Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a336230303a3a2f34302d3438203d3e20313939313737.roa
File:                     326131323a646434373a336230303a3a2f34302d3438203d3e20313939313737.roa (raw, json)
Hash identifier:          9QINw3CPaC+4Ue9tl1Vb7fDcGgaJJhW89/YGmYPx5AU=
Subject key identifier:   3F:DC:1D:91:A1:20:33:BD:BB:A2:DF:FA:7B:05:39:63:48:F5:49:DA
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       137B2D19F5341D52E87BB590376FFBD110226A16
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a336230303a3a2f34302d3438203d3e20313939313737.roa
Signing time:             Thu 20 Jun 2024 05:23:17 +0000
ROA not before:           Thu 20 Jun 2024 05:18:17 +0000
ROA not after:            Thu 19 Jun 2025 05:23:17 +0000
asID:                     199177
IP address blocks:        2a12:dd47:3b00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:7b:2d:19:f5:34:1d:52:e8:7b:b5:90:37:6f:fb:d1:10:22:6a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:17 2024 GMT
            Not After : Jun 19 05:23:17 2025 GMT
        Subject: CN=3FDC1D91A12033BDBBA2DFFA7B05396348F549DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dd:9f:7f:8e:45:f8:e3:50:4a:88:3b:6c:1d:
                    12:78:b7:dd:82:bf:eb:75:c9:5b:e7:d1:de:b0:77:
                    4e:9e:42:6e:37:c4:51:c7:fb:dc:72:be:a7:c3:5c:
                    83:4f:02:6c:05:40:40:93:2d:92:8b:18:bc:8d:7e:
                    9d:5c:22:8b:e0:15:ee:7f:2d:c2:3b:c3:74:f6:e6:
                    d1:7d:26:1a:3f:c3:59:35:92:3d:4f:05:51:96:7f:
                    ec:6d:f1:2a:fa:4d:b9:0c:49:e3:19:c8:c9:7d:6b:
                    6b:e9:60:92:42:78:53:23:53:06:63:28:86:c0:b7:
                    2e:96:6f:96:d6:3a:b0:cd:c4:dc:08:7e:6c:f7:d3:
                    6b:fd:0b:f4:6c:ba:00:fb:81:d9:0f:1e:70:f7:27:
                    0b:4f:ad:85:0e:f2:08:c7:0b:20:50:11:79:6e:a1:
                    bc:9c:3b:37:1d:38:8e:01:84:9f:c9:52:b0:83:59:
                    10:00:d0:a3:2b:3a:3d:de:a8:f2:c4:47:d9:93:bb:
                    ce:3c:87:c0:be:1e:7c:50:40:56:7a:53:9f:53:e0:
                    6b:ce:06:16:25:a3:c9:5e:e9:32:95:55:ae:02:c3:
                    02:88:8c:b2:2d:a6:91:02:5c:b2:ac:a1:c5:fa:77:
                    dc:8a:07:42:03:ed:b7:a6:61:e2:83:82:6a:be:18:
                    94:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DC:1D:91:A1:20:33:BD:BB:A2:DF:FA:7B:05:39:63:48:F5:49:DA
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a336230303a3a2f34302d3438203d3e20313939313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:3b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         57:f2:55:43:a8:5a:74:48:5f:b0:56:4b:1a:e3:f3:38:56:77:
         e1:7c:8a:99:68:6a:9c:aa:49:f4:0f:da:9c:af:28:ef:52:d9:
         b3:a4:16:a1:dc:f4:8f:06:e1:ac:dc:f4:f6:8d:b1:5b:22:65:
         e0:1e:ba:b0:59:86:46:ae:ac:56:62:6a:2c:96:a0:17:72:26:
         6b:56:52:cd:ce:8b:8c:95:61:8f:7a:56:ff:8a:17:63:b0:90:
         05:52:fb:71:08:bb:75:5a:6f:ca:a8:64:69:1a:1a:ad:02:10:
         43:d0:97:b0:f4:b5:b1:88:55:55:58:fa:44:08:95:e4:73:56:
         ec:7d:b8:73:59:04:ba:e3:98:e1:91:91:94:41:5c:7c:d3:6b:
         67:a1:39:76:75:5a:70:5d:4f:85:1a:56:65:e6:f4:31:fb:d8:
         38:71:39:5f:ab:d1:28:3f:89:74:63:0a:0b:18:41:28:be:1c:
         9d:12:da:c4:5a:d6:ad:a1:e2:3c:78:c0:b9:cb:b9:26:52:77:
         a5:6a:9b:1d:db:7b:42:84:6f:ef:fa:5c:31:72:95:e2:c7:e9:
         5d:bb:1e:22:d2:4e:5b:bd:b2:cf:c6:e8:58:89:d0:33:5b:de:
         49:0e:18:95:91:11:af:2c:52:98:da:72:59:e4:f0:0e:18:6c:
         cd:d4:ff:86
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUE3stGfU0HVLoe7WQN2/70RAiahYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAwNTE4MTdaFw0yNTA2MTkwNTIzMTdaMDMxMTAvBgNV
BAMTKDNGREMxRDkxQTEyMDMzQkRCQkEyREZGQTdCMDUzOTYzNDhGNTQ5REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC43Z9/jkX441BKiDtsHRJ4t92C
v+t1yVvn0d6wd06eQm43xFHH+9xyvqfDXINPAmwFQECTLZKLGLyNfp1cIovgFe5/
LcI7w3T25tF9Jho/w1k1kj1PBVGWf+xt8Sr6TbkMSeMZyMl9a2vpYJJCeFMjUwZj
KIbAty6Wb5bWOrDNxNwIfmz302v9C/RsugD7gdkPHnD3JwtPrYUO8gjHCyBQEXlu
obycOzcdOI4BhJ/JUrCDWRAA0KMrOj3eqPLER9mTu848h8C+HnxQQFZ6U59T4GvO
BhYlo8le6TKVVa4CwwKIjLItppECXLKsocX6d9yKB0ID7bemYeKDgmq+GJTBAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUP9wdkaEgM727ot/6ewU5Y0j1SdowHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzNzNhMzM2MjMwMzAzYTNhMmYzNDMwMmQzNDM4
MjAzZDNlMjAzMTM5MzkzMTM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1HOzANBgkqhkiG9w0B
AQsFAAOCAQEAV/JVQ6hadEhfsFZLGuPzOFZ34XyKmWhqnKpJ9A/anK8o71LZs6QW
odz0jwbhrNz09o2xWyJl4B66sFmGRq6sVmJqLJagF3Ima1ZSzc6LjJVhj3pW/4oX
Y7CQBVL7cQi7dVpvyqhkaRoarQIQQ9CXsPS1sYhVVVj6RAiV5HNW7H24c1kEuuOY
4ZGRlEFcfNNrZ6E5dnVacF1PhRpWZeb0MfvYOHE5X6vRKD+JdGMKCxhBKL4cnRLa
xFrWraHiPHjAucu5JlJ3pWqbHdt7QoRv7/pcMXKV4sfpXbseItJOW72yz8boWInQ
M1veSQ4YlZERryxSmNpyWeTwDhhszdT/hg==
-----END CERTIFICATE-----
Generated at Wed Jul 3 00:11:52 2024 by rpki-client on console-fra.rpki-client.org