Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383136363a3a2f34382d3438203d3e20323032323232.roa
File:                     326131323a646434373a383136363a3a2f34382d3438203d3e20323032323232.roa (raw, json)
Hash identifier:          OnWz7tCob8XgNcra8OOcaJIoI2osbjmQONHuIpSSiNA=
Subject key identifier:   D9:C5:BD:8E:19:ED:63:09:D7:64:F2:F8:56:E1:F3:7C:48:67:9D:E8
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       46A4555E8D92F2C5DDE52DDE8261AE12FE8E1F9B
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383136363a3a2f34382d3438203d3e20323032323232.roa
Signing time:             Thu 20 Jun 2024 05:23:36 +0000
ROA not before:           Thu 20 Jun 2024 05:18:36 +0000
ROA not after:            Thu 19 Jun 2025 05:23:36 +0000
asID:                     202222
IP address blocks:        2a12:dd47:8166::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a4:55:5e:8d:92:f2:c5:dd:e5:2d:de:82:61:ae:12:fe:8e:1f:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:36 2024 GMT
            Not After : Jun 19 05:23:36 2025 GMT
        Subject: CN=D9C5BD8E19ED6309D764F2F856E1F37C48679DE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:37:9e:48:3c:e7:53:eb:87:47:33:fa:ff:
                    fd:05:a3:60:b4:66:68:55:c9:26:75:b2:f2:d8:03:
                    2b:28:9e:1d:8a:23:0e:1e:79:3c:e2:92:f8:7b:5c:
                    51:c3:da:0f:e5:81:74:8d:46:53:e3:ac:dc:04:48:
                    35:cd:e9:70:b3:be:67:b1:ad:3b:99:f2:ac:08:dc:
                    14:2c:c2:b2:4b:81:41:1a:dc:05:ca:03:1a:1e:25:
                    a9:18:d6:f1:3e:ac:07:e7:c2:7f:68:c6:95:d7:93:
                    57:80:91:0e:6f:38:9d:b0:0c:88:e2:b1:48:a9:da:
                    c2:3e:59:6e:49:68:da:8b:9d:61:c3:c0:37:d7:5f:
                    7d:c4:27:e1:d0:70:c4:45:03:97:f8:d5:c0:b3:05:
                    09:af:e0:7f:3e:5c:24:49:50:81:bd:9c:2f:22:6c:
                    19:91:7c:33:55:31:2f:eb:ec:4e:98:8d:bf:d8:65:
                    9f:e4:b2:bd:bc:40:ab:4c:2b:8f:bb:7a:2e:49:29:
                    bb:5f:57:bb:c6:97:ac:4d:c3:f3:dc:37:4b:fd:d6:
                    2e:d6:e9:d0:e4:d4:d6:cc:38:c7:74:88:7e:9f:9b:
                    e7:a2:48:80:33:88:05:75:15:f7:3b:da:e7:25:c9:
                    52:1b:2e:40:fa:dd:f4:20:32:a9:26:62:30:2d:07:
                    39:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C5:BD:8E:19:ED:63:09:D7:64:F2:F8:56:E1:F3:7C:48:67:9D:E8
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383136363a3a2f34382d3438203d3e20323032323232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8166::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:8a:4a:0d:fa:8c:91:ca:51:84:89:a6:63:9d:94:c1:2d:48:
         b8:61:1d:3e:b1:19:b0:94:b1:01:d6:3f:b5:9a:77:c7:dd:63:
         2a:6c:76:11:3d:26:16:fa:a5:4f:e9:ee:67:e8:4c:53:50:9c:
         74:7d:98:35:cb:cb:2c:6c:3b:7b:11:f4:5e:dc:a3:96:e7:39:
         e1:a8:da:80:9f:c1:07:19:9b:e3:20:01:20:e9:a3:4d:c1:04:
         d0:fe:06:29:ad:2d:5a:68:e8:c2:9f:39:4d:dd:4d:34:f9:93:
         11:ef:4c:16:ba:6f:d7:41:d1:70:ab:8e:bd:92:18:34:f0:db:
         d9:cf:8e:60:17:e1:2e:ca:a7:4b:82:52:1b:df:73:a7:7f:2c:
         c8:9e:06:a5:01:f0:df:c2:25:66:cc:71:37:81:f0:35:ac:fd:
         a0:26:62:98:e7:09:82:53:0d:93:a1:b5:c3:db:24:5c:56:64:
         18:c9:84:97:21:e3:eb:51:a1:ba:b9:15:8e:86:3c:8e:92:64:
         aa:53:cd:10:9d:d0:67:9d:5d:5d:45:f8:12:24:b7:f6:5c:47:
         5a:eb:0e:84:25:18:51:4d:73:23:a9:94:a7:f6:ed:cc:99:80:
         34:d0:dd:e1:09:8c:42:07:f6:59:0b:89:b8:e0:88:4d:5e:9f:
         7b:f6:4a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 00:11:52 2024 by rpki-client on console-fra.rpki-client.org