Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/323630323a3233343a3a2f33322d3438203d3e2037373139.roa
File:                     323630323a3233343a3a2f33322d3438203d3e2037373139.roa (raw, json)
Hash identifier:          9wPQ3RN1C6RtH8Jc6TvVQhxALE6tlnpSkUu99DJrpWs=
Subject key identifier:   EE:F9:8C:02:AC:91:22:15:5D:9E:54:34:32:A5:84:0A:15:6B:45:71
Certificate issuer:       /CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
Certificate serial:       21186A8BF0E8E896033F964DD293CF5CF21606DF
Authority key identifier: DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28
Authority info access:    rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/323630323a3233343a3a2f33322d3438203d3e2037373139.roa
Signing time:             Thu 20 Jun 2024 05:23:07 +0000
ROA not before:           Thu 20 Jun 2024 05:18:07 +0000
ROA not after:            Thu 19 Jun 2025 05:23:07 +0000
asID:                     7719
IP address blocks:        2602:234::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.mft
                          rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
                          rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl
                          rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jul 2024 08:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:18:6a:8b:f0:e8:e8:96:03:3f:96:4d:d2:93:cf:5c:f2:16:06:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
        Validity
            Not Before: Jun 20 05:18:07 2024 GMT
            Not After : Jun 19 05:23:07 2025 GMT
        Subject: CN=EEF98C02AC9122155D9E543432A5840A156B4571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:57:86:d0:d4:d7:cc:9d:18:c8:4b:e3:47:57:
                    e2:42:72:9f:d9:9c:31:4a:8a:23:b4:1d:70:66:69:
                    c8:f2:c7:e0:fb:0d:09:f7:73:fc:3e:94:05:16:a8:
                    39:c8:7a:87:6c:a3:f8:7e:41:da:a6:28:86:33:02:
                    29:f7:f2:34:75:0a:26:53:75:1b:fc:bd:49:89:dd:
                    34:ec:e2:5f:0b:24:70:e9:50:0c:e6:05:4c:b4:e4:
                    82:12:20:90:cb:ee:40:07:6d:34:f8:3d:9d:40:d1:
                    22:c2:ed:9c:30:83:4e:fc:78:b4:66:43:3a:bb:84:
                    b7:be:7f:b2:75:10:03:07:50:ff:80:ab:95:63:0a:
                    b5:a3:cb:e2:41:81:79:d8:ad:02:d2:e7:69:c1:be:
                    d0:90:4e:03:d5:a7:9d:b0:77:6d:d7:c9:e2:4c:3e:
                    53:65:31:f6:0d:d6:b0:61:cc:d4:e5:72:01:a0:3f:
                    93:0a:f1:dc:bb:e4:ad:92:f9:00:56:54:08:47:d3:
                    5f:bd:63:ef:87:d4:db:df:92:24:0e:8f:ae:26:cb:
                    55:cb:2a:24:68:16:2d:9c:67:0f:ad:21:2e:b6:0d:
                    e8:24:24:d0:44:75:26:6d:e4:7b:f6:8e:59:ef:9a:
                    91:d3:3f:11:bb:d0:9c:9d:91:d0:c7:06:27:8b:a5:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F9:8C:02:AC:91:22:15:5D:9E:54:34:32:A5:84:0A:15:6B:45:71
            X509v3 Authority Key Identifier:
                keyid:DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/323630323a3233343a3a2f33322d3438203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:234::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:42:5d:5f:37:f2:a0:d3:ab:66:d6:17:c7:85:66:2f:57:0d:
         ab:f6:9d:da:23:8d:10:76:94:5c:b3:da:f3:ca:80:a0:28:03:
         28:7c:68:60:a8:88:79:6a:b8:8e:41:cf:12:31:bb:15:4d:82:
         dc:ab:ac:27:9b:b1:15:ed:07:31:83:b6:20:5e:1f:38:28:85:
         70:2f:79:e6:22:2c:27:14:ff:df:6a:a3:df:8a:08:f7:15:20:
         8f:6c:08:a7:ca:49:c1:2e:13:9c:4d:54:cb:5e:05:60:14:74:
         ce:7b:fb:62:34:b1:59:2b:c1:f7:45:74:68:2f:6a:af:f5:3a:
         4c:9b:ba:2f:89:50:f9:e3:16:df:68:72:cd:c0:03:1f:c1:a0:
         50:a7:cb:38:ac:ea:6b:2b:20:64:75:39:c4:a6:75:02:d5:14:
         3e:07:94:4e:8e:7f:d9:9a:06:4d:67:d0:e7:88:d8:1c:f5:cd:
         95:97:e9:a0:e8:97:d0:85:05:4c:6b:80:60:d5:2d:c0:18:be:
         7c:71:68:06:ca:65:1a:f7:3e:7e:6f:4d:02:7a:11:8a:3e:56:
         50:83:18:8a:44:02:25:4a:74:09:17:d6:5f:61:e1:0a:1a:d2:
         ee:fc:75:5b:aa:d5:f2:46:0f:1e:d8:3a:e3:0c:55:4f:bf:5d:
         d5:27:8e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 15:30:37 2024 by rpki-client on console-fra.rpki-client.org