Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa
File:                     323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa (raw, json)
Hash identifier:          w+r26TK9vo0U3Y1Dih9XdISfnQnbyfoZk5iHTdvf0xo=
Subject key identifier:   24:C8:E2:07:F3:7B:9A:04:D9:7D:82:61:F0:3F:57:D7:92:1C:3D:20
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       7B1513508E471908E57F37D493376D3D22DDB857
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa
Signing time:             Mon 16 Jun 2025 08:52:33 +0000
ROA not before:           Mon 16 Jun 2025 08:47:33 +0000
ROA not after:            Mon 15 Jun 2026 08:52:33 +0000
asID:                     147308
IP address blocks:        2602:feda:f050::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 11:31:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:15:13:50:8e:47:19:08:e5:7f:37:d4:93:37:6d:3d:22:dd:b8:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jun 16 08:47:33 2025 GMT
            Not After : Jun 15 08:52:33 2026 GMT
        Subject: CN=24C8E207F37B9A04D97D8261F03F57D7921C3D20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:73:97:52:9e:58:cd:b3:31:bd:d9:f5:18:
                    3c:8f:0f:b6:f8:4e:4d:6f:0a:8c:c8:2b:58:ce:08:
                    c2:ac:04:72:d5:9a:22:bc:09:c8:40:d5:27:9b:2f:
                    f2:d5:14:4b:f4:1d:dc:81:e4:b4:a4:f6:95:f6:5e:
                    60:36:a8:7d:75:8e:9c:c5:d6:a0:f3:69:78:d2:79:
                    4c:6f:09:e2:96:b7:d8:14:2f:74:79:87:84:9b:f3:
                    20:c9:42:e2:d2:cd:34:3f:ad:98:74:73:ba:e2:fe:
                    f8:8d:d5:12:b5:65:38:a8:25:f1:99:a3:1b:2c:85:
                    5b:0b:85:7a:e9:cd:e3:6b:c1:63:23:a6:36:e6:19:
                    e5:c8:4e:d4:52:b4:3e:27:ba:93:a9:29:f8:28:a9:
                    c3:82:f1:0f:c0:b2:7b:98:af:1f:bb:c5:fb:a1:99:
                    ed:d6:96:4d:65:e2:02:d3:b6:6a:f0:25:8e:71:cf:
                    16:ba:de:d7:97:ce:25:92:4e:d4:3a:f2:59:5f:17:
                    e1:02:c1:4e:40:fa:c6:8d:91:cf:d1:6c:d7:69:5b:
                    a6:83:98:52:1c:f2:23:2b:8f:3a:f1:26:bf:45:23:
                    8a:d6:11:2d:63:0b:0f:9e:fd:51:21:08:fe:f2:82:
                    e9:4f:d8:b5:2a:33:60:dd:e0:ef:75:04:45:6a:98:
                    0a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C8:E2:07:F3:7B:9A:04:D9:7D:82:61:F0:3F:57:D7:92:1C:3D:20
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a663035303a3a2f34342d3438203d3e20313437333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:f050::/44

    Signature Algorithm: sha256WithRSAEncryption
         63:39:2b:07:ee:39:92:19:99:50:22:cf:0d:99:b8:ef:29:81:
         94:16:6f:d9:d4:18:05:ad:8d:25:5c:67:5f:2d:24:8b:a9:71:
         0a:0d:56:5f:30:43:13:73:1a:65:f9:83:a4:d5:e9:73:ff:83:
         31:63:8b:a8:3e:c9:08:59:56:65:37:53:57:f1:bb:a2:27:02:
         8c:48:30:b9:06:dc:0b:2c:ac:ac:4f:29:28:dd:29:9c:e6:6c:
         9d:a7:de:d1:cf:74:ab:8a:31:36:70:bc:2f:11:a3:3f:19:bb:
         83:de:6f:d3:b9:34:9c:5c:58:78:86:18:4e:36:42:9f:dc:64:
         95:be:2d:5f:65:00:1c:38:b1:9f:11:9d:37:67:e5:f7:08:d9:
         4f:4c:13:8a:41:db:59:92:1b:9a:66:07:a5:09:5e:85:7d:f2:
         b3:21:ea:cb:c0:c7:c4:3b:b2:c2:75:24:40:97:7d:20:62:75:
         11:c9:95:f5:bd:64:10:bc:d2:71:63:37:9a:e2:ed:af:37:4c:
         0e:11:e9:6f:82:5d:f5:51:8d:75:2a:2a:b4:c9:5d:9a:fa:ae:
         06:01:0a:63:ea:ee:d3:ab:3c:75:b6:e6:81:d3:76:cc:4c:e1:
         5f:9a:cc:3e:28:c3:ea:b3:7b:ed:5d:6f:65:c1:c9:09:64:a3:
         2f:43:35:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:27:01 2025 by rpki-client