Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383032383a3a2f34382d3438203d3e20323131393436.roa
File:                     326131323a646434373a383032383a3a2f34382d3438203d3e20323131393436.roa (raw, json)
Hash identifier:          EZ3HvrbdB/DnXSwLWwNnrJvD/6TB/+NscVt0rPPlfuI=
Subject key identifier:   8D:B1:DD:3B:21:CB:D5:CB:EC:29:FF:D0:AD:48:1A:B4:BB:6F:64:29
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       196DE2044203956C71DFCE44993A1BA978F98A60
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383032383a3a2f34382d3438203d3e20323131393436.roa
Signing time:             Thu 20 Jun 2024 05:23:09 +0000
ROA not before:           Thu 20 Jun 2024 05:18:09 +0000
ROA not after:            Thu 19 Jun 2025 05:23:09 +0000
asID:                     211946
IP address blocks:        2a12:dd47:8028::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:6d:e2:04:42:03:95:6c:71:df:ce:44:99:3a:1b:a9:78:f9:8a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:09 2024 GMT
            Not After : Jun 19 05:23:09 2025 GMT
        Subject: CN=8DB1DD3B21CBD5CBEC29FFD0AD481AB4BB6F6429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:45:db:dc:d9:29:f8:46:bd:dd:5b:e0:d3:7d:
                    24:cc:bf:d4:f3:92:91:11:dc:e2:6c:75:eb:aa:db:
                    23:0e:f0:8b:2a:68:cb:1f:37:95:51:c4:5c:d2:be:
                    99:3e:e9:e7:2d:20:28:e8:b8:4d:50:2d:04:ba:7a:
                    17:bd:78:14:bf:9e:5b:ab:19:ed:83:dc:67:fe:4b:
                    43:c9:bf:61:c8:f2:86:de:61:86:03:dd:99:71:a6:
                    2f:dd:aa:76:7c:38:45:db:ca:54:e0:88:3a:a2:0a:
                    bc:94:6c:4f:60:90:2d:84:a0:4d:e9:3b:d0:28:57:
                    e6:64:9f:ce:c0:4e:50:ea:35:c2:a4:de:27:0d:fe:
                    51:42:79:37:06:54:2f:42:e0:cb:b3:48:2f:e0:47:
                    80:88:7b:50:81:39:3b:da:08:c9:51:e8:70:57:7e:
                    ae:0e:e2:e9:8b:44:f4:13:c6:3c:f5:2e:e5:db:90:
                    98:5c:92:c2:87:b6:1f:a2:01:e9:d4:2b:63:d2:50:
                    02:9a:37:e6:5b:8b:24:d9:17:58:ae:ba:77:0e:b9:
                    c5:46:ed:df:a1:a0:ef:56:0c:6b:09:4a:10:1b:6f:
                    56:05:e7:bd:ee:12:c9:11:c9:dd:cb:80:b1:d1:f0:
                    1f:60:8d:16:30:90:f1:de:79:4f:f4:8c:a7:19:7e:
                    34:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B1:DD:3B:21:CB:D5:CB:EC:29:FF:D0:AD:48:1A:B4:BB:6F:64:29
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383032383a3a2f34382d3438203d3e20323131393436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8028::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:46:cb:17:c3:1b:2d:30:01:7d:ed:65:50:3c:82:90:9b:97:
         b1:c8:19:9f:c3:d3:8f:be:0a:1f:e0:9e:66:72:a3:2a:15:f6:
         b5:15:a2:a3:4f:a0:b1:12:d6:e7:15:fb:b0:69:a6:9f:91:e5:
         f3:32:64:b3:dd:6f:12:60:f0:f3:65:fd:3b:f3:86:9a:e5:ed:
         83:b0:6a:13:48:f8:89:24:ec:97:20:a9:73:42:16:80:0a:2f:
         22:33:33:25:c8:fa:55:c5:7e:f3:3b:b2:54:dd:d0:63:92:25:
         81:95:b7:f3:b9:4f:b2:83:96:ed:a5:2c:70:ac:d0:9e:32:bc:
         7d:62:dc:ca:dc:b9:99:48:7e:5a:e5:79:26:3b:ad:2d:e8:7f:
         3f:10:b1:fa:ee:d9:c4:10:d2:90:9c:fa:16:1e:53:12:c2:2c:
         f4:91:e7:db:9c:03:7d:f5:3a:18:6c:15:95:8c:76:26:53:28:
         a5:19:d3:bc:44:a0:ee:28:a8:d1:7d:7a:67:fe:c0:8e:08:7b:
         2e:d7:1e:85:05:9d:be:e9:76:5f:e2:94:44:f4:9c:c5:e8:51:
         55:ce:94:f2:da:c1:45:2f:eb:7e:f7:3c:3a:99:4c:75:21:a9:
         aa:8f:7b:fb:c8:59:9b:14:36:9c:ff:44:12:6a:03:7e:32:eb:
         8f:c2:d7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 23:51:24 2024 by rpki-client on console-ams.rpki-client.org