Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a353a3a2f34382d3438203d3e203436393937.roa
File:                     323630323a666564613a353a3a2f34382d3438203d3e203436393937.roa (raw, json)
Hash identifier:          UjgIcJGFo/3Ha7yHblPsEiZYxyrwzHz5q9hKm+oXuog=
Subject key identifier:   28:76:2E:A3:88:AA:05:61:51:ED:D3:66:31:89:6C:17:5D:A2:C8:B5
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       2BA413C5C4015BC9BD7A35419C3008E98FD972C5
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a353a3a2f34382d3438203d3e203436393937.roa
Signing time:             Mon 16 Jun 2025 08:52:25 +0000
ROA not before:           Mon 16 Jun 2025 08:47:25 +0000
ROA not after:            Mon 15 Jun 2026 08:52:25 +0000
asID:                     46997
IP address blocks:        2602:feda:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 09:31:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a4:13:c5:c4:01:5b:c9:bd:7a:35:41:9c:30:08:e9:8f:d9:72:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jun 16 08:47:25 2025 GMT
            Not After : Jun 15 08:52:25 2026 GMT
        Subject: CN=28762EA388AA056151EDD36631896C175DA2C8B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7b:ef:54:2f:91:d7:4e:69:0a:50:9c:b8:2c:
                    92:1c:0f:c8:3e:cd:9b:00:e8:70:31:b4:7f:b9:cd:
                    51:ed:fd:e9:40:00:9c:a6:fe:e0:34:33:4e:be:a9:
                    d0:54:94:fe:e7:7f:96:62:39:05:dd:67:24:f5:65:
                    fb:35:d6:1c:29:a5:78:fa:96:c7:7d:ce:fe:e1:b6:
                    63:f3:ea:dc:0b:5d:dc:42:72:84:77:d6:fc:ff:20:
                    3f:9a:39:78:b8:71:a4:c5:3f:98:d3:e0:de:de:d2:
                    b3:bb:4e:1c:ea:e4:3d:c8:1a:35:37:0f:fe:e9:01:
                    5d:f1:05:97:ad:93:dd:42:a4:85:ab:a8:26:a6:28:
                    81:b6:9a:c5:81:9d:0c:90:94:e3:0a:a7:bd:37:f2:
                    de:b5:6a:58:61:6d:c4:b0:7c:75:46:95:7f:ff:4b:
                    cc:6e:9d:b9:bf:5a:48:9e:73:6b:bd:e5:24:f3:f4:
                    66:57:35:c0:2b:65:a1:ab:7a:e5:78:51:08:6e:02:
                    2c:47:5a:02:28:98:b7:a3:dc:be:21:13:9f:ef:94:
                    f9:ad:9a:00:ec:8a:e2:54:c1:5b:42:32:a4:5f:02:
                    9d:08:51:81:74:f9:a2:9e:c8:53:31:5b:f9:50:52:
                    a3:e4:c9:64:2e:8f:f1:c3:60:0e:e8:e8:e2:e9:17:
                    1b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:76:2E:A3:88:AA:05:61:51:ED:D3:66:31:89:6C:17:5D:A2:C8:B5
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a353a3a2f34382d3438203d3e203436393937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:48:13:9a:2e:41:b4:5c:32:75:de:2f:49:7e:a3:f5:71:98:
         22:ee:f9:22:4b:c8:91:8b:41:a2:73:36:87:1d:59:4d:a2:91:
         d2:04:67:dd:b2:f3:3a:ec:78:0a:33:77:c5:94:4c:03:b9:44:
         65:42:0a:9d:0c:ed:24:91:ed:d4:68:66:5b:57:b7:31:62:8b:
         1b:6b:ab:7d:05:e5:9b:a0:2c:4a:38:8f:81:7c:40:ae:48:24:
         66:f6:3e:39:8d:92:75:bb:16:f4:28:f4:df:a6:7b:24:41:4c:
         41:95:96:bf:ee:3b:b7:7e:c9:2f:2f:8a:71:c4:f0:b2:b5:c7:
         11:45:14:b6:da:ca:dd:e0:69:9a:bd:37:29:0d:fd:94:bf:59:
         94:bb:8f:c2:25:8d:98:b2:fd:fd:59:1f:e5:7d:a8:ab:6e:b5:
         e4:74:7c:85:ff:d4:b3:b8:12:c1:26:86:18:56:ae:ae:e9:f1:
         b2:f0:9b:00:35:05:2f:0c:cd:59:fd:86:4d:31:30:1c:fb:6a:
         f9:04:14:08:29:1c:c3:80:9e:e8:19:a2:a5:26:3a:7c:9d:fa:
         44:ba:ad:66:c0:69:d6:88:c0:40:29:33:d8:21:46:aa:75:a8:
         e8:9b:84:0f:84:4f:bc:f1:1b:0e:c1:0a:aa:c5:c0:0c:4a:56:
         73:23:a7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:19:50 2025 by rpki-client