Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6461303a3a2f34342d3438203d3e20313432303535.roa
File:                     323630323a666564613a6461303a3a2f34342d3438203d3e20313432303535.roa (raw, json)
Hash identifier:          BtD8PvtvhZ0+xl9EjqxqPkTf1dJT0WExReDpzvyAn8k=
Subject key identifier:   A5:8A:A7:FF:C6:58:8A:F9:68:90:53:6C:50:7A:97:B7:5B:2A:AD:0B
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       38357581558674625531CA1A91D4E8932F4B2701
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6461303a3a2f34342d3438203d3e20313432303535.roa
Signing time:             Mon 16 Jun 2025 08:52:33 +0000
ROA not before:           Mon 16 Jun 2025 08:47:33 +0000
ROA not after:            Mon 15 Jun 2026 08:52:33 +0000
asID:                     142055
IP address blocks:        2602:feda:da0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:35:75:81:55:86:74:62:55:31:ca:1a:91:d4:e8:93:2f:4b:27:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jun 16 08:47:33 2025 GMT
            Not After : Jun 15 08:52:33 2026 GMT
        Subject: CN=A58AA7FFC6588AF96890536C507A97B75B2AAD0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d0:e7:f6:a1:29:69:1f:81:5c:ca:5f:98:8d:
                    f7:99:31:32:1b:5e:2c:1b:db:f1:82:f9:da:70:ac:
                    81:ef:a4:c7:4c:66:c7:c6:5e:4e:12:34:2f:63:d2:
                    c0:5b:02:46:79:f1:8b:fe:55:29:b6:c9:0b:86:45:
                    ee:ee:7b:e4:9d:fe:07:45:17:ff:90:f8:e9:95:55:
                    30:a8:83:80:4c:3f:e5:e2:da:7e:4c:83:4c:a3:a3:
                    f6:f1:f3:c1:84:e7:ef:fd:97:85:05:1e:7a:7f:ec:
                    6c:ea:14:9c:c0:66:a4:e2:86:8a:1f:3e:04:0f:3b:
                    07:d9:a1:88:6b:bb:93:64:07:d5:07:4f:eb:4a:45:
                    8b:29:04:2d:96:26:8f:d1:75:a3:10:c7:26:02:d4:
                    5c:7a:92:9e:8e:9d:6e:d9:c4:2f:ed:ea:bd:82:d7:
                    32:84:d9:ab:8a:2e:46:b1:0a:66:82:fe:61:3a:8f:
                    8f:a8:eb:cb:a9:6a:ec:5b:db:32:cc:e1:f3:09:cd:
                    3e:ae:86:95:16:9a:2f:a3:b1:5d:79:ac:90:28:95:
                    96:39:2d:53:72:01:bf:a8:e1:a4:89:8a:4b:34:02:
                    51:c3:d3:42:a0:75:16:21:8c:3d:d9:4a:c4:f0:50:
                    4e:97:b5:77:38:1b:30:3e:9a:a8:ad:42:74:67:15:
                    fb:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8A:A7:FF:C6:58:8A:F9:68:90:53:6C:50:7A:97:B7:5B:2A:AD:0B
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6461303a3a2f34342d3438203d3e20313432303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:da0::/44

    Signature Algorithm: sha256WithRSAEncryption
         3b:ab:fb:a7:2e:80:26:69:21:2e:b1:0c:01:fa:7e:b2:ab:27:
         f5:07:5e:ba:4b:50:7b:18:b5:1f:dc:91:68:e4:c1:83:80:37:
         0d:de:77:eb:9d:23:3e:e4:9a:99:c0:75:ff:1b:1d:18:ff:02:
         f3:5b:0f:31:d2:c2:f9:13:ba:09:bb:9e:ab:3d:da:16:33:a5:
         93:ee:2e:87:fd:d7:f5:51:bb:5b:fb:a7:c3:58:80:59:5d:75:
         e9:d9:a6:f5:4e:34:b9:9c:25:f0:87:12:91:fa:85:39:a3:99:
         e2:0b:4e:01:d7:c6:1f:2a:c8:ed:cb:39:f2:42:02:35:ba:a8:
         cb:9a:08:01:a2:07:71:40:7c:4d:f4:a6:ce:6b:f9:cd:c2:5a:
         95:4c:a2:4d:19:7b:4d:e7:54:6e:e0:66:9e:f7:7c:55:6d:df:
         03:77:70:f7:96:89:a0:93:f0:7e:c1:ab:38:a0:2f:72:32:b0:
         d7:42:b9:d0:66:8d:31:95:01:d2:a4:75:8e:d5:de:5c:09:81:
         a6:99:bc:19:30:e2:98:18:58:8f:6e:4f:48:83:73:0f:c3:5c:
         41:13:06:75:f4:e7:61:0d:f4:61:a5:2b:c6:e9:c2:b3:79:a4:
         fe:48:34:f9:bb:e4:84:b1:8e:c8:56:7f:9f:33:8e:01:ff:2f:
         7d:86:38:e0
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgIUODV1gVWGdGJVMcoakdToky9LJwEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNjE2MDg0NzMzWhcNMjYwNjE1MDg1MjMz
WjAzMTEwLwYDVQQDEyhBNThBQTdGRkM2NTg4QUY5Njg5MDUzNkM1MDdBOTdCNzVC
MkFBRDBCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtDn9qEpaR+B
XMpfmI33mTEyG14sG9vxgvnacKyB76THTGbHxl5OEjQvY9LAWwJGefGL/lUptskL
hkXu7nvknf4HRRf/kPjplVUwqIOATD/l4tp+TINMo6P28fPBhOfv/ZeFBR56f+xs
6hScwGak4oaKHz4EDzsH2aGIa7uTZAfVB0/rSkWLKQQtliaP0XWjEMcmAtRcepKe
jp1u2cQv7eq9gtcyhNmrii5GsQpmgv5hOo+PqOvLqWrsW9syzOHzCc0+roaVFpov
o7FdeayQKJWWOS1TcgG/qOGkiYpLNAJRw9NCoHUWIYw92UrE8FBOl7V3OBswPpqo
rUJ0ZxX7PwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFKWKp//GWIr5aJBTbFB6l7db
Kq0LMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwgYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6
Ly9jYS5uYXQubW9lL3JlcG8vTkFUT0xBQi8yLzMyMzYzMDMyM2E2NjY1NjQ2MTNh
NjQ2MTMwM2EzYTJmMzQzNDJkMzQzODIwM2QzZTIwMzEzNDMyMzAzNTM1LnJvYTAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIA
AjAJAwcEJgL+2g2gMA0GCSqGSIb3DQEBCwUAA4IBAQA7q/unLoAmaSEusQwB+n6y
qyf1B166S1B7GLUf3JFo5MGDgDcN3nfrnSM+5JqZwHX/Gx0Y/wLzWw8x0sL5E7oJ
u56rPdoWM6WT7i6H/df1Ubtb+6fDWIBZXXXp2ab1TjS5nCXwhxKR+oU5o5niC04B
18YfKsjtyznyQgI1uqjLmggBogdxQHxN9KbOa/nNwlqVTKJNGXtN51Ru4Gae93xV
bd8Dd3D3lomgk/B+was4oC9yMrDXQrnQZo0xlQHSpHWO1d5cCYGmmbwZMOKYGFiP
bk9Ig3MPw1xBEwZ19OdhDfRhpSvG6cKzeaT+SDT5u+SEsY7IVn+fM44B/y99hjjg
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:35:18 2025 by rpki-client