Route Origin Authorization

$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/5/3231362e3134362e33302e302f32342d3234203d3e20323133363034.roa
File:                     3231362e3134362e33302e302f32342d3234203d3e20323133363034.roa (raw, json)
Hash identifier:          9L/JsAW3KVMH7zY1fTbiJ8GtLTCqQDcxSPbnTDyrNGI=
Subject key identifier:   75:7D:F9:47:B2:D6:FE:E3:E5:56:2A:87:B4:5A:15:45:C6:C2:E6:44
Certificate issuer:       /CN=6506a66ed0abc200a9b34efb1fe8082698d3c92c783839a8cc
Certificate serial:       67253CBE5DB194D6D86496CD36097E6C505862A6
Authority key identifier: 4F:03:B5:F1:68:F3:88:E0:EB:BB:D8:30:C9:1C:97:0F:FE:AB:87:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0abc200a9b34efb1fe8082698d3c92c783839a8cc.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/5/3231362e3134362e33302e302f32342d3234203d3e20323133363034.roa
Signing time:             Tue 04 Nov 2025 22:35:21 +0000
ROA not before:           Tue 04 Nov 2025 22:30:21 +0000
ROA not after:            Tue 03 Nov 2026 22:35:21 +0000
asID:                     213604
IP address blocks:        216.146.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/5/4F03B5F168F388E0EBBBD830C91C970FFEAB87F2.crl
                          rsync://akane.maru.co.jp/repo/1073c6/5/4F03B5F168F388E0EBBBD830C91C970FFEAB87F2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0abc200a9b34efb1fe8082698d3c92c783839a8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:57:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:25:3c:be:5d:b1:94:d6:d8:64:96:cd:36:09:7e:6c:50:58:62:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0abc200a9b34efb1fe8082698d3c92c783839a8cc
        Validity
            Not Before: Nov  4 22:30:21 2025 GMT
            Not After : Nov  3 22:35:21 2026 GMT
        Subject: CN=757DF947B2D6FEE3E5562A87B45A1545C6C2E644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:6b:b9:5d:4c:c0:c4:cd:a0:b7:a9:64:d1:76:
                    47:09:6f:1d:32:82:5a:01:1d:f8:af:1d:ab:0e:79:
                    70:28:2e:0d:0b:fc:65:11:a0:b0:9a:03:48:98:7e:
                    a7:5a:07:68:ee:88:7d:66:c9:99:06:17:08:a8:9d:
                    d3:df:ed:ef:62:57:eb:d8:d1:71:95:c7:5c:18:51:
                    1b:51:ce:97:51:e5:8f:e3:c4:e5:59:b5:15:e2:59:
                    c7:bf:3c:cb:60:95:a2:6f:b5:5d:e3:91:6a:42:d1:
                    44:d2:01:8c:1d:07:8f:60:bd:c2:e3:30:40:cf:35:
                    24:1f:4e:f1:ac:9b:e9:c0:43:8b:7b:42:7c:a4:90:
                    49:c5:65:40:8a:79:f3:ca:7b:a3:8f:e3:54:bd:81:
                    a4:50:bf:89:c6:2c:ac:d8:be:ca:8a:62:5a:2b:4c:
                    c7:1c:74:dd:6a:5b:9e:77:ba:5e:e7:46:09:6a:fe:
                    9b:b5:76:69:a4:1b:b9:c1:28:a0:2a:50:70:ed:de:
                    c8:41:ef:c8:9e:c4:cf:42:e6:5a:ca:2e:51:61:63:
                    20:76:17:7e:21:b4:ea:48:e0:06:62:c8:fe:d9:c1:
                    d1:39:63:65:69:2f:d9:16:e2:29:c8:6b:58:bc:b4:
                    33:7d:21:bc:82:22:3c:50:b8:b3:f2:9a:c3:17:77:
                    ca:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:7D:F9:47:B2:D6:FE:E3:E5:56:2A:87:B4:5A:15:45:C6:C2:E6:44
            X509v3 Authority Key Identifier:
                keyid:4F:03:B5:F1:68:F3:88:E0:EB:BB:D8:30:C9:1C:97:0F:FE:AB:87:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/5/4F03B5F168F388E0EBBBD830C91C970FFEAB87F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0abc200a9b34efb1fe8082698d3c92c783839a8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/5/3231362e3134362e33302e302f32342d3234203d3e20323133363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:a7:ea:e6:da:52:90:bc:24:83:22:23:75:6e:64:19:65:67:
         0a:ba:33:22:50:e6:37:b6:35:ca:6d:07:3f:0e:1b:3b:f4:d2:
         fe:3a:02:87:d1:c8:de:bf:3c:6f:14:b6:62:b4:cd:02:20:7b:
         35:32:ab:42:cb:9e:84:9e:0b:08:8a:6c:74:c9:f0:6a:e1:44:
         b5:67:5a:ef:85:51:83:70:4b:10:aa:cb:0a:0c:fb:4d:32:8c:
         37:7b:4a:f8:d5:09:62:ea:41:e5:55:8e:4f:fa:d1:a4:f1:6f:
         fc:12:c1:cc:d0:3b:fb:1c:2d:29:7f:7a:d4:74:c0:c1:8d:22:
         f0:9d:eb:e8:b1:5b:ab:d2:54:3d:eb:78:26:e1:3e:ba:02:08:
         49:ef:a8:4e:b0:ae:62:a4:56:e3:30:9e:f7:ac:67:03:f1:5d:
         c7:3e:ee:d7:e1:75:82:ff:39:65:d4:f6:90:93:0d:1c:18:75:
         44:61:ad:97:2d:6d:d1:50:2e:50:f1:df:15:66:92:6c:5f:14:
         10:87:ce:43:57:ed:eb:56:9a:a8:6f:13:e7:fe:37:05:6d:c4:
         63:9f:23:52:80:af:7f:8a:cd:d7:12:44:e7:f3:53:eb:66:8b:
         42:7c:f6:52:b7:ed:e9:6a:04:fa:56:02:1a:c3:49:97:b5:45:
         bb:da:d9:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:09:02 2025 by rpki-client