Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa
File:                     323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa (raw, json)
Hash identifier:          QeeFESigxQTaplUBir5WHpwqLfwxRbasVVbrf2+sqXk=
Subject key identifier:   3B:10:71:D4:B8:D0:62:4C:2E:CF:69:B2:51:11:88:87:AF:EF:10:2D
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       2E52180479A5E90C824E4603AF4D3F932E630F50
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa
Signing time:             Mon 16 Jun 2025 08:52:32 +0000
ROA not before:           Mon 16 Jun 2025 08:47:32 +0000
ROA not after:            Mon 15 Jun 2026 08:52:32 +0000
asID:                     142634
IP address blocks:        2602:feda:ab0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 08:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:52:18:04:79:a5:e9:0c:82:4e:46:03:af:4d:3f:93:2e:63:0f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jun 16 08:47:32 2025 GMT
            Not After : Jun 15 08:52:32 2026 GMT
        Subject: CN=3B1071D4B8D0624C2ECF69B251118887AFEF102D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:38:90:fd:fa:ae:c4:85:eb:cb:a5:78:02:
                    a0:91:7e:b7:46:17:6c:4e:4d:28:81:f3:91:44:80:
                    bf:ab:1c:aa:56:31:a3:53:b4:2e:c2:9b:0d:1b:15:
                    ef:64:ac:bb:03:a5:dc:b3:09:98:97:05:5b:4a:40:
                    fb:25:d4:8f:05:b0:82:06:bf:de:14:34:84:68:61:
                    d9:80:02:c6:d1:cd:8f:0c:f2:ae:af:cd:94:41:9b:
                    e3:10:a1:88:37:79:31:0b:3d:26:85:ee:97:ff:5b:
                    a6:5a:90:96:8f:92:9b:a0:a7:4a:56:de:55:51:2e:
                    17:34:1c:38:d4:92:c6:5b:33:f4:da:ce:cf:88:6a:
                    3c:6a:61:fc:ea:00:0e:33:05:e9:a7:72:9c:65:a6:
                    66:8a:e7:d7:84:6c:99:a1:5e:f0:8b:65:b7:42:24:
                    fe:9c:78:e4:9c:01:cb:22:92:57:5c:f5:9b:93:c4:
                    a1:25:3d:47:f5:54:90:96:83:f5:2c:41:c8:aa:00:
                    d8:6b:94:e1:3b:23:fa:8a:eb:bf:15:10:fa:bc:84:
                    0f:56:25:62:09:89:b5:fd:50:d5:83:2a:0a:96:8c:
                    e0:9f:65:da:3f:83:28:87:61:44:9b:22:df:4b:5a:
                    d4:c4:5d:83:5c:86:e0:b1:62:02:38:c2:00:37:b3:
                    dc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:10:71:D4:B8:D0:62:4C:2E:CF:69:B2:51:11:88:87:AF:EF:10:2D
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6162303a3a2f34342d3438203d3e20313432363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ab0::/44

    Signature Algorithm: sha256WithRSAEncryption
         18:9f:f0:2c:16:23:ef:80:6c:f1:59:32:e7:f5:a1:8d:3d:9d:
         3f:53:17:78:f7:53:00:e1:48:44:52:ee:45:91:14:79:d2:9d:
         ef:43:88:0e:b8:43:bf:ce:dc:2f:45:c8:73:68:bc:17:91:16:
         de:22:df:6e:96:9f:f4:77:d2:ec:4c:0f:d7:e7:4d:34:4b:c2:
         09:32:e9:0d:10:44:6a:11:cc:17:ea:93:e2:6c:f3:ab:ff:bd:
         00:4c:b2:a2:88:cc:38:e8:dc:8f:d0:7d:21:7b:7b:b8:0e:2c:
         c3:de:80:29:1a:25:93:92:59:95:8c:a0:e4:42:cf:8b:1f:66:
         91:34:51:2e:54:f7:c4:2c:51:33:32:a9:0e:e8:b2:51:2b:e7:
         b6:3e:43:f1:7e:14:29:f7:b0:20:c4:65:db:cd:55:30:8a:37:
         8c:d4:bf:32:a9:48:8e:0b:0d:28:5e:52:f3:be:50:68:67:b2:
         ef:e7:b3:a9:de:56:58:61:43:bf:a5:6c:ec:3c:41:25:22:cf:
         b5:aa:da:43:03:13:ca:20:2d:92:6c:b7:94:e1:a1:b9:b9:d8:
         71:79:de:e4:93:eb:f5:3b:36:cb:51:6e:3a:ad:59:0a:4e:95:
         36:d3:9b:c7:97:0c:76:20:6d:be:3f:a0:78:6c:fb:81:82:03:
         75:29:ae:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:43:32 2025 by rpki-client