Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383530303a3a2f34302d3430203d3e203531333936.roa
File:                     326131323a646434373a383530303a3a2f34302d3430203d3e203531333936.roa (raw, json)
Hash identifier:          gFyZqIkHLtMqCVaiK6WeMtNmvjbsLW0Odj3ZgJCLt+g=
Subject key identifier:   53:7D:57:13:56:C8:91:A2:E1:BF:8D:DF:92:91:10:31:C6:A2:AF:70
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       4CE7FD42A4C53A6033539313F84D860733AEA806
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383530303a3a2f34302d3430203d3e203531333936.roa
Signing time:             Thu 20 Jun 2024 05:23:10 +0000
ROA not before:           Thu 20 Jun 2024 05:18:10 +0000
ROA not after:            Thu 19 Jun 2025 05:23:10 +0000
asID:                     51396
IP address blocks:        2a12:dd47:8500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e7:fd:42:a4:c5:3a:60:33:53:93:13:f8:4d:86:07:33:ae:a8:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:10 2024 GMT
            Not After : Jun 19 05:23:10 2025 GMT
        Subject: CN=537D571356C891A2E1BF8DDF92911031C6A2AF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:d3:0f:7a:39:91:d6:6b:24:b4:d6:7d:bf:
                    d5:65:67:56:f4:4f:54:97:b9:04:f7:f1:00:5c:cd:
                    b5:e8:81:9f:5f:fb:6f:dc:d4:b6:67:37:36:5c:a6:
                    74:ff:b9:26:d6:56:4e:66:20:49:b6:74:7d:54:41:
                    46:f8:ec:fc:33:82:c2:07:06:f5:61:f0:68:45:61:
                    26:4a:df:f2:fa:14:f9:af:5b:85:4b:48:e9:1d:69:
                    65:a7:cf:e5:7f:49:30:a2:ba:28:0a:c4:29:a9:44:
                    03:89:f1:1d:e2:b4:71:7d:e1:8f:13:00:61:40:a9:
                    3e:61:8a:17:62:b0:5a:27:c1:dc:28:e2:db:30:4a:
                    33:0d:7f:12:24:41:93:0e:86:04:19:ca:9d:9f:ee:
                    fc:9c:1f:2c:70:a6:4c:59:55:49:e8:ad:5f:60:99:
                    31:4b:eb:ac:ff:fa:ed:42:03:c5:08:28:47:db:40:
                    bd:14:85:07:96:c7:91:ff:22:78:62:c1:65:70:fc:
                    04:60:e6:94:3c:52:f7:39:61:08:8f:d0:81:a0:fb:
                    66:0f:51:85:be:31:5d:aa:81:c8:e1:05:91:b2:21:
                    b7:6a:42:dd:d9:f0:c0:f7:55:21:ba:d8:1a:b8:2d:
                    da:8a:97:06:2e:c7:b4:9c:86:82:33:b6:8b:98:7a:
                    d1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7D:57:13:56:C8:91:A2:E1:BF:8D:DF:92:91:10:31:C6:A2:AF:70
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a383530303a3a2f34302d3430203d3e203531333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8500::/40

    Signature Algorithm: sha256WithRSAEncryption
         36:22:60:48:fd:c3:0a:a6:34:f9:62:1a:a3:76:9b:b8:7c:e7:
         c6:9f:b2:9f:91:7f:5a:d0:b1:06:a2:2e:92:1c:92:ff:d3:fe:
         c6:8b:0f:f9:65:6c:4d:61:33:14:c4:89:35:51:f4:ee:36:41:
         87:20:c5:21:62:f3:d5:85:a9:1d:0f:6b:ca:0b:1a:f2:cc:9f:
         73:f1:6a:a4:de:83:fc:01:e4:49:de:29:dd:7f:aa:71:39:ae:
         cb:b8:c4:61:04:71:50:d2:6e:0d:78:6b:18:ac:f2:a6:fb:bd:
         6d:9a:a5:86:14:eb:77:41:15:cb:a6:96:ae:0c:e7:2e:f7:ed:
         4d:fc:7c:89:54:15:9c:82:6e:d2:df:b4:2c:c7:f3:53:de:99:
         5d:8e:9c:61:be:a9:9e:9c:fe:62:ee:26:e0:41:00:04:2c:42:
         b7:43:a6:45:b4:b4:5e:ea:72:13:47:91:57:2f:fd:3a:8a:8b:
         90:fc:28:1d:89:4a:cb:f4:bb:d9:64:4d:49:23:6c:59:a5:19:
         5a:d4:a6:59:51:6e:04:de:f7:47:ec:ec:a2:6b:9a:24:72:dd:
         b2:8c:61:4a:17:07:af:05:40:7b:70:d1:c5:5e:b1:73:31:e5:
         69:e1:12:d6:71:a5:6e:de:57:a4:f0:c8:a5:83:7f:c8:ad:15:
         a3:51:1f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 00:11:52 2024 by rpki-client on console-fra.rpki-client.org