Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/3138352e3135352e37352e302f32342d3234203d3e20343031313131.roa
File:                     3138352e3135352e37352e302f32342d3234203d3e20343031313131.roa (raw, json)
Hash identifier:          z9xnI1RmC8Q0xmTI/eEnHE/dq3VmKZHY3c1RJelBjjw=
Subject key identifier:   32:94:2E:45:FF:7C:B2:97:75:63:B2:70:88:D6:6C:4F:93:C7:3B:2A
Certificate issuer:       /CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
Certificate serial:       5C2738E624951BE16DF1BB059FD1E4F1B2263773
Authority key identifier: 8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62
Authority info access:    rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/3138352e3135352e37352e302f32342d3234203d3e20343031313131.roa
Signing time:             Tue 24 Sep 2024 01:20:44 +0000
ROA not before:           Tue 24 Sep 2024 01:15:44 +0000
ROA not after:            Tue 23 Sep 2025 01:20:44 +0000
asID:                     401111
IP address blocks:        185.155.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.mft
                          rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Oct 2024 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:27:38:e6:24:95:1b:e1:6d:f1:bb:05:9f:d1:e4:f1:b2:26:37:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
        Validity
            Not Before: Sep 24 01:15:44 2024 GMT
            Not After : Sep 23 01:20:44 2025 GMT
        Subject: CN=32942E45FF7CB2977563B27088D66C4F93C73B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:51:3a:56:7f:1a:bd:da:93:fa:e0:0e:1a:c9:
                    a2:d2:05:60:67:c0:f5:ae:34:df:dd:fa:3a:00:f6:
                    46:a1:21:28:0c:7a:b9:6d:d4:a4:79:e3:05:59:75:
                    48:c9:ea:e1:ce:d6:d3:b1:64:2c:79:e7:93:39:cd:
                    fb:92:b5:58:f5:b7:6d:12:b1:6e:19:26:ed:3d:d6:
                    60:25:e1:a8:3e:c5:50:ed:4b:07:a7:39:3f:11:c4:
                    72:bc:f2:b0:8f:76:e1:85:b1:76:d7:dc:5d:2f:db:
                    3e:a1:5f:8e:3f:c6:b3:2c:24:6f:83:36:c9:84:be:
                    27:0f:87:ce:94:cc:aa:6e:fc:75:dd:1f:39:76:5c:
                    a4:93:e3:85:a3:8a:bb:ea:05:0d:03:df:fd:d5:c9:
                    1f:21:0a:11:6b:14:b9:dc:d3:58:af:00:aa:37:87:
                    ad:05:ea:45:10:88:ba:96:56:42:46:c3:93:45:2a:
                    5d:0d:7c:59:3d:04:49:ef:4d:0e:4a:df:5b:c8:5e:
                    72:ad:3b:6d:14:21:94:b9:72:d8:f1:0c:4a:9a:76:
                    d2:06:13:45:cf:f8:fa:c8:81:52:3f:ec:27:7f:76:
                    3c:3f:7f:f8:43:0e:be:61:fb:40:db:95:66:38:08:
                    43:f4:63:5b:b3:e9:09:45:19:2a:f8:b7:70:f8:38:
                    50:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:94:2E:45:FF:7C:B2:97:75:63:B2:70:88:D6:6C:4F:93:C7:3B:2A
            X509v3 Authority Key Identifier:
                keyid:8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/3138352e3135352e37352e302f32342d3234203d3e20343031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.155.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:4e:21:6b:a5:63:84:23:7b:4f:e0:60:51:20:ba:45:d0:ab:
         b1:52:22:24:32:e9:9e:2f:f5:f7:c8:54:fa:b9:3d:20:b3:dd:
         d3:74:0f:a3:ab:81:a4:00:16:d8:df:4d:7a:ee:e2:fe:f8:3a:
         e8:84:71:9f:1e:69:ad:36:63:4a:9a:4b:19:f9:44:ab:84:60:
         bf:72:b2:87:74:86:65:06:d9:27:0c:fa:4c:45:46:7c:ad:87:
         bc:57:9c:1e:15:9a:eb:04:5d:75:02:e3:78:bc:30:0c:74:32:
         1a:cc:fc:dc:87:40:99:cf:70:61:f8:a9:51:4a:e3:dc:2a:76:
         ed:6b:5a:4a:73:7e:c5:e7:ae:cb:ee:67:02:ea:1a:07:81:55:
         f2:07:85:a2:39:5d:e6:48:14:de:0b:ef:d7:07:58:a6:5b:cc:
         7b:2e:0b:09:d9:e9:1c:12:cb:93:97:d9:72:ac:b1:69:df:98:
         9e:db:1e:32:af:6c:3f:55:94:a1:07:3a:cd:7b:c5:b0:c4:98:
         7b:00:fe:1a:28:d5:ee:b6:69:a9:24:57:9f:ce:9b:fe:6c:12:
         ec:1a:e7:dc:ea:49:41:f2:27:f2:32:20:07:55:f8:bd:28:35:
         8c:1a:7b:15:3b:0e:a2:48:40:ff:46:53:9c:93:e2:28:50:c2:
         14:6a:af:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 05:14:49 2024 by rpki-client on console-ams.rpki-client.org