Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61333a3a2f34382d3438203d3e203436393937.roa
File:                     323630323a666564613a61333a3a2f34382d3438203d3e203436393937.roa (raw, json)
Hash identifier:          EBJB/RZ1UW4RtxyjyldpLLIOR4WUyNIge2uxIOUbdZw=
Subject key identifier:   12:8F:54:E0:D8:A3:2D:16:0A:C7:54:67:8B:86:C7:AE:CE:76:CD:EF
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       5984C8A2B2351B2B38818F7D95AD6853B3B79116
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61333a3a2f34382d3438203d3e203436393937.roa
Signing time:             Mon 18 May 2026 09:21:39 +0000
ROA not before:           Mon 18 May 2026 09:16:39 +0000
ROA not after:            Mon 17 May 2027 09:21:39 +0000
asID:                     46997
IP address blocks:        2602:feda:a3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:51:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:84:c8:a2:b2:35:1b:2b:38:81:8f:7d:95:ad:68:53:b3:b7:91:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: May 18 09:16:39 2026 GMT
            Not After : May 17 09:21:39 2027 GMT
        Subject: CN=128F54E0D8A32D160AC754678B86C7AECE76CDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ab:72:02:f6:46:40:93:a8:36:bc:3d:3f:d4:
                    6a:94:f9:0d:9c:fb:0b:98:e4:93:69:04:ce:74:ad:
                    b8:18:2f:e0:ac:b9:58:a0:5f:a0:94:e3:35:45:6b:
                    2f:dc:a1:5e:05:16:89:19:41:37:53:b6:05:52:ee:
                    e5:23:f4:38:1a:6a:e4:48:58:2e:f8:8b:4a:8a:d4:
                    4a:b2:37:f9:3f:54:d3:2e:12:f9:5b:7c:0b:5e:c4:
                    99:7b:08:28:15:91:34:45:c8:72:25:0a:0d:8d:dc:
                    70:f8:9a:1e:64:d6:e3:78:a1:03:6c:6e:48:c4:77:
                    15:f1:02:61:48:fb:ea:d8:c3:3b:f7:c0:a7:e5:8f:
                    07:bd:e0:e0:c2:9e:b4:5f:50:a3:42:49:5c:03:2a:
                    f1:80:25:5d:cb:46:a4:5e:a8:f2:11:60:69:dc:c6:
                    2d:31:e0:4c:78:cb:19:07:98:d1:74:de:3e:6c:ec:
                    96:6b:a9:b6:f5:d5:70:6c:cd:32:e9:bf:f9:ea:61:
                    03:2f:d7:b8:9a:c0:49:16:25:54:74:0a:46:34:3d:
                    c8:fa:89:09:7e:35:da:d6:60:4e:4f:d1:6d:2b:90:
                    61:05:e9:73:cc:47:aa:4d:7f:f1:bc:80:ef:77:45:
                    a7:10:7e:f9:e2:34:65:22:d2:0e:b6:6a:ca:09:77:
                    af:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:8F:54:E0:D8:A3:2D:16:0A:C7:54:67:8B:86:C7:AE:CE:76:CD:EF
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a61333a3a2f34382d3438203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:a3::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:e5:fe:00:4f:e9:30:02:83:26:dd:c0:c9:f4:82:bf:f8:45:
         a1:2a:7b:6e:d1:a6:e5:40:04:b4:6c:a8:d0:1b:6d:be:52:85:
         ab:6c:74:3a:7a:5a:6d:a3:72:43:09:d2:b5:e9:fb:34:17:83:
         75:91:97:5f:9b:fd:4b:bd:2b:9e:f6:2f:b2:88:38:8d:39:d7:
         64:8e:21:26:89:35:0b:8b:2c:f1:c3:aa:20:be:6c:38:95:2e:
         b4:56:e2:82:4a:4a:f3:bb:28:d7:d6:d7:a0:f6:6a:24:11:fb:
         3e:b4:cb:ac:5f:9d:50:c6:31:f1:3d:f0:3c:9f:af:3e:00:5a:
         e0:5e:82:ae:01:82:02:03:8a:7a:1d:05:df:ca:e9:aa:c3:d1:
         d8:0f:9e:e4:2b:3c:84:43:94:50:57:d0:b3:f9:7a:33:74:d6:
         21:31:07:68:63:ec:3f:e0:2e:42:c3:fa:9e:9d:8a:17:b8:4d:
         a7:fc:ca:e0:56:57:86:6b:88:23:49:f3:1b:3b:8c:a8:5c:bd:
         06:48:ea:cf:36:68:08:8f:f7:bf:68:8c:6d:b4:e5:fb:40:bd:
         26:41:d4:2f:19:e8:84:a9:89:d7:23:1e:b9:ab:f9:31:c8:7c:
         9a:1b:48:e7:fa:28:4d:1b:93:11:7b:a8:04:b1:6f:5b:c9:98:
         f7:c1:34:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:03:26 2026 by rpki-client