Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386630303a3a2f34302d3438203d3e20323132343833.roa
File:                     326131323a646434373a386630303a3a2f34302d3438203d3e20323132343833.roa (raw, json)
Hash identifier:          1LwuN0g2EjX9jaF67aji72h2rE5T/e6ZOyyHJx/CV84=
Subject key identifier:   58:F2:D6:5C:57:5D:37:4E:9E:06:29:BE:1B:16:C8:EF:31:23:5A:44
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       237086B07E31DDB7B36C9DE85FCE5B6102CA893A
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386630303a3a2f34302d3438203d3e20323132343833.roa
Signing time:             Thu 20 Jun 2024 05:23:23 +0000
ROA not before:           Thu 20 Jun 2024 05:18:23 +0000
ROA not after:            Thu 19 Jun 2025 05:23:23 +0000
asID:                     212483
IP address blocks:        2a12:dd47:8f00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:70:86:b0:7e:31:dd:b7:b3:6c:9d:e8:5f:ce:5b:61:02:ca:89:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:23 2024 GMT
            Not After : Jun 19 05:23:23 2025 GMT
        Subject: CN=58F2D65C575D374E9E0629BE1B16C8EF31235A44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7e:9f:36:84:aa:2c:79:d9:9a:df:a7:f1:36:
                    aa:c2:af:e1:f3:39:55:c5:b7:9c:02:ee:f2:7b:a1:
                    cf:32:44:81:15:d2:21:b2:e3:d6:5b:7a:3e:66:0f:
                    00:17:13:df:b3:47:98:8e:42:72:c2:a8:4b:4c:5b:
                    24:d8:a9:3d:04:ee:7c:81:c2:e4:de:24:b6:d9:f7:
                    5a:fd:c7:34:05:01:9e:83:89:06:9d:02:b1:12:43:
                    42:fd:0c:9d:64:45:fd:30:09:10:74:2b:14:91:34:
                    b5:f4:3a:71:e3:a6:1f:96:7b:5b:4a:2e:7a:4f:51:
                    ee:2d:e1:47:0a:c7:af:86:53:a1:40:1f:50:f2:88:
                    ce:ef:49:c3:79:07:25:06:c8:0a:42:df:47:4c:1b:
                    39:70:e6:d6:55:d5:b1:36:96:ac:69:c3:9c:7b:bc:
                    35:28:d3:de:8f:df:4f:2b:f4:04:49:f7:5f:82:f2:
                    a6:a3:6e:4d:33:b3:cb:2b:f9:47:97:72:dd:ca:30:
                    5c:a0:0b:0e:39:07:74:4d:5b:62:e6:71:eb:26:92:
                    10:ad:a7:3b:1d:95:00:06:c4:7e:80:aa:83:97:1a:
                    dc:4b:99:69:56:01:ac:70:d7:af:b9:c3:4e:97:fa:
                    ec:f8:37:bf:c2:53:e9:b3:19:b6:1c:ef:df:2c:67:
                    1b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F2:D6:5C:57:5D:37:4E:9E:06:29:BE:1B:16:C8:EF:31:23:5A:44
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386630303a3a2f34302d3438203d3e20323132343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         4f:04:14:b6:76:52:37:30:c8:e3:70:b2:0e:61:2b:90:58:cf:
         58:b5:dd:44:89:1d:9c:34:1a:42:50:f0:5d:fc:24:2f:a8:f7:
         72:b7:19:5f:62:9c:62:53:21:f8:5e:ed:6b:40:cc:74:70:5d:
         6b:19:33:df:2d:2d:38:d2:e0:56:e0:a9:0f:b9:fa:49:f8:c3:
         81:09:97:c6:c5:d5:2f:50:82:52:d3:e1:9a:31:62:00:b7:71:
         d7:8e:9e:73:6d:57:74:91:09:6d:dd:84:9b:9a:fc:da:63:3e:
         64:2a:96:25:78:9e:f9:e7:0a:dc:50:90:8a:83:81:65:0b:00:
         ef:40:36:d6:27:32:96:f5:0c:21:e7:41:68:a8:00:63:21:fa:
         8c:01:4e:5e:35:cd:38:2e:53:32:bc:8f:e8:19:f9:fe:e3:ce:
         ef:90:8a:37:91:45:65:a9:66:2a:fc:76:55:f1:5a:9c:43:3f:
         d9:0c:d8:fb:2a:46:a1:fa:8d:9b:13:59:61:a2:5d:2d:d8:03:
         7f:4a:dc:2a:dd:ee:a5:95:06:ef:62:d5:64:84:85:95:09:fa:
         11:58:32:90:65:7f:86:4d:5d:17:a2:ad:6e:ff:3a:a1:05:d4:
         82:65:04:f6:58:13:19:fa:d9:63:37:17:19:73:a0:75:0a:51:
         01:fc:52:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 2 23:51:24 2024 by rpki-client on console-ams.rpki-client.org