Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3164303a3a2f34342d3438203d3e20313337323536.roa
File:                     323630323a666564613a3164303a3a2f34342d3438203d3e20313337323536.roa (raw, json)
Hash identifier:          x+yfQXDZqQfdeRnEYaqIiQfGs6vuGcAw7v1rJ/OGNPs=
Subject key identifier:   6D:69:35:58:39:46:FF:9F:A4:5E:AD:27:FB:0B:A6:B0:F1:08:06:8F
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       43BA30ADDD6625984E2D75FB384773A5E684A943
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3164303a3a2f34342d3438203d3e20313337323536.roa
Signing time:             Mon 16 Jun 2025 08:52:30 +0000
ROA not before:           Mon 16 Jun 2025 08:47:30 +0000
ROA not after:            Mon 15 Jun 2026 08:52:30 +0000
asID:                     137256
IP address blocks:        2602:feda:1d0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ba:30:ad:dd:66:25:98:4e:2d:75:fb:38:47:73:a5:e6:84:a9:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jun 16 08:47:30 2025 GMT
            Not After : Jun 15 08:52:30 2026 GMT
        Subject: CN=6D6935583946FF9FA45EAD27FB0BA6B0F108068F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:c2:eb:84:08:a9:eb:c0:49:80:f0:ef:a5:
                    be:34:48:52:3f:ac:c1:4b:bb:4f:7e:5c:f7:ec:6a:
                    2e:e7:f3:ef:9b:e4:3a:de:42:38:14:73:99:3a:3b:
                    a5:8b:85:3f:c2:df:9b:6c:0d:0d:2a:51:9f:5c:76:
                    4f:62:df:87:ec:c2:e9:b6:99:69:22:97:3d:b4:1b:
                    21:92:9e:16:41:b8:3b:81:c7:26:b2:65:21:64:e3:
                    a2:18:77:fd:a1:6a:54:60:3a:17:68:e1:95:ce:d7:
                    c3:15:6b:78:c2:5e:48:c5:8c:a4:66:a2:b3:df:42:
                    7c:d4:73:f4:d5:f6:fe:94:b0:4c:28:fd:bb:48:08:
                    1f:33:9e:9c:6e:d6:0f:cc:d9:49:9a:bd:a6:b5:11:
                    2b:14:d4:7f:91:8b:ef:f8:c9:1b:53:17:83:19:13:
                    6a:05:87:1e:93:a5:38:c7:c0:70:9f:d8:1b:29:b8:
                    0b:10:76:34:8c:24:87:d1:5b:49:ee:73:d0:79:db:
                    ee:35:fe:45:b0:10:99:44:1d:f0:2e:b5:cb:07:d0:
                    2a:67:c9:01:c6:35:72:4f:c6:c4:d6:79:d6:bd:37:
                    26:99:58:41:24:71:94:c5:39:99:44:b3:2c:f8:f8:
                    c2:96:dc:09:81:31:03:60:a7:e0:13:78:02:f4:65:
                    db:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:69:35:58:39:46:FF:9F:A4:5E:AD:27:FB:0B:A6:B0:F1:08:06:8F
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a3164303a3a2f34342d3438203d3e20313337323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:1d0::/44

    Signature Algorithm: sha256WithRSAEncryption
         90:a2:00:1b:58:b4:3d:64:69:94:3e:a2:5e:de:e1:74:b0:9f:
         d5:af:67:ac:c3:a7:60:c9:ce:ae:56:2e:99:df:f8:91:bb:f7:
         a3:8a:30:cb:d4:c3:0b:98:38:10:21:8c:30:62:47:41:70:0e:
         42:88:1f:0e:7c:27:83:41:a7:70:f8:cf:5d:80:f0:e0:62:57:
         db:dd:f3:52:79:d1:f8:da:55:f3:97:5c:8d:92:75:87:91:f0:
         e8:dc:fc:01:60:7e:e7:f6:ab:ec:af:8b:3e:11:23:41:9f:8b:
         da:2e:31:ab:15:58:b4:e7:37:5f:36:f4:bf:d7:cc:0a:57:39:
         95:e3:ea:43:b0:fc:a2:7c:1f:0f:41:bf:4c:58:0f:7e:ea:f9:
         eb:c1:c1:62:e6:4d:01:d9:42:1f:60:07:3f:ea:e4:29:37:50:
         ba:37:b1:88:7e:2a:9b:b1:9b:f0:2a:2e:b0:e2:f5:87:90:b7:
         9f:94:60:04:39:e8:06:c0:3b:83:4d:40:85:65:3a:b0:05:0e:
         04:88:75:4f:8b:a8:c6:7a:3c:ea:58:67:c2:e7:89:76:f4:9b:
         01:58:b7:ef:50:47:17:68:84:35:0d:50:8c:5b:bf:a3:6e:1d:
         9b:d6:cc:41:cb:24:34:57:5c:e9:fb:4b:8f:06:79:c2:4f:b7:
         58:28:61:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:05:41 2025 by rpki-client