Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66363a3a2f34382d3438203d3e20323035303538.roa
File:                     323630323a666564613a66363a3a2f34382d3438203d3e20323035303538.roa (raw, json)
Hash identifier:          l8BHTwe7OGXkE2PjAMMMI5HiBkGO537zPl/5u88613U=
Subject key identifier:   65:02:5A:DF:63:84:52:C2:92:37:44:C5:D1:0F:EA:D8:66:DB:29:62
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       317C08952A62044F176465556FE978130D30E28F
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66363a3a2f34382d3438203d3e20323035303538.roa
Signing time:             Sat 05 Jul 2025 03:52:40 +0000
ROA not before:           Sat 05 Jul 2025 03:47:40 +0000
ROA not after:            Sat 04 Jul 2026 03:52:40 +0000
asID:                     205058
IP address blocks:        2602:feda:f6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:7c:08:95:2a:62:04:4f:17:64:65:55:6f:e9:78:13:0d:30:e2:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jul  5 03:47:40 2025 GMT
            Not After : Jul  4 03:52:40 2026 GMT
        Subject: CN=65025ADF638452C2923744C5D10FEAD866DB2962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:7a:b6:4a:05:bb:e5:4c:55:d2:df:44:58:ee:
                    69:8b:b4:5d:13:a1:0d:24:0e:d3:4b:ed:e3:87:98:
                    f2:34:8c:09:46:2d:d8:22:19:fa:fe:63:a0:52:33:
                    30:f3:92:a2:a6:33:97:74:b8:16:55:5f:cc:10:5e:
                    b4:ab:38:6f:23:db:96:fd:92:49:54:08:37:61:57:
                    61:b4:3a:58:aa:83:01:b8:27:b3:2e:a7:48:30:35:
                    c5:e9:2a:61:c9:9e:9a:97:a9:55:bb:93:0e:ae:13:
                    29:62:dd:23:75:6a:8f:7c:fa:91:9a:07:10:8c:30:
                    73:07:d8:45:49:3b:b0:5e:96:52:22:e6:de:5d:e4:
                    a1:64:f4:ea:18:9a:79:70:16:03:89:0f:a6:a6:c9:
                    d9:5c:f3:f9:26:a4:bd:1d:a3:38:72:94:5f:c5:3f:
                    e3:b8:66:96:f1:c7:8e:32:98:8f:26:96:f5:08:06:
                    73:14:e9:40:f7:bc:2e:cf:2c:b8:56:b4:cf:43:81:
                    ff:f6:6b:06:0a:c8:7e:95:23:47:66:1f:80:b9:fc:
                    a7:a0:07:68:b0:d5:be:c1:94:dd:e4:35:2e:9f:41:
                    45:c4:80:db:72:2c:40:59:0e:e3:cd:40:4f:ab:34:
                    d5:72:d5:a3:fb:42:32:2c:37:d8:ef:88:f6:98:3d:
                    4b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:02:5A:DF:63:84:52:C2:92:37:44:C5:D1:0F:EA:D8:66:DB:29:62
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a66363a3a2f34382d3438203d3e20323035303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:f6::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:b7:ef:18:de:75:f7:66:b0:07:d7:ce:a2:ef:c1:f9:ce:d0:
         a7:a3:2f:0c:4d:c6:60:dd:f9:c9:43:b9:61:c8:eb:78:49:39:
         fc:f0:f6:e2:43:aa:83:a6:e9:11:91:ce:9a:31:01:40:68:0d:
         b0:ac:63:94:ff:37:ec:1d:a0:ce:43:db:01:86:a5:c1:12:84:
         ab:51:9a:8a:02:91:2f:d5:b5:78:71:88:a7:0b:04:b4:7b:18:
         2d:18:7c:63:c0:ef:41:14:1f:ae:ba:8d:d0:4d:8b:90:c3:56:
         7a:74:bf:82:c9:b2:e9:18:cf:91:73:15:51:e8:5e:26:bb:9c:
         54:73:dd:98:ee:ab:37:da:7b:ad:77:90:40:e8:b0:cb:31:34:
         fc:08:f5:10:e8:87:2b:ff:4a:3a:49:a4:05:dc:26:c7:65:89:
         7c:05:9c:30:9e:35:ba:d4:e1:e5:31:42:70:4f:ef:d5:80:77:
         69:aa:b6:9b:de:c8:69:cf:e0:13:4d:9b:fe:fa:6b:08:42:34:
         40:da:b1:7f:ea:cc:0f:91:be:46:6f:af:38:06:24:c5:da:39:
         7e:96:ac:c0:73:b8:46:10:b2:8c:d7:d6:b0:5e:36:16:b9:be:
         39:08:4f:f2:2f:f6:3c:4a:70:41:93:76:6b:4e:a8:a8:c3:46:
         a6:62:61:74
-----BEGIN CERTIFICATE-----
MIIFaTCCBFGgAwIBAgIUMXwIlSpiBE8XZGVVb+l4Ew0w4o8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA5M2NiYjQ2ZjY5OTAxYzExOWEyYmUxMDgzZGYyYWEy
YjQzM2JiYTNmOTYwZmJjMTgwHhcNMjUwNzA1MDM0NzQwWhcNMjYwNzA0MDM1MjQw
WjAzMTEwLwYDVQQDEyg2NTAyNUFERjYzODQ1MkMyOTIzNzQ0QzVEMTBGRUFEODY2
REIyOTYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nq2SgW75UxV
0t9EWO5pi7RdE6ENJA7TS+3jh5jyNIwJRi3YIhn6/mOgUjMw85KipjOXdLgWVV/M
EF60qzhvI9uW/ZJJVAg3YVdhtDpYqoMBuCezLqdIMDXF6SphyZ6al6lVu5MOrhMp
Yt0jdWqPfPqRmgcQjDBzB9hFSTuwXpZSIubeXeShZPTqGJp5cBYDiQ+mpsnZXPP5
JqS9HaM4cpRfxT/juGaW8ceOMpiPJpb1CAZzFOlA97wuzyy4VrTPQ4H/9msGCsh+
lSNHZh+AufynoAdosNW+wZTd5DUun0FFxIDbcixAWQ7jzUBPqzTVctWj+0IyLDfY
74j2mD1LOQIDAQABo4ICaTCCAmUwHQYDVR0OBBYEFGUCWt9jhFLCkjdExdEP6thm
2yliMB8GA1UdIwQYMBaAFBYlfBlmjGcTxAErEB5kYmbNd7UNMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL2NhLm5hdC5tb2UvcmVwby9O
QVRPTEFCLzIvMTYyNTdDMTk2NjhDNjcxM0M0MDEyQjEwMUU2NDYyNjZDRDc3QjUw
RC5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEy
ZjMtNjI5OWEzYjAyZTI5LzA0YzEyYzZjLWFiMGUtNGQwMy1iOWM4LTZjMzU5MjM2
OGM3Ny81MDkzY2JiNDZmNjk5MDFjMTE5YTJiZTEwODNkZjJhYTJiNDMzYmJhM2Y5
NjBmYmMxOC5jZXIwfgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzov
L2NhLm5hdC5tb2UvcmVwby9OQVRPTEFCLzIvMzIzNjMwMzIzYTY2NjU2NDYxM2E2
NjM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzMDM1MzAzNTM4LnJvYTAYBgNV
HSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJ
AwcAJgL+2gD2MA0GCSqGSIb3DQEBCwUAA4IBAQCPt+8Y3nX3ZrAH186i78H5ztCn
oy8MTcZg3fnJQ7lhyOt4STn88PbiQ6qDpukRkc6aMQFAaA2wrGOU/zfsHaDOQ9sB
hqXBEoSrUZqKApEv1bV4cYinCwS0exgtGHxjwO9BFB+uuo3QTYuQw1Z6dL+CybLp
GM+RcxVR6F4mu5xUc92Y7qs32nutd5BA6LDLMTT8CPUQ6Icr/0o6SaQF3CbHZYl8
BZwwnjW61OHlMUJwT+/VgHdpqrab3shpz+ATTZv++msIQjRA2rF/6swPkb5Gb684
BiTF2jl+lqzAc7hGELKM19awXjYWub45CE/yL/Y8SnBBk3ZrTqiow0amYmF0
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:17 2025 by rpki-client