Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6433303a3a2f34382d3438203d3e20323132323932.roa
File:                     323630323a666564613a6433303a3a2f34382d3438203d3e20323132323932.roa (raw, json)
Hash identifier:          tz8M6np1BskVPV9maQLdXDzvXPXkTzCfZ+//wxsVOeQ=
Subject key identifier:   2C:E0:D9:7B:82:62:1E:8D:2A:27:78:C2:56:D7:B1:5F:DE:CF:21:CB
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       4CD440A08E37446B0A36EA4A861F312723F21F60
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6433303a3a2f34382d3438203d3e20323132323932.roa
Signing time:             Mon 16 Jun 2025 08:52:30 +0000
ROA not before:           Mon 16 Jun 2025 08:47:30 +0000
ROA not after:            Mon 15 Jun 2026 08:52:30 +0000
asID:                     212292
IP address blocks:        2602:feda:d30::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d4:40:a0:8e:37:44:6b:0a:36:ea:4a:86:1f:31:27:23:f2:1f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jun 16 08:47:30 2025 GMT
            Not After : Jun 15 08:52:30 2026 GMT
        Subject: CN=2CE0D97B82621E8D2A2778C256D7B15FDECF21CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:48:6f:48:03:b7:16:61:61:8e:d0:2f:0e:6b:
                    aa:a1:a1:74:2c:7f:d3:40:a4:c7:6c:6d:7c:9f:81:
                    88:c3:8b:20:9b:31:af:e2:7b:af:58:39:ba:8f:c0:
                    3a:76:12:df:5b:99:ad:d4:d0:0a:06:93:c3:72:bd:
                    ea:ac:81:6a:51:4e:90:64:bb:1c:98:7a:5a:71:42:
                    68:6b:75:d2:2c:5a:41:8b:ea:af:9e:8c:bd:c4:04:
                    6d:49:11:51:4f:49:4d:14:4a:92:2e:3e:18:69:1a:
                    e1:93:c8:6b:c7:21:91:0d:dc:11:90:b3:73:de:83:
                    0e:89:3a:4b:05:61:d0:3b:67:61:0b:2d:2c:7f:6c:
                    8f:ae:c7:93:76:65:53:4c:47:39:ce:1a:1b:c4:1c:
                    76:4b:70:64:c8:70:ea:78:44:d8:82:9b:82:67:f0:
                    ba:ad:80:fa:6f:a2:f9:d8:28:e6:7c:c5:91:7c:3f:
                    75:a6:5e:e8:02:67:34:da:10:a8:8b:0f:9f:55:15:
                    fe:73:53:92:cc:e9:e5:6c:24:7d:b9:4a:49:55:fd:
                    76:b1:f8:ca:01:fc:0d:90:42:e6:9f:e1:c4:4c:c8:
                    bd:b2:8d:b2:8f:5b:27:15:1c:f0:51:3a:9c:55:a4:
                    78:7a:8c:c0:7b:40:97:01:ad:18:04:12:27:de:d3:
                    93:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E0:D9:7B:82:62:1E:8D:2A:27:78:C2:56:D7:B1:5F:DE:CF:21:CB
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6433303a3a2f34382d3438203d3e20323132323932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:d30::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:7e:b9:85:32:86:d3:70:f7:c0:5b:bc:93:89:71:b4:23:29:
         81:78:76:2a:50:81:50:04:50:f1:58:7a:3f:cc:4d:87:bd:17:
         53:69:37:35:d6:c6:aa:83:5e:6e:45:33:fa:a3:0d:66:3b:66:
         07:c7:b2:fa:1d:a5:d2:79:2b:30:3d:65:36:e5:20:20:cc:33:
         c9:95:a0:da:c8:bc:4f:70:9c:83:ff:1a:67:0d:33:2a:81:f6:
         67:8d:91:f3:31:df:6c:f8:52:e6:d7:fd:c2:1f:74:22:e6:60:
         35:cb:89:da:5e:56:c2:1b:e5:13:29:7a:32:ca:a2:4f:a8:3d:
         5b:ff:9a:33:8a:a9:f2:5b:bd:f5:de:0d:5b:44:0e:66:7e:37:
         7a:23:2b:90:8c:d1:08:de:c5:54:02:1a:1d:66:6d:39:ac:98:
         01:99:03:c1:27:70:a2:8b:2d:ca:ee:da:14:24:2a:67:ae:3a:
         17:f9:34:fe:d5:1e:cd:ce:36:3d:75:88:66:0e:a4:d9:d2:9a:
         6b:52:0f:06:aa:bc:10:f2:cc:41:f6:1e:38:3c:eb:5b:c4:6a:
         96:f8:45:ca:28:b0:25:b2:1a:3c:65:72:77:6d:d6:a4:3d:83:
         24:ef:ce:61:37:ef:ee:21:99:db:ea:a7:81:c7:37:ab:9f:61:
         aa:6e:81:db
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUTNRAoI43RGsKNupKhh8xJyPyH2AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMwWhcNMjYwNjE1MDg1MjMw
WjAzMTEwLwYDVQQDEygyQ0UwRDk3QjgyNjIxRThEMkEyNzc4QzI1NkQ3QjE1RkRF
Q0YyMUNCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UhvSAO3FmFh
jtAvDmuqoaF0LH/TQKTHbG18n4GIw4sgmzGv4nuvWDm6j8A6dhLfW5mt1NAKBpPD
cr3qrIFqUU6QZLscmHpacUJoa3XSLFpBi+qvnoy9xARtSRFRT0lNFEqSLj4YaRrh
k8hrxyGRDdwRkLNz3oMOiTpLBWHQO2dhCy0sf2yPrseTdmVTTEc5zhobxBx2S3Bk
yHDqeETYgpuCZ/C6rYD6b6L52CjmfMWRfD91pl7oAmc02hCoiw+fVRX+c1OSzOnl
bCR9uUpJVf12sfjKAfwNkELmn+HETMi9so2yj1snFRzwUTqcVaR4eozAe0CXAa0Y
BBIn3tOTOwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFCzg2XuCYh6NKid4wlbXsV/e
zyHLMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6
Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh
NjQzMzMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMTMyMzIzOTMyLnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcAJgL+2g0wMA0GCSqGSIb3DQEBCwUAA4IBAQA5frmFMobTcPfAW7yTiXG0
IymBeHYqUIFQBFDxWHo/zE2HvRdTaTc11saqg15uRTP6ow1mO2YHx7L6HaXSeSsw
PWU25SAgzDPJlaDayLxPcJyD/xpnDTMqgfZnjZHzMd9s+FLm1/3CH3Qi5mA1y4na
XlbCG+UTKXoyyqJPqD1b/5oziqnyW7313g1bRA5mfjd6IyuQjNEI3sVUAhodZm05
rJgBmQPBJ3Ciiy3K7toUJCpnrjoX+TT+1R7NzjY9dYhmDqTZ0pprUg8GqrwQ8sxB
9h44POtbxGqW+EXKKLAlsho8ZXJ3bdakPYMk785hN+/uIZnb6qeBxzern2GqboHb
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:27:13 2025 by rpki-client