Route Origin Authorization

$ rpki-client -vvf ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6432303a3a2f34352d3438203d3e20323132323337.roa
File:                     323630323a666564613a6432303a3a2f34352d3438203d3e20323132323337.roa (raw, json)
Hash identifier:          VYSo3dabaasQ0a90v0XXwf9E0qXqHNMF8KLOzpWi4As=
Subject key identifier:   9C:90:2F:6E:00:0F:91:6C:98:A2:61:43:CB:30:3A:1E:BB:6A:61:CE
Certificate issuer:       /CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
Certificate serial:       2729C96D2261CE58B1FBC019E5E0D5558558676B
Authority key identifier: 16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
Subject info access:      rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6432303a3a2f34352d3438203d3e20323132323337.roa
Signing time:             Mon 16 Jun 2025 08:52:26 +0000
ROA not before:           Mon 16 Jun 2025 08:47:26 +0000
ROA not after:            Mon 15 Jun 2026 08:52:26 +0000
asID:                     212237
IP address blocks:        2602:feda:d20::/45 maxlen: 48
Validation:               OK
Signature path:           rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl
                          rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 08:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:29:c9:6d:22:61:ce:58:b1:fb:c0:19:e5:e0:d5:55:85:58:67:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18
        Validity
            Not Before: Jun 16 08:47:26 2025 GMT
            Not After : Jun 15 08:52:26 2026 GMT
        Subject: CN=9C902F6E000F916C98A26143CB303A1EBB6A61CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:21:2a:1f:e0:56:ac:5b:18:9f:78:cb:27:
                    ae:90:47:ad:3f:82:92:17:47:0e:2d:86:bf:e9:56:
                    e5:bf:1d:71:f3:e3:b4:93:0f:2d:30:d9:4c:11:21:
                    ad:79:5c:7e:13:29:b6:6a:ac:80:12:06:44:ad:5b:
                    0b:f5:6f:e6:57:a3:8f:b4:a8:86:41:ce:b5:c5:ef:
                    85:a6:a5:11:89:69:1d:c8:82:62:60:b9:e2:8c:a6:
                    aa:db:1f:0a:bd:c3:2c:02:27:e5:2b:8c:25:d6:b3:
                    60:14:83:72:2e:d4:de:6e:0f:44:00:cd:16:f7:25:
                    63:9a:e8:56:b2:dc:66:89:52:b2:e9:9b:95:35:9d:
                    d1:c2:15:84:55:28:38:33:8e:a5:51:a2:31:1a:4c:
                    68:02:9c:43:16:a2:be:97:e8:4d:e9:4d:dc:43:2c:
                    00:e3:df:68:cc:3a:f4:55:1b:ac:5a:8f:a4:df:17:
                    eb:31:65:bc:d0:a4:c6:c7:b8:55:ca:18:cc:82:44:
                    46:e1:2f:6a:84:27:7b:53:8b:78:d3:14:f7:c5:87:
                    e8:b1:ce:0b:6d:3f:a6:70:f3:b3:f3:6f:cf:1b:f3:
                    ab:ac:5c:29:a1:c3:cf:57:b5:68:40:42:c6:f3:d5:
                    25:fc:66:01:79:eb:60:49:f7:21:02:42:69:82:24:
                    f7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:90:2F:6E:00:0F:91:6C:98:A2:61:43:CB:30:3A:1E:BB:6A:61:CE
            X509v3 Authority Key Identifier:
                keyid:16:25:7C:19:66:8C:67:13:C4:01:2B:10:1E:64:62:66:CD:77:B5:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.nat.moe/repo/NATOLAB/2/16257C19668C6713C4012B101E646266CD77B50D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/04c12c6c-ab0e-4d03-b9c8-6c3592368c77/5093cbb46f69901c119a2be1083df2aa2b433bba3f960fbc18.cer

            Subject Information Access:
                Signed Object - URI:rsync://ca.nat.moe/repo/NATOLAB/2/323630323a666564613a6432303a3a2f34352d3438203d3e20323132323337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:feda:d20::/45

    Signature Algorithm: sha256WithRSAEncryption
         c5:11:1b:44:9b:52:b0:2f:46:53:04:d5:68:ad:0f:f8:86:94:
         a2:fc:fe:ef:dc:66:fd:9a:89:6c:fc:81:52:3f:c9:c5:3b:80:
         2c:85:8c:4b:08:34:b0:90:e9:92:91:c4:8f:a6:da:d7:34:0a:
         af:f9:0b:a9:50:e3:7c:e7:d7:e0:1b:19:81:8b:b6:59:fd:3d:
         22:a9:e8:82:33:72:b4:85:75:69:97:69:e8:49:78:70:28:68:
         9e:d0:19:59:d0:15:2e:23:3b:13:f1:58:3c:37:0e:d4:d7:8e:
         af:da:f1:ae:09:23:13:a0:3b:6b:0b:d1:fb:36:38:19:2c:64:
         a7:05:8f:9a:e8:62:45:67:ae:ef:76:87:ac:42:06:9d:90:d9:
         5b:59:ac:40:9c:7f:81:d3:80:19:47:15:47:f9:0b:bb:8c:36:
         14:dc:fb:b6:15:61:e3:e3:28:7a:f4:e8:9a:48:00:9e:da:fa:
         82:81:fd:f6:f4:98:5d:5f:ce:fd:db:59:6d:a6:37:ee:51:e5:
         95:ff:ca:98:eb:2a:b1:62:aa:77:ef:bb:6a:7b:9c:1e:65:ec:
         72:5d:83:f9:90:75:2b:a4:de:ed:be:ed:69:a7:53:28:56:a8:
         9d:fc:cb:cc:68:d3:4a:51:d3:b7:7a:49:1d:e6:5f:1a:3a:f4:
         5b:ec:a1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:41:40 2025 by rpki-client