Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a646530303a3a2f34302d3430203d3e20323133323637.roa
File:                     326131323a646434373a646530303a3a2f34302d3430203d3e20323133323637.roa (raw, json)
Hash identifier:          jMMlvmwxu9bgawO5uAzN2fEDQ3ezCg3UqCQHD0xl9RA=
Subject key identifier:   0C:BC:1A:A3:0D:82:5E:55:27:4D:F0:62:F8:74:2E:3B:63:29:02:79
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       2B8A34A92923E87C08B830AB84E3A2DCB6974498
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a646530303a3a2f34302d3430203d3e20323133323637.roa
Signing time:             Thu 20 Jun 2024 05:23:31 +0000
ROA not before:           Thu 20 Jun 2024 05:18:31 +0000
ROA not after:            Thu 19 Jun 2025 05:23:31 +0000
asID:                     213267
IP address blocks:        2a12:dd47:de00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:8a:34:a9:29:23:e8:7c:08:b8:30:ab:84:e3:a2:dc:b6:97:44:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:31 2024 GMT
            Not After : Jun 19 05:23:31 2025 GMT
        Subject: CN=0CBC1AA30D825E55274DF062F8742E3B63290279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ea:56:6d:72:24:e5:df:6d:2a:41:28:46:4b:
                    41:dc:f3:c9:27:c1:aa:e2:96:fd:c6:1c:25:80:93:
                    57:c4:17:06:c7:94:9b:77:45:0d:02:46:97:d7:c5:
                    e5:7d:d6:4c:f9:0f:f7:28:a1:66:13:77:f0:ae:e1:
                    81:6a:8b:df:a2:c8:c9:d9:d9:3a:87:4c:92:24:10:
                    fe:f7:ff:5d:b2:1b:cf:e3:c3:70:e6:35:6c:3f:e4:
                    d6:1b:04:32:64:d1:ae:b4:2a:0a:cc:48:fd:05:63:
                    d8:fe:87:ba:04:bc:2a:9d:1b:1a:e2:75:d7:b5:75:
                    8c:fd:96:92:9d:46:3a:a4:0e:0e:fe:d4:42:c0:d7:
                    6b:44:af:0a:f6:aa:5b:ee:71:2f:b2:60:d7:b7:ce:
                    3c:0e:71:80:7a:7e:d6:66:f3:18:3c:a5:f4:32:29:
                    c8:05:7f:2a:c1:41:ae:cd:c2:ab:81:24:0c:24:7a:
                    fb:b3:72:38:17:c9:b5:bf:38:cc:cd:8f:b4:6f:b4:
                    ed:81:12:6f:b7:6f:db:72:0f:ce:1f:d2:88:51:ac:
                    91:9f:7f:57:c1:7d:f3:55:55:a5:ae:37:11:ee:b4:
                    8e:f2:30:94:58:ef:5f:0a:bd:3b:77:7e:ae:21:fa:
                    b8:01:e8:c7:61:0d:46:a7:bb:44:3f:82:2d:eb:32:
                    b4:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:BC:1A:A3:0D:82:5E:55:27:4D:F0:62:F8:74:2E:3B:63:29:02:79
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a646530303a3a2f34302d3430203d3e20323133323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:de00::/40

    Signature Algorithm: sha256WithRSAEncryption
         24:c6:4c:74:20:79:7a:97:8f:85:9e:ba:47:46:b0:5c:ea:b1:
         5a:f3:dd:10:cb:0b:0f:70:93:62:fc:67:f9:04:cf:4f:a7:7f:
         ec:d6:c9:d1:f5:42:5d:79:be:7b:9e:b6:47:23:64:a2:84:1d:
         bd:5b:c1:7d:c7:3d:8a:03:88:0e:41:11:f2:bc:31:72:51:36:
         2b:33:5c:1c:a1:4d:4e:4a:1a:fd:1a:90:ce:4b:68:ce:39:d6:
         6c:98:ef:45:61:7c:79:bc:a6:73:c2:6d:d6:42:7c:9c:4e:39:
         96:77:a6:2e:e3:79:01:30:3c:90:1e:74:2e:0b:1e:4d:c9:31:
         2b:64:bc:c8:40:c9:c0:3c:57:ad:38:04:cb:75:ac:9f:5a:b8:
         3a:8e:39:ab:27:0f:0f:b4:e0:93:bd:b1:88:ad:a0:6e:14:59:
         e3:c9:8f:ed:e1:73:82:9c:4f:59:07:8d:64:0a:40:0b:23:4e:
         3b:0a:8a:1c:f5:4f:7f:71:28:62:00:ff:d5:01:13:19:d3:46:
         6e:34:bf:06:5c:e9:9c:e2:1f:e6:50:73:67:cb:1b:88:9d:4e:
         08:76:9f:ad:03:ec:9b:6a:aa:67:91:d6:56:95:ce:36:59:1d:
         59:90:f0:36:a1:cf:7e:7d:3d:b7:b3:65:59:3c:9e:c2:35:7d:
         88:26:ee:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 00:11:52 2024 by rpki-client on console-fra.rpki-client.org