Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313431373036.roa
File:                     323630323a666564613a6165363a3a2f34372d3438203d3e20313431373036.roa (raw, json)
Hash identifier:          lpv/UaqMV+62yAGMKnmA/scBXQv0aCFtMxW3BJE2cOE=
Subject key identifier:   D9:6F:7A:1B:F2:D1:D6:4A:7A:CE:C4:23:21:79:A6:13:20:47:3C:1B
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       2D9C0685D75F87F09AE759CB65C762FA2710AF5A
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313431373036.roa
Signing time:             Mon 16 Jun 2025 08:52:29 +0000
ROA not before:           Mon 16 Jun 2025 08:47:29 +0000
ROA not after:            Mon 15 Jun 2026 08:52:29 +0000
asID:                     141706
IP address blocks:        2602:feda:ae6::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 08:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9c:06:85:d7:5f:87:f0:9a:e7:59:cb:65:c7:62:fa:27:10:af:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jun 16 08:47:29 2025 GMT
            Not After : Jun 15 08:52:29 2026 GMT
        Subject: CN=D96F7A1BF2D1D64A7ACEC4232179A61320473C1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:36:42:46:20:fb:df:fd:1a:6b:2c:c6:7a:13:
                    09:e6:e1:33:f7:97:10:ef:5d:d8:62:32:34:c1:35:
                    32:78:0d:61:50:71:87:42:01:ca:d5:02:c6:ee:22:
                    4d:cc:92:ab:6a:82:56:bc:59:00:85:55:8e:4f:46:
                    1d:6c:ad:6d:ec:46:aa:a8:72:fc:3a:71:bf:d5:60:
                    bd:c6:8a:dc:a9:7c:91:09:7e:1f:1f:d2:fa:30:e8:
                    c6:0b:bd:3d:56:fc:5b:c5:63:ca:1a:8b:35:42:80:
                    f5:b1:0d:f5:a2:3e:06:29:4c:5a:fc:f3:4d:ed:64:
                    20:9b:87:99:6a:b9:7a:1b:ce:a8:cb:fe:bb:d9:4c:
                    9e:40:47:52:a5:f3:db:2f:53:9b:80:9c:03:e3:3b:
                    c7:d5:7c:5e:df:8f:a4:19:f7:91:20:20:d9:e7:71:
                    55:91:76:52:0c:f9:9a:79:aa:1b:1d:ef:98:82:c0:
                    17:c9:ce:30:2e:dd:ec:df:8d:ed:b6:79:a6:d7:76:
                    61:be:a1:39:2f:41:0e:1f:7b:e7:4a:b9:76:01:21:
                    a2:ca:c6:68:1b:e7:4e:83:68:e5:81:6c:56:f0:6d:
                    0f:f1:22:84:e6:76:ad:61:e9:63:ed:dd:ae:bb:e3:
                    9b:ca:be:e4:bb:2f:05:9e:4e:89:a7:59:38:3f:31:
                    dd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:6F:7A:1B:F2:D1:D6:4A:7A:CE:C4:23:21:79:A6:13:20:47:3C:1B
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6165363a3a2f34372d3438203d3e20313431373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:ae6::/47

    Signature Algorithm: sha256WithRSAEncryption
         9f:81:ca:7d:18:0f:c3:a7:53:49:0f:c4:ff:a2:03:98:61:c7:
         fd:0d:ae:02:53:be:fc:f3:62:e4:08:f2:15:c0:dd:83:34:77:
         91:5b:c0:f9:36:40:ea:04:5e:06:40:f7:d9:c6:09:70:e4:d3:
         82:0c:39:18:3e:bd:d5:c8:6a:f5:9d:eb:4b:d0:2b:c2:b7:db:
         44:9a:ce:77:5a:e9:fc:87:d3:38:59:53:77:68:99:09:d3:f7:
         b0:d2:73:96:51:6f:9f:35:42:82:42:87:3d:0c:06:24:4d:ba:
         a3:ef:cf:0d:10:fc:76:69:2b:f4:f4:77:54:41:c3:91:d6:7b:
         a8:a5:37:f6:2c:a4:82:ce:9f:fe:b4:ad:b1:60:62:7c:58:15:
         7a:a0:45:fe:90:72:fd:3a:6c:41:aa:fd:2a:6b:3f:b2:d6:cc:
         a8:06:9d:a4:5c:9a:65:04:6f:01:71:c5:67:b7:22:8d:21:bc:
         3f:c9:38:11:79:2b:9c:54:fa:cb:00:24:0d:22:e0:0f:78:fa:
         bb:55:9b:bc:1d:79:0e:3a:80:9e:49:64:7d:c7:7b:58:47:9c:
         e6:9f:76:ee:b1:d7:38:a8:67:8c:3d:ae:3e:f0:35:55:3c:c1:
         48:4a:30:3e:54:9a:88:4b:2f:20:10:73:dc:c9:d8:ba:b4:d4:
         ee:b8:d7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:44:12 2025 by rpki-client