Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/3139342e3131362e3232372e302f32342d3234203d3e20313937353337.roa
File:                     3139342e3131362e3232372e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier:          aV/74VAsajC+M6s2av22leLqLoqbt/i1J0EJ6WHQalE=
Subject key identifier:   92:A3:22:72:6E:71:EF:CB:D3:79:D1:D6:39:27:00:05:32:A4:DE:3D
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       6979107EC915608995FBE38ADA6A521A2BAA1977
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/3139342e3131362e3232372e302f32342d3234203d3e20313937353337.roa
Signing time:             Thu 20 Jun 2024 05:23:16 +0000
ROA not before:           Thu 20 Jun 2024 05:18:16 +0000
ROA not after:            Thu 19 Jun 2025 05:23:16 +0000
asID:                     197537
IP address blocks:        194.116.227.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:79:10:7e:c9:15:60:89:95:fb:e3:8a:da:6a:52:1a:2b:aa:19:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:16 2024 GMT
            Not After : Jun 19 05:23:16 2025 GMT
        Subject: CN=92A322726E71EFCBD379D1D63927000532A4DE3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:eb:99:38:48:08:75:a8:cb:44:9a:92:34:a6:
                    16:90:41:84:9d:79:51:72:46:3d:c0:29:f3:eb:60:
                    34:c3:a1:8b:c2:88:cb:94:3f:a9:e6:4b:49:d8:33:
                    49:19:45:78:64:be:31:b3:69:2b:bb:1e:5e:ee:54:
                    f8:d5:86:e3:84:49:7b:a1:c3:9e:d7:f7:d2:7a:da:
                    26:5c:31:fc:04:7a:3f:0b:e5:1a:6a:26:cf:c3:e9:
                    b4:7d:c4:f7:66:d1:18:be:da:35:fb:bc:de:cf:c3:
                    7e:bb:ee:a6:d9:ba:2b:4f:26:2e:70:26:d2:ce:66:
                    9b:a4:e6:c2:4f:4c:00:35:f5:d5:1d:92:d5:db:64:
                    01:18:82:cf:74:eb:97:94:0e:ed:3a:88:24:ca:6a:
                    a6:f9:2e:c9:c4:10:8b:d0:55:0a:21:12:6d:c0:72:
                    2b:2a:8f:1c:83:22:4d:cd:a9:f0:54:b0:17:5d:e2:
                    23:8b:3f:d3:38:f9:dd:39:7d:63:aa:67:ce:6a:1e:
                    54:5a:21:4a:37:ad:bf:23:b8:d9:d4:7c:d2:b6:ea:
                    7c:c7:1e:3b:37:16:f8:8c:b5:2a:6c:da:95:3c:3d:
                    40:7e:d0:c2:59:4c:5a:31:4b:22:77:ff:4f:58:ac:
                    a3:e6:40:df:6d:be:69:d5:08:52:e8:01:5e:a4:f0:
                    9f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A3:22:72:6E:71:EF:CB:D3:79:D1:D6:39:27:00:05:32:A4:DE:3D
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/3139342e3131362e3232372e302f32342d3234203d3e20313937353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.116.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:76:71:aa:93:0d:1a:d4:f6:49:5f:e3:f3:cc:2b:51:af:e4:
         89:f1:89:39:df:4e:ba:95:a0:ab:7e:38:32:2e:7a:cc:fc:d8:
         77:fd:4c:1b:55:1e:89:b7:69:72:a1:87:da:00:71:4e:d7:49:
         67:9e:ea:15:6c:55:87:ae:13:07:62:03:0a:ee:71:af:c3:b2:
         f0:bf:6d:19:7e:ea:06:4c:b0:b3:39:05:bf:4f:0f:1c:02:2f:
         06:54:cf:79:f0:b4:57:6e:ec:a1:17:ea:b2:94:40:73:e1:5d:
         1c:5b:9f:94:6b:5d:a0:e2:a5:c9:9b:af:22:72:44:e5:6d:04:
         f3:2a:6c:a7:0f:ae:d7:95:a3:45:18:a7:0e:e0:78:71:72:78:
         b9:7e:c5:82:5a:05:97:ff:71:c6:b2:25:bb:cd:88:a2:75:e2:
         48:83:9f:d7:82:fc:64:3d:cd:a6:aa:9a:f5:16:2f:03:83:7a:
         1f:ef:8e:10:9b:b1:84:68:35:bc:2f:43:72:d6:8f:aa:f3:d6:
         9e:8e:b7:a6:af:45:ee:10:53:73:6e:a5:3c:b9:f4:dc:b7:5b:
         a0:f7:a9:2d:b2:1e:f3:5a:6f:04:dc:c9:3f:51:0e:00:5c:25:
         a2:79:51:15:28:b4:b3:42:76:c1:84:7f:c8:bd:7a:7f:50:be:
         f4:2d:dd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 00:11:52 2024 by rpki-client on console-fra.rpki-client.org