Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a333430303a3a2f33382d3338203d3e20323030383237.roa
File:                     326131323a646434373a333430303a3a2f33382d3338203d3e20323030383237.roa (raw, json)
Hash identifier:          u+CfbYp931rkz/xzgCgPhuh5WZqzz5xIOu+TSfb5bng=
Subject key identifier:   3F:0B:01:75:7B:0E:F8:CB:4B:CA:C8:93:AA:01:8E:0B:FF:86:B0:96
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       6D13728F3E6E2BE3839ECDF3D7844FB16272109D
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a333430303a3a2f33382d3338203d3e20323030383237.roa
Signing time:             Thu 20 Jun 2024 05:23:33 +0000
ROA not before:           Thu 20 Jun 2024 05:18:33 +0000
ROA not after:            Thu 19 Jun 2025 05:23:33 +0000
asID:                     200827
IP address blocks:        2a12:dd47:3400::/38 maxlen: 38

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Jun 2024 06:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:13:72:8f:3e:6e:2b:e3:83:9e:cd:f3:d7:84:4f:b1:62:72:10:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:33 2024 GMT
            Not After : Jun 19 05:23:33 2025 GMT
        Subject: CN=3F0B01757B0EF8CB4BCAC893AA018E0BFF86B096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:a0:29:74:2c:df:ed:9a:d7:d3:8f:ce:e1:
                    14:bb:d3:b1:02:c9:7f:98:9a:d3:b9:63:df:35:65:
                    25:60:7c:14:0a:47:6f:57:4a:8e:22:c7:5b:eb:52:
                    9a:e5:74:d8:c0:da:2b:f2:b9:cb:ac:df:3b:27:41:
                    2d:3d:bc:3b:b1:1c:db:8e:5e:39:4b:d1:ea:82:f9:
                    cd:71:e0:0b:d2:19:3b:b9:55:44:50:26:57:e5:23:
                    47:d0:53:fa:10:28:fc:ea:88:0c:67:f1:96:e2:3d:
                    9e:a4:bb:91:b0:d8:75:95:59:72:18:3b:fd:e1:84:
                    1a:fc:78:9f:49:df:28:79:32:84:99:ab:48:58:71:
                    04:71:3a:d4:1c:47:0d:39:13:28:87:5a:30:7d:67:
                    c5:0e:d1:f0:4d:f0:2a:44:66:9b:bd:7f:1d:5d:9b:
                    49:b7:48:59:d7:68:19:05:82:61:3b:85:fe:7e:e8:
                    44:98:88:64:7f:49:d1:3c:8a:c5:12:0f:f7:50:58:
                    5b:80:02:50:6f:9b:ab:af:7e:73:c9:29:8f:6e:04:
                    c0:1e:41:b8:cf:a7:44:23:4b:95:31:45:76:ee:40:
                    8c:0c:39:cb:11:ba:21:95:01:f6:b8:ef:24:e6:06:
                    3b:36:ad:d9:b4:b1:9e:9c:3f:cd:2c:b1:66:41:37:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0B:01:75:7B:0E:F8:CB:4B:CA:C8:93:AA:01:8E:0B:FF:86:B0:96
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a333430303a3a2f33382d3338203d3e20323030383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3400::/38

    Signature Algorithm: sha256WithRSAEncryption
         22:e6:00:79:0c:2f:a4:1a:6e:b6:ba:9a:f1:26:d0:8b:4f:5c:
         13:97:64:d5:fb:60:69:ee:99:f1:3d:db:0c:f4:8a:bd:1a:e5:
         46:56:fb:80:9a:49:0b:38:2d:e6:4f:48:8f:d6:bb:11:6c:15:
         b7:8a:1b:f4:5a:f7:b4:fc:70:72:ea:ef:eb:bd:f3:88:da:48:
         79:69:95:00:ff:ef:9f:b6:89:60:e1:19:40:cb:7d:42:ef:6f:
         97:cd:1d:d8:da:1a:f7:84:dd:81:25:1a:d1:17:d7:94:7c:01:
         8a:02:a8:33:a3:ae:12:b9:70:89:e8:6f:fc:c8:d7:1d:ee:f5:
         30:d9:83:71:18:68:25:c7:d6:77:fc:7d:1e:94:93:d9:b5:6c:
         a7:69:9a:1e:69:f1:09:c3:e9:65:85:26:6c:7e:59:77:0a:9c:
         9b:a8:d3:cb:6f:6b:31:4c:fe:29:bb:35:a6:78:8f:a8:73:44:
         a6:20:30:bb:2d:bb:83:f7:86:d1:ce:b6:62:2b:f1:1f:43:a9:
         be:e9:39:46:8f:c4:9f:29:1a:46:08:fc:1e:96:be:c9:de:e9:
         71:ca:a8:f7:16:19:b4:0a:b1:b8:8b:c5:f3:73:72:a9:ee:06:
         7c:ac:cf:5a:b2:fe:87:45:06:99:a8:05:db:33:88:2c:90:a8:
         87:8a:02:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 21:51:06 2024 by rpki-client on console-ams.rpki-client.org