Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383062303a3a2f34342d3434203d3e20313939313833.roa
File:                     326131333a633030373a383062303a3a2f34342d3434203d3e20313939313833.roa (raw, json)
Hash identifier:          UMGmEYPqZdzQhzF0dC73toDSw1G6UN/8KGpq1duiW48=
Subject key identifier:   E3:66:57:F8:55:3A:74:8B:68:C5:16:5B:08:55:E5:D6:E9:A9:82:0F
Certificate issuer:       /CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
Certificate serial:       3136B68818139FC9C01C969A7F07862DCE23925A
Authority key identifier: 8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62
Authority info access:    rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383062303a3a2f34342d3434203d3e20313939313833.roa
Signing time:             Thu 20 Jun 2024 05:23:48 +0000
ROA not before:           Thu 20 Jun 2024 05:18:48 +0000
ROA not after:            Thu 19 Jun 2025 05:23:48 +0000
asID:                     199183
IP address blocks:        2a13:c007:80b0::/44 maxlen: 44

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.mft
                          rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jul 2024 03:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:36:b6:88:18:13:9f:c9:c0:1c:96:9a:7f:07:86:2d:ce:23:92:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
        Validity
            Not Before: Jun 20 05:18:48 2024 GMT
            Not After : Jun 19 05:23:48 2025 GMT
        Subject: CN=E36657F8553A748B68C5165B0855E5D6E9A9820F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e0:5e:bf:0f:ee:1d:f7:23:12:ee:ac:0e:73:
                    42:d1:b3:db:7c:7f:55:8b:1f:18:59:b5:cb:58:9f:
                    ff:97:51:ca:a1:e7:99:b9:35:4b:69:7e:3f:48:4a:
                    88:8c:fe:7a:e6:7b:7c:55:79:e8:4a:bd:26:a1:43:
                    df:4d:ed:d3:67:8c:e6:8a:19:7f:cf:8c:fe:54:04:
                    83:fe:cf:73:4b:8a:b2:99:18:65:29:22:96:88:9f:
                    25:70:82:64:2b:4a:18:66:63:2c:93:ba:0d:d6:4b:
                    c6:ed:ff:ea:2f:a7:0e:68:b5:b0:dc:fb:79:a1:00:
                    92:3d:de:01:c9:8c:05:aa:1c:f1:0c:33:ef:94:09:
                    d1:99:f7:f9:25:d2:f2:3a:72:1d:5c:5e:d6:cb:b5:
                    00:c3:e7:c0:bd:a6:b9:b1:e6:80:45:80:69:c7:30:
                    48:fc:84:5c:c4:46:b9:d1:a4:3c:c8:1f:70:1b:75:
                    e7:62:c7:b6:04:15:bd:32:6a:18:07:7e:79:43:6c:
                    46:fd:32:ad:fc:92:20:e0:04:ae:17:f0:77:36:62:
                    de:21:b8:d6:5a:79:60:d9:22:7d:e8:fa:d8:d8:6d:
                    4d:71:42:c2:c2:04:b9:ac:76:02:c7:eb:2d:df:ef:
                    30:22:2d:ae:42:8c:1d:be:be:19:9f:c5:4e:7a:55:
                    49:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:66:57:F8:55:3A:74:8B:68:C5:16:5B:08:55:E5:D6:E9:A9:82:0F
            X509v3 Authority Key Identifier:
                keyid:8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383062303a3a2f34342d3434203d3e20313939313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:80b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         91:10:a2:37:4f:aa:22:fc:46:8e:e4:3b:05:bb:e7:d6:6c:ac:
         54:78:b8:7d:f6:09:e6:f2:bd:cf:2a:5d:9a:21:bb:46:b8:f1:
         6e:28:e5:e9:95:e4:df:cf:37:61:eb:03:af:f2:81:76:04:0a:
         18:7c:59:59:27:47:cc:2a:1f:ab:ec:4e:c5:9c:5d:db:86:c6:
         f9:cd:f5:7c:d1:70:40:a1:ef:30:6f:e3:67:4a:38:62:5d:28:
         da:34:01:b9:cc:04:e2:70:dd:23:14:3d:3a:69:52:84:9a:c4:
         53:56:de:b6:04:eb:fb:22:0b:4a:0b:53:86:59:63:67:e1:b0:
         ff:f7:e4:3f:4f:ba:ea:f7:76:28:30:a1:b2:36:95:be:e1:4f:
         8b:2b:e6:82:7e:cb:66:78:3e:ec:28:60:c5:78:81:7c:53:40:
         fc:64:0f:b1:26:35:c4:64:ca:3d:89:04:be:87:05:4a:9f:3f:
         16:0a:59:f3:14:0b:4b:2f:f1:f3:8e:25:ac:34:bd:db:2f:7d:
         4b:2b:03:01:bf:24:00:42:44:b1:96:e3:95:af:e6:92:2e:a2:
         e4:c0:d3:5e:fc:35:db:33:44:17:48:ec:4e:31:36:19:f5:cc:
         52:56:a3:cb:7f:a5:c9:b9:df:91:bd:1d:e5:39:be:fd:97:b9:
         61:f2:53:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 13:35:44 2024 by rpki-client on console-ams.rpki-client.org