Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386330303a3a2f33392d3438203d3e203536333238.roa
File:                     326131323a646434373a386330303a3a2f33392d3438203d3e203536333238.roa (raw, json)
Hash identifier:          yoW8Ba4qgjeOc8AnB77XomKsHW1dWGgIZLnAIP/7IVM=
Subject key identifier:   05:6F:4C:A7:38:D9:C1:09:49:7C:B5:53:EA:01:4B:CE:D4:81:A6:9F
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       6821D4AF2E90175887A2837FD021AC44E752812F
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386330303a3a2f33392d3438203d3e203536333238.roa
Signing time:             Thu 20 Jun 2024 05:23:11 +0000
ROA not before:           Thu 20 Jun 2024 05:18:11 +0000
ROA not after:            Thu 19 Jun 2025 05:23:11 +0000
asID:                     56328
IP address blocks:        2a12:dd47:8c00::/39 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:21:d4:af:2e:90:17:58:87:a2:83:7f:d0:21:ac:44:e7:52:81:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:11 2024 GMT
            Not After : Jun 19 05:23:11 2025 GMT
        Subject: CN=056F4CA738D9C109497CB553EA014BCED481A69F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d8:25:14:bf:d7:16:0b:20:58:01:e2:98:99:
                    36:ad:0f:0e:95:12:e1:92:14:97:30:09:7b:e5:6f:
                    a6:8d:6d:f9:3a:e1:68:0a:c5:90:19:70:00:f9:f0:
                    43:ef:53:38:ff:8e:c1:6b:2b:e9:b7:ac:76:0f:5a:
                    81:83:cb:c9:b5:36:b4:f8:4c:54:bc:d5:78:56:d0:
                    a6:be:60:44:b5:4a:9c:a8:1d:5a:80:66:d6:52:24:
                    32:28:39:75:63:f1:a7:8f:c6:2c:86:6d:bf:ff:81:
                    35:30:13:23:00:f2:d7:af:f9:0e:ad:7d:88:d0:ed:
                    21:d1:ae:a8:2f:53:4b:4f:0f:0e:8e:32:8b:c6:bc:
                    3e:a9:21:e5:30:11:03:3b:e7:3c:1a:a7:8c:6b:8d:
                    5c:64:4a:5c:24:15:a0:7a:ae:b1:1f:9a:50:fe:56:
                    3e:9a:de:f4:cf:e1:54:c7:82:44:2a:26:7c:7b:2d:
                    5c:e2:ba:2d:38:cc:bf:1d:43:df:25:c9:3c:fa:48:
                    aa:32:29:95:35:32:5e:7e:2e:b3:e8:63:1c:1d:08:
                    0b:b5:f7:22:12:e3:90:71:55:0f:29:f4:6d:6b:85:
                    47:eb:27:bc:be:00:d6:cd:ec:d8:f4:c6:06:09:5f:
                    f1:e4:18:24:d4:b1:57:67:6d:d0:52:e7:ce:61:e5:
                    29:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6F:4C:A7:38:D9:C1:09:49:7C:B5:53:EA:01:4B:CE:D4:81:A6:9F
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386330303a3a2f33392d3438203d3e203536333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8c00::/39

    Signature Algorithm: sha256WithRSAEncryption
         92:8c:df:a0:a5:9b:22:c8:5b:d5:71:29:95:9e:f9:91:b6:99:
         4b:7d:3e:5d:9b:23:b9:98:78:71:17:14:63:55:ba:f4:2d:ed:
         1c:09:42:6b:53:5b:77:c3:6c:66:23:ac:58:ab:f1:25:90:ca:
         cf:91:8d:94:39:bc:90:12:92:ec:93:d8:fd:e9:85:2f:e6:a7:
         6d:57:d6:3f:38:5b:d1:2e:56:10:fe:bb:68:70:24:d7:44:fc:
         ad:09:bf:c7:0a:de:0d:54:9b:d2:2c:72:2a:68:f0:f9:21:e1:
         fe:d3:5e:48:5e:86:1c:ae:10:33:8f:37:66:e6:ef:ff:ab:62:
         38:5c:9d:43:7a:f9:c1:26:81:1d:20:ef:6c:82:f1:3f:28:42:
         d6:af:de:61:a1:bd:be:87:7e:94:1c:9b:01:6a:27:f8:b6:d4:
         14:be:61:7b:e7:12:ec:20:30:04:c7:10:54:d8:4b:c3:54:cb:
         8c:86:c7:80:4c:eb:d1:e6:73:18:bc:2a:2d:4b:55:d7:75:f8:
         e2:4f:bc:12:cb:0c:88:6c:51:6f:41:83:48:cb:9c:2b:71:b1:
         73:24:88:4c:f7:65:9d:67:e7:19:7c:e1:12:43:78:77:a9:67:
         09:81:74:10:86:e7:92:36:fd:57:3c:88:b8:74:b8:a9:16:7d:
         39:d8:5d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 00:11:52 2024 by rpki-client on console-fra.rpki-client.org