Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383132303a3a2f34342d3438203d3e20323033313435.roa
File:                     326131323a646434373a383132303a3a2f34342d3438203d3e20323033313435.roa (raw, json)
Hash identifier:          0vEkXQL6DeCmDGnF5V8VTTw60Tils/KC7jG2l9ulTeQ=
Subject key identifier:   5E:17:5F:22:01:B3:65:6C:DE:A7:03:26:88:09:2E:5C:86:86:24:28
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       0BD700571410F15E2FF8E910146F3EDEFAB65E52
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383132303a3a2f34342d3438203d3e20323033313435.roa
Signing time:             Thu 20 Jun 2024 05:23:33 +0000
ROA not before:           Thu 20 Jun 2024 05:18:33 +0000
ROA not after:            Thu 19 Jun 2025 05:23:33 +0000
asID:                     203145
IP address blocks:        2a12:dd47:8120::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:d7:00:57:14:10:f1:5e:2f:f8:e9:10:14:6f:3e:de:fa:b6:5e:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:33 2024 GMT
            Not After : Jun 19 05:23:33 2025 GMT
        Subject: CN=5E175F2201B3656CDEA7032688092E5C86862428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:91:a0:9e:fe:87:ed:e5:9e:17:5d:84:c8:
                    60:ac:7e:d9:07:72:f1:a4:e0:d0:72:86:74:08:c1:
                    0c:3b:13:e1:77:0e:24:6b:42:24:0e:de:1a:3d:6c:
                    4d:e8:39:76:4c:2d:e0:ba:9c:3e:48:4f:ec:5c:1f:
                    7c:ba:48:36:26:b0:23:d6:04:e4:88:5d:55:00:3c:
                    d6:f4:12:a7:52:ae:14:9a:c9:c4:23:6f:97:92:b5:
                    af:99:a2:8c:f3:96:99:d5:c8:41:34:43:87:9f:2b:
                    e2:6b:f4:29:25:07:31:02:3f:e5:53:66:19:6b:bc:
                    06:ac:3d:64:fd:f2:21:c3:ff:ca:90:19:d6:6a:b5:
                    1a:1c:c8:1d:76:cf:b4:a8:ac:0a:af:2e:4f:3a:11:
                    ff:a8:4e:59:2b:91:27:b2:e7:f2:d1:eb:1c:35:cb:
                    42:e1:49:3f:87:f5:1c:3a:be:8d:07:31:46:02:49:
                    8a:f4:67:19:96:79:f7:74:a8:8c:f5:1b:bc:50:a9:
                    68:0d:db:63:ac:1b:37:d8:e7:91:42:46:03:04:6e:
                    20:7d:0e:10:2a:7c:5a:48:12:10:d6:ea:ea:5e:ba:
                    30:80:33:be:b7:94:98:ff:67:4a:0e:f4:a9:f5:fe:
                    ee:e4:f9:e0:c3:5e:45:d1:fc:48:7e:c2:ee:c7:8f:
                    42:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:17:5F:22:01:B3:65:6C:DE:A7:03:26:88:09:2E:5C:86:86:24:28
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383132303a3a2f34342d3438203d3e20323033313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8120::/44

    Signature Algorithm: sha256WithRSAEncryption
         b8:31:21:39:5e:6c:2c:52:e8:a9:39:0c:2e:bd:55:18:53:da:
         bc:96:48:37:ff:0b:ff:c0:82:d5:b1:58:f7:cf:f0:4c:71:fc:
         58:b2:0e:c8:53:29:e5:a7:92:0c:7c:5e:2e:04:fc:16:c1:27:
         9c:b6:de:60:3e:62:e5:bd:fc:cd:1e:69:99:ba:9b:eb:80:90:
         7f:12:da:29:f1:ec:69:48:c6:36:ee:b9:7d:41:1a:89:94:f1:
         92:de:b5:dc:38:2d:e8:ef:c6:8a:fa:2e:68:21:26:e4:19:37:
         53:b8:c3:0c:ea:6c:3e:72:e8:4a:06:f6:c7:e5:8c:53:53:c8:
         3e:97:5c:83:8c:80:46:0b:6d:98:af:52:18:12:6c:8a:25:25:
         6d:27:ce:b5:30:48:2e:2c:c5:f0:29:5a:1b:2b:c3:1c:c0:7b:
         ae:ef:f1:53:d7:d7:20:fd:f8:d3:dd:21:2b:6b:8d:fe:8b:de:
         0b:8d:3e:36:96:0d:0d:7e:8f:80:f7:4a:5a:00:2a:b0:4d:92:
         8a:4f:4c:25:99:7e:91:aa:43:53:57:38:9e:56:3d:78:3f:b3:
         eb:99:e0:f2:a1:4a:3f:b3:36:99:3f:ca:7e:8b:26:af:ed:66:
         ad:cf:89:d2:f1:9c:fc:eb:2e:39:6c:b5:99:df:90:7a:ba:b8:
         8a:7d:26:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 00:11:52 2024 by rpki-client on console-fra.rpki-client.org