Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a663930303a3a2f34302d3438203d3e20323030383237.roa
File:                     326131323a646434373a663930303a3a2f34302d3438203d3e20323030383237.roa (raw, json)
Hash identifier:          0s9wmIubx8/5PlxNgWgnvMhQPV2GWVXmrF3jfPncIAM=
Subject key identifier:   2C:DF:02:09:99:A0:A8:D2:9C:21:60:F0:8D:A1:32:D7:6E:7B:8B:39
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       2E6ED237BFF862A929D23E8BC8DAFA01371B30D0
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a663930303a3a2f34302d3438203d3e20323030383237.roa
Signing time:             Thu 20 Jun 2024 05:23:37 +0000
ROA not before:           Thu 20 Jun 2024 05:18:37 +0000
ROA not after:            Thu 19 Jun 2025 05:23:37 +0000
asID:                     200827
IP address blocks:        2a12:dd47:f900::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 28 Sep 2024 16:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:6e:d2:37:bf:f8:62:a9:29:d2:3e:8b:c8:da:fa:01:37:1b:30:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:37 2024 GMT
            Not After : Jun 19 05:23:37 2025 GMT
        Subject: CN=2CDF020999A0A8D29C2160F08DA132D76E7B8B39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f8:22:d6:0b:48:aa:81:2a:61:9b:63:b2:9d:
                    a6:18:a4:e6:00:f5:36:b8:82:fb:f7:55:60:03:39:
                    7e:aa:17:58:18:56:ec:60:24:c9:4f:45:c5:8d:6b:
                    62:78:de:d2:58:03:10:50:84:9b:62:42:6b:d5:ce:
                    da:7a:8a:ba:98:ac:d1:b3:61:e8:79:00:2a:f0:a4:
                    89:2c:5c:32:66:43:74:c4:0a:34:82:93:25:71:cc:
                    2c:d2:76:90:73:32:85:e4:62:4b:6d:4b:89:58:00:
                    2a:75:ce:cb:37:73:81:11:14:d2:4c:19:91:28:e2:
                    cf:78:da:a0:9b:e2:f2:69:91:c8:5c:e5:10:e5:5c:
                    1a:18:7e:86:53:40:81:2d:74:12:b1:d4:72:09:b9:
                    d9:87:4b:49:70:7e:45:46:62:30:bd:ee:1b:23:40:
                    4d:9b:72:13:87:5b:1e:a0:44:fc:05:70:90:78:27:
                    a9:07:09:a3:2e:b5:20:8a:50:17:73:61:ed:7f:61:
                    dd:78:e4:f4:70:8e:a2:3b:48:f8:ea:36:da:6f:ff:
                    73:42:32:ea:8b:38:0a:9d:cf:36:0e:42:62:4a:60:
                    cc:9c:db:86:36:40:d3:78:11:d5:37:99:c0:7f:f6:
                    06:0b:9d:c5:37:29:15:87:c2:86:44:70:50:b6:f2:
                    ff:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DF:02:09:99:A0:A8:D2:9C:21:60:F0:8D:A1:32:D7:6E:7B:8B:39
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a663930303a3a2f34302d3438203d3e20323030383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f900::/40

    Signature Algorithm: sha256WithRSAEncryption
         52:0d:ae:dc:25:e6:9c:9f:e1:19:0c:43:06:ce:aa:4f:07:b9:
         97:5e:e0:c9:6f:5a:44:c3:cb:e4:3f:53:43:19:4c:29:25:0b:
         2b:95:e8:da:77:db:50:60:67:42:d6:90:23:b3:ee:fc:a3:f9:
         0e:e7:2f:e9:0c:94:96:cb:60:54:7a:61:bc:94:36:11:83:cb:
         ce:3e:50:c8:e0:2d:d2:0b:d9:43:49:2f:16:11:ac:9e:56:b6:
         6f:c2:28:11:11:16:8e:c8:5f:a9:94:ba:1a:51:62:c4:14:b9:
         ba:a2:95:a9:2f:8e:34:bd:52:bc:ae:c6:f4:a9:30:a0:54:87:
         21:dc:d6:66:ae:15:d0:ec:0c:5c:f0:df:f7:09:47:41:b8:29:
         5e:a5:e0:d6:ae:dd:da:36:55:dc:55:42:ae:b1:04:63:45:ca:
         f7:a1:f4:d0:04:ab:f1:97:ef:90:fd:89:8b:07:00:3f:95:01:
         13:e9:bf:30:f9:2f:2f:23:3d:ed:54:ba:0f:0c:f2:40:16:2c:
         63:9d:9e:43:1c:3b:be:cd:ea:38:83:8c:24:c9:37:d1:03:14:
         eb:19:b8:e3:77:56:56:98:26:38:79:8a:e9:d7:fd:06:a6:60:
         29:16:53:7f:1a:c5:eb:36:20:c3:61:d1:b5:73:6a:49:8c:95:
         f4:2a:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 03:39:39 2024 by rpki-client on console-ams.rpki-client.org