Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383162303a3a2f34342d3438203d3e20323033373337.roa
File:                     326131323a646434373a383162303a3a2f34342d3438203d3e20323033373337.roa (raw, json)
Hash identifier:          oKZokS9IAdJq6DK1JFMu2PV6r3sSAD/0tNk0MXyXCN0=
Subject key identifier:   F8:B0:06:DA:20:1E:2E:B9:9B:8D:96:1A:76:47:E4:33:F7:C5:FE:9F
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       01D282AEBD01F0075664F8665BF884B88165C274
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383162303a3a2f34342d3438203d3e20323033373337.roa
Signing time:             Thu 20 Jun 2024 05:23:34 +0000
ROA not before:           Thu 20 Jun 2024 05:18:34 +0000
ROA not after:            Thu 19 Jun 2025 05:23:34 +0000
asID:                     203737
IP address blocks:        2a12:dd47:81b0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d2:82:ae:bd:01:f0:07:56:64:f8:66:5b:f8:84:b8:81:65:c2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:34 2024 GMT
            Not After : Jun 19 05:23:34 2025 GMT
        Subject: CN=F8B006DA201E2EB99B8D961A7647E433F7C5FE9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:64:30:c2:e4:7f:93:4c:07:7e:c0:42:e1:39:
                    47:a0:69:d3:75:d9:1b:5e:2a:0f:7e:92:e6:a3:d1:
                    6e:39:75:95:73:1b:cf:f8:e7:35:1b:fe:54:bd:5f:
                    5a:6d:03:3c:c8:c5:cf:45:67:17:d5:f7:ea:a0:07:
                    4a:69:25:04:f6:3b:73:dd:7e:cd:81:b4:e4:27:71:
                    a9:e0:3b:af:c3:70:c3:0a:2b:5b:95:fc:70:78:bc:
                    7b:cf:d6:10:43:00:7c:e4:34:71:01:9a:04:e5:bf:
                    f7:e9:67:a6:3a:39:2e:fe:c4:18:7b:22:5f:e3:e6:
                    04:8f:42:8c:1d:a7:d2:78:cb:dc:bd:44:43:c7:2a:
                    ca:c8:2d:f5:3d:e8:2f:32:a8:ba:8f:e7:7a:4a:d5:
                    82:df:9c:5f:d3:ce:62:c7:bc:e9:0f:a5:28:8d:85:
                    5c:b6:ca:cc:c9:c4:70:cd:56:a5:41:9f:84:9e:98:
                    13:9c:00:5f:36:1e:7d:ef:a2:30:b6:12:61:4c:2a:
                    09:fe:d0:fb:5e:d0:d5:db:96:68:5c:75:15:9f:66:
                    39:96:66:05:b7:12:bb:fa:56:67:53:72:4d:20:18:
                    42:c4:03:13:63:70:17:de:f9:5c:84:18:46:a6:2d:
                    c2:01:96:5c:c8:54:27:83:c8:5a:31:b1:7b:ad:60:
                    1e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B0:06:DA:20:1E:2E:B9:9B:8D:96:1A:76:47:E4:33:F7:C5:FE:9F
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383162303a3a2f34342d3438203d3e20323033373337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:81b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         62:89:16:13:da:52:b5:e4:38:79:fa:7c:88:fc:a7:82:5e:4c:
         7d:e8:d3:da:cd:ef:2b:69:58:73:4b:45:a5:4b:2d:24:60:37:
         d0:35:79:ba:60:99:50:3c:b5:95:cd:a6:9e:46:c9:c5:44:fc:
         72:3b:f5:9f:87:34:d4:10:2d:7f:59:a3:1f:fa:4d:f3:a2:5c:
         c4:3d:60:de:f6:ff:4c:88:95:b2:e1:c8:21:a9:2f:b3:b9:78:
         a8:10:4b:f4:c5:69:99:bf:05:f6:36:04:92:34:1f:72:a1:14:
         54:6c:62:59:a6:9b:9f:fa:c7:98:94:58:ea:76:77:0c:91:0f:
         56:84:58:bf:c6:39:ee:d6:60:64:77:3e:bf:ed:b8:1f:20:26:
         80:7b:85:f5:41:16:eb:3f:ae:fa:6c:97:75:58:f0:38:a8:5d:
         75:0b:ab:b8:73:f9:2b:fe:aa:4e:4e:75:33:37:b0:d1:0d:dc:
         21:b7:56:59:a9:92:62:00:44:8a:d9:7e:8c:8c:ad:20:6b:4e:
         f9:8b:19:c0:58:69:c4:55:80:ee:67:0b:98:96:5e:74:b9:05:
         73:b4:8e:db:31:04:a1:fe:4f:19:c3:e9:bd:02:fd:dc:e5:3e:
         f9:d5:90:bf:9c:e9:73:f7:98:d9:40:81:a9:ff:fe:7c:7c:bf:
         51:0e:7e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 23:51:24 2024 by rpki-client on console-ams.rpki-client.org