Route Origin Authorization

$ rpki-client -vvvf akane.maru.co.jp/repo/1073c6/5/3134302e3233352e3132312e302f32342d3234203d3e20313532313834.roa
File:                     3134302e3233352e3132312e302f32342d3234203d3e20313532313834.roa (raw, json)
Hash identifier:          5DlhICyRlVXDbwJtEsyCKkvUcfi3OsqwXs8F/fhtxtU=
Subject key identifier:   86:B3:AF:4B:4A:78:B1:ED:3F:2A:A0:97:8C:E6:4C:D3:7F:5A:22:B1
Certificate issuer:       /CN=6506a66ed0abc200a9b34efb1fe8082698d3c92c783839a8cc
Certificate serial:       0A721893F0E48D34F33709CA3DC35598F3CC2C30
Authority key identifier: 4F:03:B5:F1:68:F3:88:E0:EB:BB:D8:30:C9:1C:97:0F:FE:AB:87:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0abc200a9b34efb1fe8082698d3c92c783839a8cc.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/5/3134302e3233352e3132312e302f32342d3234203d3e20313532313834.roa
Signing time:             Tue 06 Oct 2026 22:50:03 +0000
ROA not before:           Tue 06 Oct 2026 22:45:03 +0000
ROA not after:            Tue 05 Oct 2027 22:50:03 +0000
asID:                     152184
IP address blocks:        140.235.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/5/4F03B5F168F388E0EBBBD830C91C970FFEAB87F2.crl
                          rsync://akane.maru.co.jp/repo/1073c6/5/4F03B5F168F388E0EBBBD830C91C970FFEAB87F2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0abc200a9b34efb1fe8082698d3c92c783839a8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:72:18:93:f0:e4:8d:34:f3:37:09:ca:3d:c3:55:98:f3:cc:2c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0abc200a9b34efb1fe8082698d3c92c783839a8cc
        Validity
            Not Before: Oct  6 22:45:03 2026 GMT
            Not After : Oct  5 22:50:03 2027 GMT
        Subject: CN=86B3AF4B4A78B1ED3F2AA0978CE64CD37F5A22B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d2:10:8c:81:b1:b3:74:13:94:2a:03:1d:62:
                    9c:31:f8:98:49:02:ab:4e:99:77:ee:5e:df:4c:1f:
                    ab:e1:39:10:9f:57:53:6e:d6:17:6f:ed:53:8c:90:
                    dc:9d:93:61:65:00:73:37:3a:c2:0d:2c:10:63:a1:
                    f6:02:23:98:0c:99:00:07:99:a1:2d:26:7d:78:f5:
                    ed:3d:66:42:7f:23:99:f5:c6:03:ff:69:d8:15:cc:
                    70:d3:c8:b5:f5:d3:20:2a:9e:7e:fa:7b:58:cb:a9:
                    f4:38:d9:98:07:f1:5b:8b:74:41:29:7a:dc:81:ef:
                    65:af:d8:87:4e:b4:13:26:32:fb:11:f3:1f:5d:cd:
                    f8:0f:b2:67:d0:d9:b6:80:6b:c0:7f:dd:95:81:0d:
                    0f:1e:87:4c:1d:ab:1f:44:7f:be:31:14:f9:40:e1:
                    9b:11:f7:4d:7d:42:f3:b4:ec:53:8c:96:a5:dc:fa:
                    58:8c:c5:0f:e0:74:b6:b0:f1:2c:43:07:8d:6d:de:
                    d5:54:11:6b:e1:65:69:18:6a:14:a2:7a:1d:ff:62:
                    fc:49:e4:5a:04:84:9d:0d:af:b0:3b:3d:f2:91:9a:
                    1f:e5:93:0a:a3:a3:a7:32:ac:3e:a9:70:d2:4f:c1:
                    68:da:a9:ad:0d:25:f6:03:f1:21:c6:2d:09:5c:9e:
                    5a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:B3:AF:4B:4A:78:B1:ED:3F:2A:A0:97:8C:E6:4C:D3:7F:5A:22:B1
            X509v3 Authority Key Identifier:
                keyid:4F:03:B5:F1:68:F3:88:E0:EB:BB:D8:30:C9:1C:97:0F:FE:AB:87:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/5/4F03B5F168F388E0EBBBD830C91C970FFEAB87F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0abc200a9b34efb1fe8082698d3c92c783839a8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/5/3134302e3233352e3132312e302f32342d3234203d3e20313532313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:ea:58:c7:fc:5b:10:b4:3d:92:75:36:0a:f3:63:5e:0b:10:
         89:84:39:b8:9e:47:b5:9a:57:3f:8f:3c:fb:fd:d1:ec:e0:aa:
         19:a2:c8:53:74:7f:4c:8c:b8:23:55:bd:3e:03:06:1d:bb:db:
         06:ec:0c:dd:ef:d1:f8:5e:b9:52:61:de:ae:7f:61:ab:a1:c8:
         9e:7a:30:77:7c:7a:10:ee:7d:5f:e2:58:9b:df:b4:5d:2a:6d:
         5b:89:43:4e:88:0c:78:c9:69:95:9b:57:42:ee:82:9a:4e:0a:
         97:75:e9:48:2d:bb:1d:23:a4:19:99:7f:5c:2a:e6:74:a0:0b:
         ca:7d:22:e6:f1:9d:44:bd:25:b7:c1:98:b8:c3:13:75:91:b2:
         84:65:ba:fb:af:b9:30:04:22:2d:0d:5b:e6:bf:aa:24:59:69:
         35:c7:60:49:bf:69:e9:90:7a:c9:63:33:45:15:f4:a6:1b:0c:
         1c:3b:f9:3d:55:e8:bf:f1:78:7e:66:e9:46:a1:a3:93:94:d7:
         d3:ab:52:dc:b6:6a:d1:3c:55:ae:f6:d1:1e:ee:d0:53:e6:bf:
         96:a3:04:c2:e0:fe:50:90:3f:aa:fa:e4:00:d8:f8:17:e6:a4:
         1c:bf:4f:f9:a4:85:49:96:c9:87:dd:b8:04:81:be:3a:4f:38:
         e6:3c:e4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:56:01 2026 by rpki-client