Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa
File:                     323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa (raw, json)
Hash identifier:          lOZ7+OedrlMMNmyGoLXE8xWADpT/kVyOiUPbzw7Vt4M=
Subject key identifier:   ED:28:EC:73:06:04:D5:EB:55:E7:38:E4:06:30:BB:35:09:DA:D4:0E
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       59B20722E2B3D6B7B488957C85E352AA037866C4
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa
Signing time:             Mon 16 Jun 2025 08:52:26 +0000
ROA not before:           Mon 16 Jun 2025 08:47:26 +0000
ROA not after:            Mon 15 Jun 2026 08:52:26 +0000
asID:                     149285
IP address blocks:        2602:feda:e40::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 19:56:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b2:07:22:e2:b3:d6:b7:b4:88:95:7c:85:e3:52:aa:03:78:66:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jun 16 08:47:26 2025 GMT
            Not After : Jun 15 08:52:26 2026 GMT
        Subject: CN=ED28EC730604D5EB55E738E40630BB3509DAD40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c6:0b:f0:bf:c6:1c:d2:b8:f6:6c:b8:43:e5:
                    6c:a9:8d:5f:a2:4c:e6:5a:a8:7c:ff:9c:c3:8b:06:
                    f2:68:fc:fe:84:21:8d:aa:3a:e6:7c:c2:b5:2f:2c:
                    af:d5:64:e3:62:88:5b:95:d9:ca:dd:d3:ae:31:2f:
                    9b:9f:76:7c:f0:d9:6f:b2:29:da:de:91:d1:27:c7:
                    bb:df:ce:28:a5:71:82:73:e5:a0:cc:93:c0:15:2a:
                    46:4f:d3:25:e9:d1:19:07:27:50:2b:8a:fe:e7:fd:
                    73:88:81:25:b4:00:9f:85:96:b2:50:7c:6e:4e:c1:
                    01:b5:e1:29:07:77:b4:84:ae:96:59:c7:b8:02:57:
                    15:cb:32:05:22:c1:d4:3d:31:0b:6b:00:25:24:23:
                    70:df:2c:df:7d:ef:b0:dd:d0:8f:5e:17:c2:3a:84:
                    4a:92:2e:14:d9:b2:5a:83:47:28:34:0d:fd:53:bc:
                    66:91:a5:4e:c6:fe:35:04:b6:5c:74:d4:38:c7:2d:
                    e9:7d:2e:9a:8c:c7:7e:a8:a0:13:3b:f3:1d:0f:de:
                    e5:dc:29:b7:52:a0:4c:c1:58:10:f2:bf:8b:04:ad:
                    85:33:73:f3:1e:28:03:71:ea:21:0f:d8:96:e7:a6:
                    50:5d:c4:17:ac:8a:20:51:90:2e:1a:2b:23:58:dc:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:28:EC:73:06:04:D5:EB:55:E7:38:E4:06:30:BB:35:09:DA:D4:0E
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6534303a3a2f34342d3434203d3e20313439323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:e40::/44

    Signature Algorithm: sha256WithRSAEncryption
         35:17:1c:0f:40:3f:c8:7b:45:65:4d:d7:82:8d:b0:79:64:02:
         f7:f2:d8:a3:e9:7d:3d:b7:f6:15:88:9c:ce:dc:de:ca:64:1e:
         d5:c5:8f:f1:34:79:e2:f6:1e:05:92:27:e7:12:06:b0:27:31:
         56:56:35:97:dd:5e:45:90:86:26:59:62:69:3f:38:d2:64:1c:
         56:b0:32:3e:15:03:78:dd:7b:7f:5e:f0:84:f8:72:9a:ed:01:
         3d:56:85:98:ae:39:8a:cc:25:7a:e1:4a:a5:95:52:f2:b0:dc:
         26:88:00:de:2e:9f:d6:06:22:1e:b5:a4:2a:27:5e:66:2a:1b:
         30:3d:59:94:5d:ee:70:3e:3e:8a:63:b9:be:a3:aa:93:79:34:
         b4:ae:0c:77:ab:5b:dd:4a:d4:f8:e2:e2:13:62:dd:f8:df:15:
         8a:9e:6f:ec:cd:28:9a:96:30:b8:f8:be:28:cd:33:80:ca:2d:
         52:e6:d2:d8:0a:90:d4:5a:74:f1:e0:8b:25:85:1d:70:e8:ad:
         7f:55:8c:f0:55:92:0b:ba:50:0a:05:62:b3:37:91:1a:45:e3:
         9e:62:a9:dc:93:ee:39:a0:75:f3:e2:bd:ad:bc:d8:b6:73:6a:
         46:65:19:ed:0b:5f:7f:29:2c:b0:95:93:ab:a2:e7:a6:2d:27:
         b0:ca:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 04:05:28 2025 by rpki-client