Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a646230303a3a2f34302d3438203d3e203530353830.roa
File:                     326131323a646434373a646230303a3a2f34302d3438203d3e203530353830.roa (raw, json)
Hash identifier:          hKQd+LouAvnKogE2TVl8lEoETWqbCv6t461+FygbmAk=
Subject key identifier:   AD:2F:63:40:CC:A8:EB:CC:9E:05:B6:9C:1B:38:95:9B:42:55:DA:78
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       432168F6AA58656F3DD8F152455E61898224F2AA
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a646230303a3a2f34302d3438203d3e203530353830.roa
Signing time:             Thu 20 Jun 2024 05:23:12 +0000
ROA not before:           Thu 20 Jun 2024 05:18:12 +0000
ROA not after:            Thu 19 Jun 2025 05:23:12 +0000
asID:                     50580
IP address blocks:        2a12:dd47:db00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:21:68:f6:aa:58:65:6f:3d:d8:f1:52:45:5e:61:89:82:24:f2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:12 2024 GMT
            Not After : Jun 19 05:23:12 2025 GMT
        Subject: CN=AD2F6340CCA8EBCC9E05B69C1B38959B4255DA78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f3:ea:dd:cd:78:b5:e9:ee:75:c5:ea:0d:43:
                    2b:63:87:40:8a:f0:de:3d:36:b5:05:33:98:a4:85:
                    82:76:6a:12:bc:b6:23:01:d5:7d:0d:28:49:aa:e0:
                    9f:6f:f4:d6:1b:77:38:4b:11:de:d9:29:fc:6c:5b:
                    94:15:46:74:09:d5:60:cd:f2:35:d5:13:88:69:4e:
                    e7:38:1a:82:df:de:49:ee:d0:51:d5:af:81:8c:35:
                    14:9f:de:57:a2:78:9d:e3:5d:94:55:84:01:01:b2:
                    4f:9c:b2:f4:34:bd:ae:02:58:62:70:f9:9e:e9:7c:
                    22:37:b3:ed:96:4f:79:a7:8d:37:b6:9a:aa:f9:b4:
                    85:74:f8:2c:13:25:73:69:54:4c:a5:10:63:b7:26:
                    da:60:4d:a1:e1:29:e4:66:0b:01:df:74:cf:98:de:
                    74:32:5f:a0:1d:42:1d:3b:16:1b:d7:b9:15:db:86:
                    7f:a4:26:e9:b7:45:41:a6:e4:7f:94:69:33:cf:d1:
                    c7:e8:71:a3:ee:e8:33:50:e1:b5:33:9b:f2:70:61:
                    73:58:4c:7b:b2:6e:5c:99:0e:16:62:6f:1a:44:3d:
                    fd:2f:0b:6d:0e:be:61:8b:5f:67:cf:8e:26:cc:d1:
                    66:4a:b6:7b:30:af:5d:62:09:88:f1:20:26:48:80:
                    f6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2F:63:40:CC:A8:EB:CC:9E:05:B6:9C:1B:38:95:9B:42:55:DA:78
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a646230303a3a2f34302d3438203d3e203530353830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:db00::/40

    Signature Algorithm: sha256WithRSAEncryption
         7d:3d:ed:61:0b:2f:70:e9:a6:cd:e9:34:19:4d:33:83:59:ff:
         98:b2:2c:0c:ec:51:71:13:ec:8d:bd:5b:d5:bc:70:29:64:aa:
         e3:25:80:d0:30:22:35:bc:50:97:3c:f9:e0:54:96:a7:87:83:
         65:59:be:b1:6c:9b:e8:cd:cf:55:19:ed:22:c5:31:fc:8a:54:
         db:3c:da:d7:de:65:e1:c4:15:1e:fb:10:af:55:7b:f4:ad:56:
         75:8b:15:e3:8f:ad:ae:78:56:f6:85:d9:9c:d7:58:93:ce:88:
         0c:8e:80:ce:c4:0a:fa:19:eb:17:b7:f1:70:c8:be:22:ad:66:
         1c:7d:19:e4:b6:96:a4:6a:19:f6:fb:b6:89:bd:61:4c:d4:6c:
         2b:2b:6e:79:92:89:82:ec:a4:d2:46:5f:ec:80:7a:3b:d0:07:
         9e:65:27:33:21:17:6f:22:78:47:86:9f:66:5c:42:84:a4:8b:
         b3:6f:56:a5:43:17:4b:3e:8f:a3:10:39:fa:c3:34:2c:17:3a:
         40:fe:dc:75:ad:b2:7d:92:69:2b:71:c1:21:0f:0c:ed:b4:8d:
         3c:a8:44:25:b8:55:b4:cd:e1:f2:c1:1c:e7:71:19:09:41:51:
         06:81:16:fd:3f:cc:ff:59:5a:f2:84:b0:6d:15:76:72:01:c5:
         6d:ba:30:86
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUQyFo9qpYZW892PFSRV5hiYIk8qowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAwNTE4MTJaFw0yNTA2MTkwNTIzMTJaMDMxMTAvBgNV
BAMTKEFEMkY2MzQwQ0NBOEVCQ0M5RTA1QjY5QzFCMzg5NTlCNDI1NURBNzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC08+rdzXi16e51xeoNQytjh0CK
8N49NrUFM5ikhYJ2ahK8tiMB1X0NKEmq4J9v9NYbdzhLEd7ZKfxsW5QVRnQJ1WDN
8jXVE4hpTuc4GoLf3knu0FHVr4GMNRSf3leieJ3jXZRVhAEBsk+csvQ0va4CWGJw
+Z7pfCI3s+2WT3mnjTe2mqr5tIV0+CwTJXNpVEylEGO3JtpgTaHhKeRmCwHfdM+Y
3nQyX6AdQh07FhvXuRXbhn+kJum3RUGm5H+UaTPP0cfocaPu6DNQ4bUzm/JwYXNY
THuyblyZDhZibxpEPf0vC20OvmGLX2fPjibM0WZKtnswr11iCYjxICZIgPZJAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUrS9jQMyo68yeBbacGziVm0JV2ngwHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgaoGCCsG
AQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzNzNhNjQ2MjMwMzAzYTNhMmYzNDMwMmQzNDM4
MjAzZDNlMjAzNTMwMzUzODMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhLdR9swDQYJKoZIhvcNAQEL
BQADggEBAH097WELL3Dpps3pNBlNM4NZ/5iyLAzsUXET7I29W9W8cClkquMlgNAw
IjW8UJc8+eBUlqeHg2VZvrFsm+jNz1UZ7SLFMfyKVNs82tfeZeHEFR77EK9Ve/St
VnWLFeOPra54VvaF2ZzXWJPOiAyOgM7ECvoZ6xe38XDIviKtZhx9GeS2lqRqGfb7
tom9YUzUbCsrbnmSiYLspNJGX+yAejvQB55lJzMhF28ieEeGn2ZcQoSki7NvVqVD
F0s+j6MQOfrDNCwXOkD+3HWtsn2SaStxwSEPDO20jTyoRCW4VbTN4fLBHOdxGQlB
UQaBFv0/zP9ZWvKEsG0VdnIBxW26MIY=
-----END CERTIFICATE-----
Generated at Wed Jul 3 00:11:52 2024 by rpki-client on console-fra.rpki-client.org