL8mVK6Ya53S6Z+wCUJAGNb5kS8GG+0ZIdtJmGR/bk=
Subject key identifier:   57:47:4F:28:23:3D:AA:4D:B9:6B:54:25:98:AD:8E:A1:94:2C:E1:5A
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       697BCC6976B132BCB2A8929A032446A0D1DECB80
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66363a3a2f34382d3438203d3e20323035303538.roa
Signing time:             Sat 06 Jun 2026 04:21:42 +0000
ROA not before:           Sat 06 Jun 2026 04:16:42 +0000
ROA not after:            Sat 05 Jun 2027 04:21:42 +0000
asID:                     205058
IP address blocks:        2602:feda:f6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 08:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:7b:cc:69:76:b1:32:bc:b2:a8:92:9a:03:24:46:a0:d1:de:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jun  6 04:16:42 2026 GMT
            Not After : Jun  5 04:21:42 2027 GMT
        Subject: CN=57474F28233DAA4DB96B542598AD8EA1942CE15A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6e:f8:85:fd:72:ed:e2:5c:e3:23:55:b3:40:
                    8d:0d:52:95:51:6a:c4:77:7f:31:93:3a:81:f8:60:
                    fa:e1:b1:5e:6f:32:b3:7f:3a:f1:64:c3:8f:03:27:
                    ce:3e:58:64:7f:30:d3:37:e7:19:a0:5b:70:5d:05:
                    9f:6c:54:0c:96:6b:88:db:03:9f:65:e4:21:b4:49:
                    72:5f:5c:38:21:4e:ad:2e:03:57:89:2b:e6:10:0d:
                    33:96:34:71:41:85:01:09:c9:77:72:fe:4c:6e:1c:
                    d6:11:5f:ec:7b:98:46:f8:0b:ca:fb:b5:d1:11:62:
                    44:d5:28:bc:ec:fc:39:9b:19:70:da:d5:5c:07:ce:
                    a6:e8:20:20:20:d4:69:24:69:e6:71:0d:a6:8a:d8:
                    e9:84:be:0a:99:0d:80:f0:5f:58:9e:e9:42:4c:c4:
                    21:a4:ef:eb:d1:c7:a9:dd:00:ed:37:c6:bf:78:d3:
                    2e:1f:da:5b:89:d6:a1:c6:92:45:fd:d9:21:2d:40:
                    bd:00:9a:6d:79:fd:eb:a9:c7:4e:68:d1:af:2f:72:
                    ce:da:41:a0:8a:91:84:63:d1:7b:a0:56:ca:d4:89:
                    0a:97:32:80:b8:4d:4e:d9:c4:1e:e1:e1:70:ef:21:
                    46:4d:b5:8b:72:8c:fe:59:da:dc:ff:24:f6:2a:17:
                    49:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:47:4F:28:23:3D:AA:4D:B9:6B:54:25:98:AD:8E:A1:94:2C:E1:5A
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66363a3a2f34382d3438203d3e20323035303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:f6::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:6c:67:4f:c5:03:97:e8:a3:57:48:40:d7:94:9f:04:36:70:
         50:1e:99:96:32:af:69:d9:d0:c5:47:9f:94:5b:be:83:df:7f:
         49:39:b1:b0:9d:69:2d:74:4a:9f:fa:3c:11:d2:27:04:d8:32:
         6f:52:26:33:f1:6c:c6:75:fe:23:ed:2b:d4:68:50:96:7a:7c:
         de:66:84:dd:19:65:9f:19:9b:e9:a8:56:74:aa:50:80:12:58:
         b5:c6:72:32:c2:cc:fa:81:62:26:d4:8b:d4:1b:0a:b4:b2:3d:
         29:0f:b7:32:8f:01:94:3f:83:df:d9:95:09:c6:f5:a1:89:82:
         fe:dc:93:14:4a:c5:60:94:73:a7:9b:29:1c:31:d9:8e:dc:25:
         63:52:78:c9:e1:20:eb:f1:e2:bf:94:33:02:35:d6:a5:60:94:
         99:71:de:62:a7:a3:88:62:00:3a:ec:27:d8:1b:f6:36:8f:a0:
         8b:63:8a:02:fd:d2:25:19:ed:97:5f:e9:0e:2e:ec:ba:6d:25:
         bd:b7:ce:d4:61:90:33:49:54:3f:c5:65:9f:76:82:d4:90:0b:
         ab:4e:38:28:3c:6b:92:f5:9e:94:da:71:e8:16:55:a1:4c:f8:
         73:5f:9b:69:a5:a5:81:3f:e3:2b:62:eb:15:2d:99:d5:e7:9c:
         6c:3f:71:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:16:04 2026 by rpki-client