Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a343a3a2f34382d3438203d3e203436393937.roa
File:                     323630323a666564613a343a3a2f34382d3438203d3e203436393937.roa (raw, json)
Hash identifier:          +i/E7IedqMXxpFwpsU29WZN4e57WRaGajxOQVvQmi9g=
Subject key identifier:   A6:EF:CD:D5:10:D6:DC:3A:FF:1D:A6:98:09:C8:5E:B7:C4:BD:9C:02
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       7E9D20C316E32525888757C9EA715EDAAD014330
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a343a3a2f34382d3438203d3e203436393937.roa
Signing time:             Mon 18 May 2026 09:21:39 +0000
ROA not before:           Mon 18 May 2026 09:16:39 +0000
ROA not after:            Mon 17 May 2027 09:21:39 +0000
asID:                     46997
IP address blocks:        2602:feda:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:9d:20:c3:16:e3:25:25:88:87:57:c9:ea:71:5e:da:ad:01:43:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: May 18 09:16:39 2026 GMT
            Not After : May 17 09:21:39 2027 GMT
        Subject: CN=A6EFCDD510D6DC3AFF1DA69809C85EB7C4BD9C02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:37:1f:2e:05:69:0f:8b:c6:9d:32:ee:31:69:
                    ba:4d:9b:23:b0:89:45:6c:3a:52:c4:f9:58:3b:bb:
                    3c:31:c1:fa:11:33:ad:da:a9:38:b5:30:b9:04:e1:
                    ba:4c:ad:7c:a4:0f:b8:eb:82:6b:aa:80:90:a0:d5:
                    7d:6b:69:ab:11:79:7a:e4:9d:fc:91:bd:35:2a:1f:
                    84:1a:7b:45:c0:5c:99:a7:a8:b5:39:d5:b8:6b:41:
                    f8:12:c3:b4:40:2e:6d:1f:51:93:a6:97:f2:32:d7:
                    b4:6a:e8:db:d4:f4:29:da:f8:21:7a:fb:75:47:64:
                    55:7e:e1:b7:89:c0:dd:d4:65:b7:d4:c5:29:45:3d:
                    87:12:67:1b:5b:f3:1e:87:d4:4e:bc:73:f1:fb:8a:
                    b8:97:66:ef:59:56:80:7c:66:ce:50:fd:a3:05:50:
                    ae:63:c4:72:de:0e:81:42:7c:88:f2:c7:a4:9c:88:
                    63:f0:ad:6a:cb:3d:ce:96:8f:55:48:25:3f:c6:5e:
                    06:2b:91:6f:e1:32:ab:40:ce:0f:f7:2a:33:fe:47:
                    80:48:6e:59:e9:07:3f:70:55:e6:c4:ac:ac:09:22:
                    a8:0a:22:19:63:6f:21:62:00:f7:fe:86:8e:38:2b:
                    2f:f1:20:da:10:04:18:2c:91:f4:46:e6:bc:34:40:
                    d0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:EF:CD:D5:10:D6:DC:3A:FF:1D:A6:98:09:C8:5E:B7:C4:BD:9C:02
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a343a3a2f34382d3438203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:c1:b1:f0:77:0d:5e:8f:2f:a5:d3:15:58:d7:9e:3f:73:27:
         61:1e:bd:34:78:da:0b:bd:82:89:01:27:83:9d:ce:6b:7d:ce:
         18:99:5c:6a:9d:22:e2:18:51:73:e8:b1:24:8c:c6:d8:9f:3f:
         7c:74:60:3f:ba:79:6d:58:4c:4c:8d:8b:46:a2:e8:ea:6e:5d:
         50:cd:62:cf:a4:e8:a0:7f:6f:50:28:d0:e3:3c:c8:7c:3b:ba:
         4f:5e:2b:78:1d:f8:0e:0d:0d:01:66:21:46:ad:8b:7d:87:b8:
         2b:63:b1:a8:d6:8e:fa:3a:b2:c4:21:6d:e1:54:52:39:dc:6a:
         2c:53:ad:3b:bf:c3:28:61:f0:6f:bf:15:d2:f5:f0:f3:1e:80:
         31:ca:a8:69:b9:4e:ff:ee:ec:db:d8:9d:3f:a0:6c:e6:a1:63:
         f3:d3:ef:1b:46:65:15:7b:9c:13:70:45:d7:15:f2:94:43:a1:
         f2:7e:3b:ca:7c:9f:49:4b:18:4e:60:69:0e:b2:81:0c:97:4e:
         aa:ca:54:d8:90:5b:19:ba:f5:10:df:ad:23:85:fe:0b:a8:ab:
         49:8d:9f:e1:ea:04:35:f2:4f:ec:1d:2e:dc:5c:ac:48:41:71:
         a0:62:39:f0:6b:55:5e:7a:89:da:ed:3e:b8:22:7b:07:65:aa:
         82:39:5e:e0
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIUfp0gwxbjJSWIh1fJ6nFe2q0BQzAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjYwNTE4MDkxNjM5WhcNMjcwNTE3MDkyMTM5
WjAzMTEwLwYDVQQDEyhBNkVGQ0RENTEwRDZEQzNBRkYxREE2OTgwOUM4NUVCN0M0
QkQ5QzAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDcfLgVpD4vG
nTLuMWm6TZsjsIlFbDpSxPlYO7s8McH6ETOt2qk4tTC5BOG6TK18pA+464JrqoCQ
oNV9a2mrEXl65J38kb01Kh+EGntFwFyZp6i1OdW4a0H4EsO0QC5tH1GTppfyMte0
aujb1PQp2vghevt1R2RVfuG3icDd1GW31MUpRT2HEmcbW/Meh9ROvHPx+4q4l2bv
WVaAfGbOUP2jBVCuY8Ry3g6BQnyI8seknIhj8K1qyz3Olo9VSCU/xl4GK5Fv4TKr
QM4P9yoz/keASG5Z6Qc/cFXmxKysCSKoCiIZY28hYgD3/oaOOCsv8SDaEAQYLJH0
Rua8NEDQ/QIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFKbvzdUQ1tw6/x2mmAnIXrfE
vZwCMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzov
L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2Ez
NDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0MzYzOTM5Mzcucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAm
Av7aAAQwDQYJKoZIhvcNAQELBQADggEBALzBsfB3DV6PL6XTFVjXnj9zJ2EevTR4
2gu9gokBJ4Odzmt9zhiZXGqdIuIYUXPosSSMxtifP3x0YD+6eW1YTEyNi0ai6Opu
XVDNYs+k6KB/b1Ao0OM8yHw7uk9eK3gd+A4NDQFmIUati32HuCtjsajWjvo6ssQh
beFUUjncaixTrTu/wyhh8G+/FdL18PMegDHKqGm5Tv/u7NvYnT+gbOahY/PT7xtG
ZRV7nBNwRdcV8pRDofJ+O8p8n0lLGE5gaQ6ygQyXTqrKVNiQWxm69RDfrSOF/guo
q0mNn+HqBDXyT+wdLtxcrEhBcaBiOfBrVV56idrtPrgiewdlqoI5XuA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:30:45 2026 by rpki-client