Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa
File:                     323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa (raw, json)
Hash identifier:          mNo77TefloFRj1Zul5gWWay4qCNBrRooQLN7FJuGYpQ=
Subject key identifier:   E4:46:F8:72:D0:06:48:F5:BE:CB:45:19:6D:5F:BC:7A:3C:AA:86:01
Certificate issuer:       /CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
Certificate serial:       18CD8BB3E275DF032185F86FE28EDA2255B91DE5
Authority key identifier: 62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6
Authority info access:    rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa
Signing time:             Thu 20 Jun 2024 05:23:02 +0000
ROA not before:           Thu 20 Jun 2024 05:18:02 +0000
ROA not after:            Thu 19 Jun 2025 05:23:02 +0000
asID:                     212360
IP address blocks:        2602:fc23:112::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.mft
                          rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jul 2024 07:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cd:8b:b3:e2:75:df:03:21:85:f8:6f:e2:8e:da:22:55:b9:1d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62BCDE23F31AC8A078E34CDA06D2A8606A155AF6
        Validity
            Not Before: Jun 20 05:18:02 2024 GMT
            Not After : Jun 19 05:23:02 2025 GMT
        Subject: CN=E446F872D00648F5BECB45196D5FBC7A3CAA8601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:36:28:63:10:ad:d5:a5:74:6f:93:91:46:13:
                    f4:6f:a9:5e:b8:c6:70:f2:9b:e4:d1:16:18:eb:9e:
                    3a:3c:04:8e:54:38:18:e5:50:7f:e0:a5:2e:3a:3b:
                    6f:b8:8d:a3:1a:59:b9:c4:5d:28:ee:2c:20:81:4f:
                    66:fb:97:95:f4:38:38:5b:ba:ab:c0:d3:e6:4d:6d:
                    4a:66:c4:f8:03:4a:ee:9f:94:c7:1c:4d:58:0f:f6:
                    91:04:87:c8:2b:25:1c:bf:41:b7:95:20:1a:01:5a:
                    65:32:df:73:e0:08:68:d9:e5:ba:89:3c:fb:88:a0:
                    4f:2c:7b:6b:da:1c:1f:58:ce:b6:c2:e1:ad:cf:60:
                    bf:bc:3f:6f:64:ba:89:cf:aa:da:70:b3:da:ed:11:
                    6d:35:f7:83:4a:01:18:c7:2f:a0:5a:3d:5a:2f:9e:
                    a5:80:79:51:14:df:3c:53:aa:54:78:89:49:7e:0a:
                    7b:2e:5f:1f:5f:8b:a7:10:70:e4:4a:c0:31:dc:cb:
                    89:b8:6b:ad:23:3b:82:48:04:6a:0a:f1:51:fd:b2:
                    0d:cd:97:13:cb:d8:94:43:81:57:42:f0:28:11:38:
                    90:18:85:4c:77:ed:89:41:0a:5b:d9:69:37:eb:39:
                    d1:fc:a4:b8:65:3f:73:75:2b:22:59:24:5a:6f:2d:
                    b9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:46:F8:72:D0:06:48:F5:BE:CB:45:19:6D:5F:BC:7A:3C:AA:86:01
            X509v3 Authority Key Identifier:
                keyid:62:BC:DE:23:F3:1A:C8:A0:78:E3:4C:DA:06:D2:A8:60:6A:15:5A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/62BCDE23F31AC8A078E34CDA06D2A8606A155AF6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/2/323630323a666332333a3131323a3a2f34382d3438203d3e20323132333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:112::/48

    Signature Algorithm: sha256WithRSAEncryption
         48:0c:55:7b:ed:5b:01:6b:3a:1f:8b:54:bc:39:52:89:43:35:
         cf:80:4c:9e:dc:c2:ab:f7:63:77:b1:77:10:3f:ff:44:12:6e:
         d4:b6:2e:f3:a0:9c:86:88:b0:01:01:33:2d:cc:b1:c4:4d:31:
         83:8a:74:26:26:18:df:d0:14:9d:08:66:bd:d9:53:e0:1c:4a:
         d2:45:0f:c2:8d:b3:33:1b:ad:6b:3b:e2:da:59:8d:49:e3:94:
         0f:6b:44:e5:2c:7a:ce:e4:ea:4b:57:8a:78:fd:9f:5b:f1:6a:
         89:f2:83:ed:76:dc:53:2e:03:40:02:88:58:22:57:32:76:36:
         7a:a9:a1:9d:1d:29:04:6d:fb:36:4a:c2:e3:a5:2b:4c:f8:95:
         f5:bd:77:7b:0d:cf:0e:7a:5b:35:01:b2:bf:bd:01:4c:cb:16:
         7b:fa:34:0b:d6:a6:81:75:c0:bf:22:22:8a:d6:dc:7d:b1:31:
         1a:b9:c2:90:15:75:d5:df:fd:35:c1:50:64:11:d1:f5:5b:cc:
         77:31:5c:ad:e4:c0:64:df:74:b4:fa:af:26:57:53:fb:87:a8:
         4f:81:2c:fb:cb:ee:a0:1e:e3:22:58:af:e9:e0:24:8e:25:cc:
         ec:d7:da:c6:a3:9f:53:28:bc:7d:3e:b7:38:df:48:ab:6f:46:
         34:d6:a2:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 11:15:59 2024 by rpki-client on console-fra.rpki-client.org