Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a333230303a3a2f34302d3430203d3e20323030383237.roa
File:                     326131323a646434373a333230303a3a2f34302d3430203d3e20323030383237.roa (raw, json)
Hash identifier:          BENZdCDXH1wpXKhga4s9e/L7CKZACzledRsdr/YDWDA=
Subject key identifier:   F7:86:37:23:B1:C0:FD:11:68:36:62:96:FB:C4:5D:BE:B6:68:F8:21
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       08420C9D723D836E3E9FE1C928E55D476F8E7F69
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a333230303a3a2f34302d3430203d3e20323030383237.roa
Signing time:             Thu 20 Jun 2024 05:23:35 +0000
ROA not before:           Thu 20 Jun 2024 05:18:35 +0000
ROA not after:            Thu 19 Jun 2025 05:23:35 +0000
asID:                     200827
IP address blocks:        2a12:dd47:3200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 16:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:42:0c:9d:72:3d:83:6e:3e:9f:e1:c9:28:e5:5d:47:6f:8e:7f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:35 2024 GMT
            Not After : Jun 19 05:23:35 2025 GMT
        Subject: CN=F7863723B1C0FD1168366296FBC45DBEB668F821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f5:f1:8f:f7:c9:02:f2:73:41:8a:8d:a7:7f:
                    67:ea:ef:c5:30:4f:7d:fb:33:80:12:25:fd:a8:08:
                    0b:a4:51:96:d9:73:c8:e0:49:3a:bf:20:18:53:67:
                    3a:cb:36:93:37:cc:6f:24:a3:69:99:19:4f:59:60:
                    d3:39:8e:ed:ad:ed:48:09:d0:43:40:68:f1:48:8b:
                    ec:88:eb:75:46:d3:41:e8:6c:db:c3:73:57:5c:bd:
                    7b:ff:48:9b:e2:fc:6d:c7:21:9e:c4:5d:d9:74:27:
                    5c:7b:c1:e2:57:9e:85:e6:01:78:f5:57:6f:f6:27:
                    34:e6:d3:e3:f1:76:2f:f1:d5:0a:80:d4:60:34:57:
                    8a:55:78:f3:11:77:20:7b:4e:d9:1f:a5:9a:80:54:
                    7b:83:36:3d:57:eb:f3:ec:53:35:87:b3:5c:55:2d:
                    e8:5e:a4:6d:fd:56:bf:aa:3b:1e:ac:1b:ea:18:37:
                    e8:48:ff:c5:b7:6a:26:ef:58:6b:a5:55:97:98:8b:
                    f8:01:7b:af:1e:44:8f:e1:db:74:eb:b0:29:88:72:
                    98:c5:37:43:38:aa:a9:1a:55:4c:8a:b0:7c:cd:f6:
                    1a:71:56:b8:d6:ab:02:81:59:ae:96:cc:36:de:2e:
                    97:d0:93:11:19:da:90:c3:46:62:d3:d9:86:fe:7d:
                    5f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:86:37:23:B1:C0:FD:11:68:36:62:96:FB:C4:5D:BE:B6:68:F8:21
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a333230303a3a2f34302d3430203d3e20323030383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3200::/40

    Signature Algorithm: sha256WithRSAEncryption
         71:b8:54:90:a8:3b:ae:0c:d3:07:8c:4b:2d:4e:d2:e0:30:25:
         5e:5e:bd:46:ab:5a:2a:d7:bc:5d:fc:73:97:d3:9e:4e:2e:42:
         24:e0:36:97:13:f9:0e:18:1d:77:13:55:94:81:0a:00:0f:d5:
         b1:03:d4:1b:29:f6:de:15:26:1c:1b:eb:76:59:18:56:24:34:
         cb:2a:58:1e:f5:64:c2:f1:7f:04:bf:01:fd:82:73:85:f2:cf:
         e4:cb:72:cc:33:b9:e4:5e:cb:50:8e:ec:62:85:f6:43:c2:6c:
         56:6a:87:3d:91:8c:5a:3f:33:e7:dc:42:6b:99:c4:ed:b5:d3:
         3f:b9:e7:ed:7e:58:7a:2c:6e:95:33:36:60:7d:5d:94:55:68:
         2b:a5:1a:07:e5:e7:b1:15:d4:50:e0:61:13:fc:6e:0e:95:f0:
         dc:39:75:63:fc:b3:ad:e2:c6:b2:90:17:fe:e9:49:dd:ea:f4:
         6b:e8:26:b1:cc:4b:02:2b:b1:ac:0c:e2:13:83:1f:da:f1:75:
         cb:0c:45:f8:1c:6c:3b:66:1c:42:13:79:7c:6f:d8:36:7b:fb:
         5b:72:16:e1:bf:8a:70:13:41:fd:0f:17:98:8c:f1:64:89:a9:
         24:36:b3:75:99:ff:6c:94:05:be:3c:d5:2d:95:f4:55:50:e6:
         86:7f:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 04:04:10 2024 by rpki-client on console-fra.rpki-client.org