Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383030313a3a2f34382d3438203d3e203537343031.roa
File:                     326131323a646434373a383030313a3a2f34382d3438203d3e203537343031.roa (raw, json)
Hash identifier:          Thm6huUrp1s53ffetatWDP92scHbGSkNI1/3YhQiK58=
Subject key identifier:   C9:7E:AB:50:62:2E:1A:CD:BD:EA:D3:1A:B1:A7:44:3A:F8:78:40:C6
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       2AB53CE78B752FEE5F25A9AF33C7035B33782916
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383030313a3a2f34382d3438203d3e203537343031.roa
Signing time:             Thu 20 Jun 2024 05:23:28 +0000
ROA not before:           Thu 20 Jun 2024 05:18:28 +0000
ROA not after:            Thu 19 Jun 2025 05:23:28 +0000
asID:                     57401
IP address blocks:        2a12:dd47:8001::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b5:3c:e7:8b:75:2f:ee:5f:25:a9:af:33:c7:03:5b:33:78:29:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:28 2024 GMT
            Not After : Jun 19 05:23:28 2025 GMT
        Subject: CN=C97EAB50622E1ACDBDEAD31AB1A7443AF87840C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:be:dc:bc:be:e0:1d:fe:ef:b7:dd:d3:dc:7b:
                    ab:c1:12:08:ad:73:6b:02:8a:7a:ac:30:a8:06:e1:
                    2d:ca:7c:e3:d9:ba:81:65:1b:ac:d5:3e:db:ec:38:
                    7e:79:ac:f2:71:bb:0d:0f:70:a6:34:84:e0:8a:d6:
                    77:49:38:46:72:8c:d8:1d:d5:f5:4e:ec:5e:16:1f:
                    11:ba:69:d6:56:e6:5f:d8:c2:04:34:33:e3:6d:65:
                    c9:7b:72:fc:1f:b5:3b:16:50:37:05:2c:db:35:f8:
                    bf:cd:c5:1c:e8:30:36:77:76:80:83:c2:ca:84:03:
                    dc:96:0e:20:2a:72:7b:81:17:ee:de:f6:c5:b9:c1:
                    37:4b:86:f7:03:ec:06:15:27:eb:d8:98:63:f0:45:
                    d0:f9:c2:52:a2:ba:c6:ec:cd:95:fc:01:1e:92:7f:
                    38:27:5c:12:fe:92:56:b0:38:96:97:7c:ef:e8:aa:
                    cf:49:d1:34:e8:26:a4:d6:e6:bc:82:22:ec:1c:72:
                    c2:f1:4e:49:fe:43:9b:46:75:7a:74:b8:14:b6:1b:
                    cf:7c:97:fe:80:85:5e:0d:84:31:a7:6a:62:f2:4e:
                    1f:e7:3c:5e:52:f6:3a:d7:6e:4f:12:bb:64:ba:59:
                    3a:54:94:1f:c5:30:e0:33:d8:c2:0f:8f:b1:7b:25:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7E:AB:50:62:2E:1A:CD:BD:EA:D3:1A:B1:A7:44:3A:F8:78:40:C6
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383030313a3a2f34382d3438203d3e203537343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:3c:d1:89:3d:93:c9:3c:ea:9e:1b:23:e2:31:58:91:92:2c:
         c6:43:b6:eb:7d:9d:b2:e9:e4:c4:05:f1:45:0e:86:24:51:f7:
         f2:2a:ce:27:ac:03:a4:bf:80:8c:14:99:25:ba:94:17:a0:15:
         2a:d8:67:e6:6c:02:12:41:c5:f5:1f:43:b1:8c:10:c3:50:17:
         56:d8:1a:47:86:19:4b:6b:f0:6f:38:2f:58:e3:c6:06:1b:f5:
         b7:51:0a:47:8e:3d:11:a4:dd:ab:67:24:3b:30:0d:60:6c:64:
         a8:96:09:b1:81:1e:b2:bc:40:9a:73:75:aa:83:e2:0b:0d:82:
         e4:20:8d:64:39:8d:2a:17:7d:ce:ae:8a:65:17:dd:07:9a:65:
         75:37:cb:e5:cd:b0:96:12:27:b6:cc:0d:ee:e3:c4:91:1a:e1:
         19:6b:cc:a5:7d:8d:af:50:e4:e6:f1:d8:87:05:22:26:a4:ab:
         ad:4b:67:b7:32:35:1a:6f:47:3e:40:a6:eb:c5:68:a9:98:88:
         77:94:e4:8d:1d:61:0e:73:0b:f5:0a:0e:e5:ca:6c:ea:c4:b5:
         de:74:8b:a4:c7:17:a9:71:72:36:d6:50:9e:12:3b:2b:da:57:
         eb:9e:b6:b8:23:85:5f:39:ef:b4:f3:eb:14:38:27:f8:3a:05:
         f3:e8:0c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 23:51:24 2024 by rpki-client on console-ams.rpki-client.org