Route Origin Authorization

$ rpki-client -vvf akane.maru.co.jp/repo/1073c6/5/3231362e3134362e33302e302f32342d3234203d3e203338363436.roa
File:                     3231362e3134362e33302e302f32342d3234203d3e203338363436.roa (raw, json)
Hash identifier:          sxOGDUYsLnTnxFqbjT5cQcUPUXuAFE8XYAEEr/Svgow=
Subject key identifier:   F5:0C:46:73:D0:23:74:7D:E5:8D:2A:0A:CF:15:78:62:06:82:A5:87
Certificate issuer:       /CN=6506a66ed0abc200a9b34efb1fe8082698d3c92c783839a8cc
Certificate serial:       48BACB74FB753EB29E5EBA9FC8C1BCE095B67053
Authority key identifier: 4F:03:B5:F1:68:F3:88:E0:EB:BB:D8:30:C9:1C:97:0F:FE:AB:87:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0abc200a9b34efb1fe8082698d3c92c783839a8cc.cer
Subject info access:      rsync://akane.maru.co.jp/repo/1073c6/5/3231362e3134362e33302e302f32342d3234203d3e203338363436.roa
Signing time:             Mon 16 Mar 2026 23:35:49 +0000
ROA not before:           Mon 16 Mar 2026 23:30:49 +0000
ROA not after:            Mon 15 Mar 2027 23:35:49 +0000
asID:                     38646
IP address blocks:        216.146.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://akane.maru.co.jp/repo/1073c6/5/4F03B5F168F388E0EBBBD830C91C970FFEAB87F2.crl
                          rsync://akane.maru.co.jp/repo/1073c6/5/4F03B5F168F388E0EBBBD830C91C970FFEAB87F2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0abc200a9b34efb1fe8082698d3c92c783839a8cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ba:cb:74:fb:75:3e:b2:9e:5e:ba:9f:c8:c1:bc:e0:95:b6:70:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0abc200a9b34efb1fe8082698d3c92c783839a8cc
        Validity
            Not Before: Mar 16 23:30:49 2026 GMT
            Not After : Mar 15 23:35:49 2027 GMT
        Subject: CN=F50C4673D023747DE58D2A0ACF1578620682A587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9f:93:f3:9a:59:1a:f4:5a:78:ae:41:04:68:
                    03:6a:a7:99:ff:d6:55:ff:c1:13:69:1a:97:a0:23:
                    fd:d5:df:ea:45:0a:75:65:80:77:4e:01:dd:d3:8f:
                    12:88:15:e1:78:61:c0:22:76:22:6b:14:18:b5:9c:
                    a9:e9:78:7b:f6:cb:5b:6d:cc:50:99:35:9a:8b:45:
                    34:10:a3:ae:d7:c4:b0:f7:ef:03:91:74:26:c2:28:
                    7f:94:49:4c:4b:1e:d6:80:72:7c:51:4b:fe:82:b1:
                    31:19:c2:d8:be:dc:11:ed:5b:fd:89:68:c3:63:10:
                    8d:df:17:f6:3d:98:ea:e7:95:0f:d2:1f:bd:ca:9b:
                    3b:21:1d:53:75:4e:af:a8:fd:54:f5:fd:e2:bd:3b:
                    4d:3f:1f:27:21:12:ff:d3:09:56:8b:f9:1b:70:e5:
                    bd:8d:5a:1d:73:83:d4:ec:62:57:c5:3d:6a:52:9e:
                    7b:f3:6f:5b:55:41:31:d7:c2:7b:d5:d9:b8:40:a1:
                    bd:cd:7f:13:77:ad:ba:68:1f:8b:2d:3a:7b:b8:e0:
                    47:28:a1:4d:aa:da:8b:1e:8f:8e:06:65:c0:ad:c7:
                    3d:12:15:f8:4c:c2:34:b9:4a:73:e6:83:cb:50:0b:
                    8a:34:80:6c:c4:fa:af:01:e8:43:41:77:cb:4b:8b:
                    8a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:0C:46:73:D0:23:74:7D:E5:8D:2A:0A:CF:15:78:62:06:82:A5:87
            X509v3 Authority Key Identifier:
                keyid:4F:03:B5:F1:68:F3:88:E0:EB:BB:D8:30:C9:1C:97:0F:FE:AB:87:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://akane.maru.co.jp/repo/1073c6/5/4F03B5F168F388E0EBBBD830C91C970FFEAB87F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0abc200a9b34efb1fe8082698d3c92c783839a8cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://akane.maru.co.jp/repo/1073c6/5/3231362e3134362e33302e302f32342d3234203d3e203338363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:d6:46:b8:ac:16:59:b5:08:2d:1b:72:ab:fc:19:f7:dc:15:
         0b:50:f1:c1:28:c5:78:01:ba:96:3e:61:d8:2d:35:33:74:86:
         cb:3d:9a:ea:59:8a:b7:1b:3c:d6:ec:40:fa:01:fd:c2:39:ba:
         f6:6c:82:24:45:45:d5:81:67:84:19:d2:9f:94:54:82:d0:64:
         e0:df:f5:68:4f:28:e4:3f:d0:bb:63:43:b0:2d:20:d2:ef:5c:
         4d:05:2d:f4:aa:98:ae:42:bc:83:a1:bd:be:55:07:08:c7:44:
         77:7f:46:5e:4b:56:d4:7d:e3:45:d1:bc:a5:ee:bc:40:2b:35:
         8c:1c:06:c8:32:42:a7:42:67:94:a6:1c:33:c5:f8:0e:10:ee:
         89:b3:d1:2c:fa:10:99:d3:9f:78:0c:f9:da:a9:a3:85:b2:f4:
         36:e9:c1:38:6a:3d:22:56:38:34:c4:13:8f:6d:39:5c:9a:5e:
         69:c4:48:9e:77:54:c5:11:a8:42:fe:a5:11:0c:c0:7a:18:cd:
         ff:20:43:8d:fd:ae:45:81:c9:01:85:72:73:33:e6:76:d4:dc:
         1b:1b:02:54:21:4c:a1:ad:46:d4:02:78:6e:6f:e7:2a:ae:80:
         97:b9:c0:5b:26:ca:84:79:e9:19:1f:bb:69:57:e8:28:e0:26:
         01:c3:9f:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Mar 18 15:21:57 2026 by rpki-client