Route Origin Authorization

$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/1/3134302e3233352e3139362e302f32322d3234203d3e20393435.roa
File:                     3134302e3233352e3139362e302f32322d3234203d3e20393435.roa (raw, json)
Hash identifier:          RSutUrMsVtvGKDVoZi4oPQ6lHudDLheX5o3XGe4tlgc=
Subject key identifier:   41:A8:7F:8C:5C:8E:4B:09:70:B2:9A:CA:BF:E4:2C:F1:F1:E5:B3:19
Certificate issuer:       /CN=a6201efd4ca10b066d551d8235dfdd7013c864c38c92dccf89
Certificate serial:       77CA3057DC70814308BD51C0FE0CDC8DF698ACD3
Authority key identifier: F0:32:05:B3:99:34:00:CC:3F:C6:57:EF:E6:8E:06:96:DA:33:24:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4ca10b066d551d8235dfdd7013c864c38c92dccf89.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/1/3134302e3233352e3139362e302f32322d3234203d3e20393435.roa
Signing time:             Tue 04 Nov 2025 22:35:23 +0000
ROA not before:           Tue 04 Nov 2025 22:30:23 +0000
ROA not after:            Tue 03 Nov 2026 22:35:23 +0000
asID:                     945
IP address blocks:        140.235.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/1/F03205B3993400CC3FC657EFE68E0696DA332458.crl
                          rsync://akane.maru.co.jp/repo/1073c6/1/F03205B3993400CC3FC657EFE68E0696DA332458.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4ca10b066d551d8235dfdd7013c864c38c92dccf89.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/46c07e76-66d8-48d7-826a-85de29c66a22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/46c07e76-66d8-48d7-826a-85de29c66a22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ca:30:57:dc:70:81:43:08:bd:51:c0:fe:0c:dc:8d:f6:98:ac:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6201efd4ca10b066d551d8235dfdd7013c864c38c92dccf89
        Validity
            Not Before: Nov  4 22:30:23 2025 GMT
            Not After : Nov  3 22:35:23 2026 GMT
        Subject: CN=41A87F8C5C8E4B0970B29ACABFE42CF1F1E5B319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:68:e8:ff:b9:4d:2e:5c:c4:52:24:fe:d5:
                    d7:43:a8:33:0f:43:fe:b7:91:da:8f:3a:10:6d:c2:
                    3b:d6:89:3c:99:a5:4d:3d:0d:e4:d5:1f:07:53:b5:
                    96:84:27:99:05:5b:82:c9:b9:9a:be:20:42:ab:cb:
                    93:8a:a7:5b:0f:b7:c9:97:4a:55:cd:5d:88:9c:cc:
                    0b:0c:5e:fa:c6:26:26:33:93:82:99:0d:da:b8:db:
                    c7:71:e0:f1:43:c1:9f:b6:7b:2d:9c:26:8d:f0:ce:
                    ac:8f:09:f1:16:2c:28:cd:d0:0e:a9:e1:f2:f5:aa:
                    8c:b0:8e:0e:52:d1:5c:6a:0e:ea:3e:68:e6:81:46:
                    ad:50:ae:33:b7:58:10:b7:4c:d5:3a:c2:0d:5b:bd:
                    f9:45:86:85:7c:c0:9e:37:cc:73:c7:56:28:9b:36:
                    f4:d1:8e:2a:f4:1d:ae:47:a8:34:b5:d7:55:e1:a2:
                    b3:91:5e:ad:4a:3e:ed:23:0f:31:fb:8f:d4:20:da:
                    6f:0e:27:6e:4a:97:99:7b:31:ac:73:fa:fa:50:5f:
                    6a:49:36:64:14:5a:84:d6:78:00:9c:f8:c5:e7:48:
                    84:c4:1f:15:79:b9:56:51:62:06:15:16:31:2d:8b:
                    5a:0d:5d:d8:18:f2:27:a8:58:38:44:7b:c6:9c:72:
                    5f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A8:7F:8C:5C:8E:4B:09:70:B2:9A:CA:BF:E4:2C:F1:F1:E5:B3:19
            X509v3 Authority Key Identifier:
                keyid:F0:32:05:B3:99:34:00:CC:3F:C6:57:EF:E6:8E:06:96:DA:33:24:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/1/F03205B3993400CC3FC657EFE68E0696DA332458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4ca10b066d551d8235dfdd7013c864c38c92dccf89.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/1/3134302e3233352e3139362e302f32322d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:97:9b:98:f6:7e:2a:50:58:60:91:18:13:c3:f2:86:a0:d7:
         d4:37:a6:61:40:54:96:4d:99:a1:7c:87:d8:91:48:c5:14:bb:
         f2:67:83:43:c4:a6:02:19:75:e1:a8:97:4d:d3:fa:93:3d:50:
         72:ac:de:1f:b8:51:fc:27:7c:95:35:b9:d7:ee:5f:6e:73:3a:
         c3:61:f9:9f:8b:c9:0e:94:41:d1:4d:35:dd:95:c3:1f:a7:35:
         07:f3:26:4b:b6:87:83:78:1d:13:6d:d9:51:48:4f:a2:5e:a2:
         c6:a9:42:e9:ff:25:4f:fa:f9:cd:f3:f2:0c:1a:9c:d7:99:b5:
         32:82:49:75:3c:02:80:34:39:bd:cd:85:b0:4d:de:5d:ae:b0:
         4e:e5:fa:b5:4e:e6:e3:22:80:8a:1e:a1:bc:55:84:1b:ea:d3:
         a4:b2:f0:23:2e:87:33:83:18:63:f4:9c:72:56:e8:c8:4f:64:
         d2:86:b3:58:5d:d1:40:2e:e6:00:b1:4f:9e:ef:87:19:72:7a:
         40:5d:27:96:10:ab:3c:9f:96:0b:86:e0:77:54:3d:53:a1:f6:
         33:23:e3:a1:07:a1:dd:22:64:a5:28:0e:f2:32:7e:71:5b:f7:
         9d:6e:d6:22:0b:e9:d2:f3:2b:49:d2:06:e7:30:6f:41:1c:dd:
         3c:d8:a3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:12:33 2025 by rpki-client