Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a663030303a3a2f34302d3438203d3e20323031323137.roa
File:                     326131323a646434373a663030303a3a2f34302d3438203d3e20323031323137.roa (raw, json)
Hash identifier:          HmCl0qzwNUg2RKgTJ4tgpgewRkarWJLbHt/209jkzpw=
Subject key identifier:   E7:6B:9B:E6:4C:4F:C8:8B:86:D8:BC:3D:0F:2E:43:9E:0D:AA:CD:D9
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       3C27855D2B528BF7FE28CA3F67956427163D0E3C
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a663030303a3a2f34302d3438203d3e20323031323137.roa
Signing time:             Thu 20 Jun 2024 05:23:32 +0000
ROA not before:           Thu 20 Jun 2024 05:18:32 +0000
ROA not after:            Thu 19 Jun 2025 05:23:32 +0000
asID:                     201217
IP address blocks:        2a12:dd47:f000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 03 Jul 2024 15:20:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:27:85:5d:2b:52:8b:f7:fe:28:ca:3f:67:95:64:27:16:3d:0e:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:32 2024 GMT
            Not After : Jun 19 05:23:32 2025 GMT
        Subject: CN=E76B9BE64C4FC88B86D8BC3D0F2E439E0DAACDD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ce:97:23:2e:2a:59:1b:5f:fc:15:95:e3:5c:
                    e9:93:81:c4:7d:38:41:8a:69:f3:67:4c:ac:25:73:
                    40:ae:33:08:7c:f4:83:1e:8c:53:62:1b:46:6e:28:
                    ed:23:12:d4:ff:4e:36:ef:c4:d3:a8:4d:aa:68:fb:
                    9e:ec:cf:d0:40:e8:a8:ac:e9:24:27:15:22:f0:3c:
                    53:7f:ec:19:30:f0:ca:b1:38:1c:be:7a:b6:7c:2f:
                    6c:e7:7a:16:bc:92:04:91:80:13:6e:50:51:b6:f2:
                    43:cc:77:00:c6:6e:36:c1:77:85:cb:14:ee:1a:b0:
                    d9:db:20:78:ad:a8:94:99:be:d2:f1:a6:6f:cf:6c:
                    26:4b:73:28:31:ee:bd:46:0f:77:e9:b8:8f:fd:11:
                    a1:b2:57:20:78:1f:fb:88:92:e1:0f:de:7e:52:60:
                    85:40:79:d9:d9:f3:4b:e0:bc:9f:b0:ed:0f:c0:0f:
                    d0:1f:3a:65:7d:cc:72:78:58:e5:a3:dd:5c:00:77:
                    d5:f3:51:ec:04:a0:20:66:4e:cc:a1:32:89:7c:b3:
                    18:0c:93:89:de:f0:5f:f5:b4:e1:03:e8:ea:3a:b1:
                    8e:18:11:f6:b4:e6:51:fc:56:a6:ea:84:0b:14:97:
                    71:8f:8e:7b:41:42:49:14:12:35:be:09:54:5d:c9:
                    4e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:6B:9B:E6:4C:4F:C8:8B:86:D8:BC:3D:0F:2E:43:9E:0D:AA:CD:D9
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a663030303a3a2f34302d3438203d3e20323031323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:f000::/40

    Signature Algorithm: sha256WithRSAEncryption
         61:3f:75:c7:21:1e:de:e4:26:6e:ae:d6:ed:da:bb:ab:96:3f:
         5b:4b:66:10:5c:d6:ee:f1:85:13:ba:6e:50:bb:92:c4:bb:f9:
         24:e0:c2:3b:13:a0:29:1c:d1:9b:02:4b:0b:6e:af:98:39:6b:
         e4:57:ff:4d:e7:a8:45:f9:d7:e1:f2:b8:5f:f9:11:ae:be:9f:
         48:3f:1f:04:55:4a:af:e9:1c:1e:c4:02:74:ee:a3:98:b0:01:
         17:93:eb:d6:88:5b:f3:af:15:c1:68:0d:f2:00:c8:5a:05:f7:
         48:ce:9d:b7:cb:68:d8:34:04:e4:ec:0e:78:ec:31:4e:4f:96:
         98:ed:55:4d:7c:1d:e2:8a:23:3c:82:c9:90:81:37:51:1f:97:
         94:cb:d1:78:07:93:da:e0:7a:f7:a4:38:46:f9:dd:f3:be:0f:
         0d:9b:9e:79:d6:a8:e5:ba:33:5a:70:1d:6c:7b:49:7e:8a:2c:
         ed:46:68:13:b8:9d:ea:2b:53:fb:07:28:b6:a8:49:d8:c4:bb:
         54:0f:52:60:eb:d0:16:85:c4:10:33:0f:07:f5:78:c7:32:3a:
         96:dc:41:dc:66:f0:a4:a1:fb:fb:39:ff:c2:c7:ca:85:8a:14:
         61:3d:62:f5:2f:dc:15:d5:7c:07:c3:75:08:af:e5:b5:28:d8:
         73:23:45:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 00:11:52 2024 by rpki-client on console-fra.rpki-client.org