Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383130303a3a2f34302d3438203d3e20323135323332.roa
File:                     326131333a633030373a383130303a3a2f34302d3438203d3e20323135323332.roa (raw, json)
Hash identifier:          DG0J+12STvuqfrrsKgQEViQrekb3u3wT4rGJENxwEtM=
Subject key identifier:   7E:A3:87:75:F4:9C:F3:0D:5C:25:C2:5E:9A:63:DF:62:29:55:59:63
Certificate issuer:       /CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
Certificate serial:       5DFAD856FD366068021C8987F8863E16EF150C8F
Authority key identifier: 8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62
Authority info access:    rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383130303a3a2f34302d3438203d3e20323135323332.roa
Signing time:             Thu 20 Jun 2024 05:23:43 +0000
ROA not before:           Thu 20 Jun 2024 05:18:43 +0000
ROA not after:            Thu 19 Jun 2025 05:23:43 +0000
asID:                     215232
IP address blocks:        2a13:c007:8100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.mft
                          rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jul 2024 03:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fa:d8:56:fd:36:60:68:02:1c:89:87:f8:86:3e:16:ef:15:0c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
        Validity
            Not Before: Jun 20 05:18:43 2024 GMT
            Not After : Jun 19 05:23:43 2025 GMT
        Subject: CN=7EA38775F49CF30D5C25C25E9A63DF6229555963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:ff:5b:e0:01:c4:96:f1:a6:03:fe:a5:3a:
                    8b:f3:ea:fa:47:15:93:f4:5c:11:76:3f:ec:cb:43:
                    69:7e:a2:cb:52:97:bb:d4:aa:6e:d3:25:51:17:ea:
                    c6:95:78:7c:c1:15:a9:13:0a:f8:a4:e9:cd:09:f1:
                    6d:6e:89:4d:a7:83:f4:cf:2d:4d:ab:07:15:9d:61:
                    8f:cc:55:a2:bc:f0:fd:af:d7:ac:c8:43:b5:2d:8a:
                    6d:7d:4d:61:f6:51:1b:2c:67:33:6c:7e:e1:a6:ab:
                    69:e2:ad:d0:1a:bd:05:c5:a1:35:f4:2e:60:04:e8:
                    88:1a:3d:e5:a1:7e:ea:cc:0b:ce:c4:80:41:35:2d:
                    52:f2:0c:61:a7:dd:64:9d:4d:fd:a9:ac:e4:e6:7b:
                    8e:7b:21:57:83:88:75:09:f1:c0:f8:5e:06:be:de:
                    85:70:8b:e3:c4:8b:3c:07:c5:9b:fa:ad:11:57:86:
                    00:39:81:ca:3e:21:50:83:81:bd:2c:59:b8:7d:67:
                    54:50:30:35:01:61:60:37:a1:45:84:88:cc:43:1e:
                    3f:55:6a:35:43:aa:5f:5e:80:26:72:fd:9b:bd:69:
                    60:e7:b3:99:02:39:e6:d6:da:bc:43:b7:46:fc:39:
                    61:db:94:fc:92:b8:06:96:13:75:79:3c:29:c1:c7:
                    75:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A3:87:75:F4:9C:F3:0D:5C:25:C2:5E:9A:63:DF:62:29:55:59:63
            X509v3 Authority Key Identifier:
                keyid:8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383130303a3a2f34302d3438203d3e20323135323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:90:28:3f:2e:38:7b:9a:73:fd:31:8a:21:b6:c5:4c:cd:a2:
         5e:66:e8:63:af:8c:f7:d3:bf:f6:a2:64:78:a0:85:25:a8:f8:
         ac:87:72:63:93:d7:72:49:90:fa:7b:ab:19:02:f9:6a:36:cd:
         4e:e7:08:8a:8b:8c:88:37:1b:60:df:97:36:59:10:e8:f5:86:
         f2:9d:f5:7e:96:8b:4c:f2:c8:52:b5:f0:d5:f3:33:a1:8f:d6:
         7e:f2:7a:73:d1:c3:76:71:3a:73:a6:b0:b9:10:bc:ad:56:71:
         59:0e:4d:34:07:56:2e:b8:91:0c:e1:4e:cf:e1:3a:36:63:49:
         57:a9:47:4d:e4:fb:22:dd:3d:ca:cd:2e:2a:6a:f6:ff:b6:85:
         2d:4f:4c:e1:81:68:b7:bc:65:3f:4b:37:dd:8b:c4:fb:6a:e3:
         73:f9:4e:0d:3f:b5:a6:cd:f4:41:24:fd:4e:06:9a:94:66:d8:
         2b:92:6b:7d:ff:35:11:3a:41:4f:fc:04:1c:97:79:cc:95:26:
         72:4e:8f:02:fa:bd:d1:77:d1:43:a1:ff:10:99:72:1f:b5:54:
         e5:4f:e6:b2:8e:ca:c4:08:d7:f9:28:3e:ed:a1:8e:09:5c:08:
         c3:46:f1:68:38:9f:63:d9:aa:f9:1a:3c:07:ee:f0:ea:34:b4:
         6d:86:bf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 13:48:21 2024 by rpki-client on console-fra.rpki-client.org