Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a33383a3a2f34352d3438203d3e203436393937.roa
File:                     323630323a666564613a33383a3a2f34352d3438203d3e203436393937.roa (raw, json)
Hash identifier:          Ud8pSsmXVURcmnLNBcW01rstEaDHlEiuiSYkHep0Apg=
Subject key identifier:   EB:F7:68:CE:25:77:49:23:98:87:EA:40:50:DF:8F:1D:A3:18:56:48
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       192E92D3312F1455E120569D7749CE2D56B0B585
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a33383a3a2f34352d3438203d3e203436393937.roa
Signing time:             Mon 16 Jun 2025 08:52:31 +0000
ROA not before:           Mon 16 Jun 2025 08:47:31 +0000
ROA not after:            Mon 15 Jun 2026 08:52:31 +0000
asID:                     46997
IP address blocks:        2602:feda:38::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 09:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:2e:92:d3:31:2f:14:55:e1:20:56:9d:77:49:ce:2d:56:b0:b5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jun 16 08:47:31 2025 GMT
            Not After : Jun 15 08:52:31 2026 GMT
        Subject: CN=EBF768CE257749239887EA4050DF8F1DA3185648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:48:02:47:0c:e3:6f:80:16:02:a5:b9:8a:4b:
                    93:6e:bc:8d:c9:fd:00:a9:22:fe:b9:99:24:17:31:
                    6f:9e:91:1a:c4:0b:bb:cf:45:2f:fe:de:21:62:04:
                    c9:a0:21:24:ab:3f:09:16:54:db:a2:64:ac:e8:fc:
                    0a:ff:c3:1c:96:fc:1c:05:63:31:ec:e0:ee:28:89:
                    43:08:d3:ec:dc:08:6c:13:18:9e:1a:b6:0c:4a:de:
                    43:0f:a4:39:78:2c:10:12:6f:71:84:53:a0:15:c5:
                    da:8c:dd:ee:b4:81:25:9e:21:69:bc:18:42:a2:b0:
                    b7:b7:e9:f6:40:94:ec:9b:50:04:28:28:fb:36:64:
                    ab:2b:3f:b9:64:eb:64:42:05:6a:f0:1f:d8:2c:fe:
                    c8:c5:8d:18:40:c6:e8:27:44:a3:f4:00:ef:20:5f:
                    3a:1c:df:79:d7:d3:0c:23:eb:a7:44:6d:b5:b5:f3:
                    10:87:15:96:87:98:77:76:8d:68:1c:e1:91:95:84:
                    0d:80:d9:0f:d4:3f:e3:9e:9f:42:63:7a:7c:13:5e:
                    00:7e:34:ff:73:39:75:68:ed:93:cf:fd:4b:4d:52:
                    4b:c5:c6:06:e1:ea:8c:67:fd:b7:26:c7:c4:1e:a2:
                    f1:a1:b8:36:66:c6:62:68:dd:a1:8e:7c:7d:15:06:
                    28:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F7:68:CE:25:77:49:23:98:87:EA:40:50:DF:8F:1D:A3:18:56:48
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a33383a3a2f34352d3438203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:38::/45

    Signature Algorithm: sha256WithRSAEncryption
         b1:98:3a:83:08:20:1b:82:17:d9:7f:55:18:59:a7:e1:77:ba:
         a5:de:73:7a:7c:51:58:83:dd:2c:94:dc:37:45:72:2e:8f:b2:
         4a:ad:5f:a2:c8:da:d6:4c:40:6e:a2:24:6a:96:2c:15:c7:3a:
         2b:cd:ea:b6:c9:a5:bb:ac:c5:5d:f0:bd:0c:c2:9f:72:50:b6:
         51:96:f8:12:81:da:09:a2:92:10:40:00:e7:7b:4c:b5:be:7b:
         c6:5d:42:c4:bc:c3:f4:2b:4a:5e:70:ed:ab:72:f2:33:24:64:
         88:eb:af:77:df:c0:dc:bc:5d:12:a4:6d:47:38:31:58:0b:01:
         e9:33:4e:94:65:f6:6c:4c:be:2c:4b:34:3f:7e:18:22:4d:92:
         21:ee:db:b3:50:3a:97:ab:c3:36:b4:ac:02:70:e2:d7:1d:9a:
         3b:c3:32:c0:e3:21:95:c5:93:bb:62:a5:17:24:0c:c4:ec:0e:
         82:e5:62:db:45:e3:ce:6c:45:0e:7f:ff:85:7d:34:3a:45:e9:
         c1:c2:b2:58:f7:77:f8:5f:e3:a3:2e:56:fe:36:3c:6d:91:3a:
         09:a0:37:b3:de:d2:d7:87:20:02:f2:ce:5d:59:77:f1:eb:2b:
         79:ca:2c:06:eb:f8:47:c4:29:b8:15:0a:7a:19:45:3b:b2:5e:
         70:91:48:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:09:42 2025 by rpki-client