Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383031373a3a2f34382d3438203d3e20313939313736.roa
File:                     326131333a633030373a383031373a3a2f34382d3438203d3e20313939313736.roa (raw, json)
Hash identifier:          y+UOFmvuhkl3nahdVV6RfPCp4Q2/q0bP0GyKC7atvhI=
Subject key identifier:   30:68:E8:73:91:5D:40:81:9C:80:F4:1F:B2:60:8F:85:4E:64:25:49
Certificate issuer:       /CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
Certificate serial:       38A0D037B73EF423F723A5A0DB685F0DCDB24218
Authority key identifier: 8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62
Authority info access:    rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383031373a3a2f34382d3438203d3e20313939313736.roa
Signing time:             Thu 20 Jun 2024 05:23:46 +0000
ROA not before:           Thu 20 Jun 2024 05:18:46 +0000
ROA not after:            Thu 19 Jun 2025 05:23:46 +0000
asID:                     199176
IP address blocks:        2a13:c007:8017::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.mft
                          rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jul 2024 03:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a0:d0:37:b7:3e:f4:23:f7:23:a5:a0:db:68:5f:0d:cd:b2:42:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
        Validity
            Not Before: Jun 20 05:18:46 2024 GMT
            Not After : Jun 19 05:23:46 2025 GMT
        Subject: CN=3068E873915D40819C80F41FB2608F854E642549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:18:98:16:f2:22:d9:aa:4a:12:56:a4:b8:f8:
                    27:4e:09:fa:b5:ef:c1:2e:2c:20:f7:83:31:83:b7:
                    65:5b:cb:0a:b0:97:95:87:f6:a9:ed:4a:b9:11:d8:
                    b1:b3:c2:92:c7:37:3c:a7:18:e2:a5:a0:98:0f:cd:
                    2a:67:72:43:a1:14:19:d1:44:9a:7d:a7:3a:d8:d0:
                    9e:31:4c:6b:2e:0a:2c:36:ae:18:8b:1e:cd:f6:46:
                    ba:b0:88:d4:08:d1:d4:95:42:e5:e6:d4:7c:89:1e:
                    ec:c9:8c:21:b1:0a:c6:04:7d:d7:b3:c1:11:b8:ae:
                    b1:6b:60:c0:a5:89:95:27:e0:27:e4:d7:89:16:ff:
                    5f:89:86:8d:a5:83:ec:b2:bf:c0:98:49:c2:5e:4e:
                    12:ed:7b:45:8f:d6:50:ae:ef:33:41:3c:00:75:f3:
                    fd:95:93:f8:d8:2b:d4:d2:68:ed:bb:c9:54:a1:43:
                    86:cf:31:b3:22:2c:0d:35:75:85:9e:4b:15:fa:db:
                    d4:f4:de:2f:99:ad:6c:b6:b8:6d:9a:20:b2:1a:19:
                    8e:b9:b2:42:bc:df:03:14:35:52:b7:94:19:6a:67:
                    8b:10:c9:f0:d7:57:da:93:16:1a:3e:f5:4d:da:a0:
                    88:0c:9a:e5:e8:1e:c8:fe:9a:7f:99:60:df:37:09:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:68:E8:73:91:5D:40:81:9C:80:F4:1F:B2:60:8F:85:4E:64:25:49
            X509v3 Authority Key Identifier:
                keyid:8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383031373a3a2f34382d3438203d3e20313939313736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8017::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:f7:17:f0:ee:c7:ae:72:ca:02:96:ea:d6:dc:25:41:b7:d9:
         cf:ab:88:bd:d5:2e:16:6f:0d:07:ca:16:67:9d:cc:d7:e9:9b:
         d5:f7:6f:5b:76:42:1d:f9:05:cc:eb:4b:b2:d2:70:70:56:48:
         c7:e2:24:14:b9:56:55:5f:53:03:b4:7b:cb:5b:21:91:5f:8b:
         75:e7:39:78:b7:a3:c1:e3:66:21:7b:9b:dd:26:42:f8:ef:5c:
         3d:88:b2:80:1d:f6:33:4d:bf:a4:81:17:45:9d:fb:37:94:08:
         2a:69:9b:78:9f:21:cd:65:27:3b:e7:2b:c9:7b:c1:24:63:15:
         c4:9f:85:4b:90:7c:0e:8b:90:99:c6:5e:d4:62:c3:60:a1:89:
         a3:e6:df:a0:06:6a:d9:ac:3b:70:a1:7a:a5:f5:7c:fa:df:b4:
         6b:32:6c:49:b2:33:e6:e3:be:69:7e:a1:68:55:29:31:7c:87:
         f7:ef:cc:a6:dd:34:2e:08:24:e4:87:bd:a8:85:18:91:9d:f3:
         d2:0b:82:a1:86:da:07:8e:16:b0:6a:35:6f:30:ba:d6:a7:07:
         a7:a2:6e:f4:9c:82:4f:bc:96:b5:c9:40:51:ef:e8:f2:4c:1c:
         9c:9b:e5:db:79:6a:72:d1:23:c1:1c:4b:a4:e6:7f:ca:90:50:
         d3:e0:e8:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 13:35:44 2024 by rpki-client on console-ams.rpki-client.org