Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383430303a3a2f34302d3438203d3e20323135383535.roa
File:                     326131333a633030373a383430303a3a2f34302d3438203d3e20323135383535.roa (raw, json)
Hash identifier:          9+ooA1dY8WM+/r9TKK7xMUsAOWHXxIp0gZ0FDydj96Y=
Subject key identifier:   FC:F7:0E:3C:5A:BF:6A:46:32:4A:91:4B:EF:B0:BC:59:1C:8E:20:C6
Certificate issuer:       /CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
Certificate serial:       5178E9B36B7C8AF6D9582E89534443F2B332ED5B
Authority key identifier: 8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62
Authority info access:    rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383430303a3a2f34302d3438203d3e20323135383535.roa
Signing time:             Thu 20 Jun 2024 05:23:45 +0000
ROA not before:           Thu 20 Jun 2024 05:18:45 +0000
ROA not after:            Thu 19 Jun 2025 05:23:45 +0000
asID:                     215855
IP address blocks:        2a13:c007:8400::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.mft
                          rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.crl
                          rsync://dev.tw/rpki/August/1/442C354A483A8B70D839D3F798CD870684F02186.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RCw1Skg6i3DYOdP3mM2HBoTwIYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Jul 2024 03:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:78:e9:b3:6b:7c:8a:f6:d9:58:2e:89:53:44:43:f2:b3:32:ed:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62
        Validity
            Not Before: Jun 20 05:18:45 2024 GMT
            Not After : Jun 19 05:23:45 2025 GMT
        Subject: CN=FCF70E3C5ABF6A46324A914BEFB0BC591C8E20C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0e:a0:da:25:dc:c7:3e:78:c2:87:d8:6b:d4:
                    23:58:2d:49:25:0d:79:be:12:2e:23:d4:9c:14:58:
                    00:86:ec:48:76:03:0c:67:a4:2c:98:ca:cd:05:8c:
                    38:1a:a3:65:49:f2:8f:5a:7f:3d:18:67:8c:ed:8d:
                    5e:58:b6:e6:d6:5d:7b:ca:fe:73:af:35:cb:96:d3:
                    5f:3b:06:01:f0:f6:db:bb:d5:48:e2:3f:d4:5f:30:
                    c1:23:36:41:95:1a:1c:41:44:90:b0:80:63:da:cf:
                    75:a9:56:e7:cf:e7:00:85:46:3e:c3:ef:22:1c:6c:
                    82:f8:0c:af:ac:9e:1b:34:88:c0:e4:71:bb:9e:b6:
                    2c:d1:76:25:8d:46:01:73:13:da:96:ea:f9:c1:9c:
                    8a:a2:2c:5f:a6:84:cd:96:36:3e:a8:3b:34:d5:36:
                    52:53:6f:cb:73:e0:49:6e:c4:e9:21:1d:68:5a:11:
                    6e:4a:64:4b:5b:25:8f:80:23:a6:8a:9e:b5:b3:9f:
                    b4:28:4e:b9:b8:0d:20:67:32:9a:f2:0b:79:6b:1b:
                    1d:62:2f:14:3e:f9:b8:a4:2a:6e:2b:18:7e:d1:df:
                    b7:78:51:65:7d:c5:e1:44:86:2c:67:2e:ce:cf:b1:
                    ce:8c:e9:cb:3a:f8:fe:53:cb:c1:b8:aa:ee:3c:38:
                    b5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F7:0E:3C:5A:BF:6A:46:32:4A:91:4B:EF:B0:BC:59:1C:8E:20:C6
            X509v3 Authority Key Identifier:
                keyid:8C:0C:C7:AD:10:71:2F:DA:2D:DD:C3:CC:94:55:08:74:B8:A5:6B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/1/8C0CC7AD10712FDA2DDDC3CC94550874B8A56B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/5/326131333a633030373a383430303a3a2f34302d3438203d3e20323135383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:c007:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:d8:73:b3:06:ec:60:a1:63:39:03:39:0b:54:ef:56:72:dc:
         6a:e6:dd:ea:d7:94:27:9f:1b:0c:7c:fb:54:f4:2f:cf:aa:0d:
         4c:3c:53:38:19:34:1e:bb:e4:8d:a1:77:82:ec:8f:f8:22:f9:
         88:5d:33:82:87:77:98:9d:33:4a:86:cf:95:fc:50:2d:54:af:
         03:a2:ce:2f:e5:52:a3:11:8b:1e:44:cf:47:33:2a:34:08:4a:
         29:de:be:c2:c0:2b:e8:0e:66:60:9d:23:e8:da:9f:29:6d:80:
         6c:52:cd:c0:d9:91:bc:83:14:d4:fb:f5:56:59:94:2d:1a:6f:
         a0:17:ff:04:5f:36:c3:38:e3:32:81:62:f6:19:52:d3:fd:a9:
         d6:d7:8b:01:4b:d0:3b:7a:30:a9:6e:6d:5a:26:b7:17:33:cc:
         b9:e4:28:73:fa:40:5d:1e:5a:a8:a7:00:25:1a:ab:ba:be:17:
         c9:43:e0:91:5d:49:f1:08:4b:27:86:9c:36:94:14:00:1c:42:
         96:11:42:7b:55:47:96:71:e7:9e:d3:a5:fe:65:1f:eb:01:07:
         6b:da:c2:32:fc:2c:6a:af:91:23:d6:d3:57:20:b1:54:46:cf:
         27:9b:70:bf:71:11:8b:7e:29:88:99:4e:55:95:92:c4:90:a4:
         91:ca:4f:09
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUUXjps2t8ivbZWC6JU0RD8rMy7VswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEMwQ0M3QUQxMDcxMkZEQTJERERDM0NDOTQ1NTA4NzRC
OEE1NkI2MjAeFw0yNDA2MjAwNTE4NDVaFw0yNTA2MTkwNTIzNDVaMDMxMTAvBgNV
BAMTKEZDRjcwRTNDNUFCRjZBNDYzMjRBOTE0QkVGQjBCQzU5MUM4RTIwQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDqDaJdzHPnjCh9hr1CNYLUkl
DXm+Ei4j1JwUWACG7Eh2AwxnpCyYys0FjDgao2VJ8o9afz0YZ4ztjV5YtubWXXvK
/nOvNcuW0187BgHw9tu71UjiP9RfMMEjNkGVGhxBRJCwgGPaz3WpVufP5wCFRj7D
7yIcbIL4DK+snhs0iMDkcbuetizRdiWNRgFzE9qW6vnBnIqiLF+mhM2WNj6oOzTV
NlJTb8tz4EluxOkhHWhaEW5KZEtbJY+AI6aKnrWzn7QoTrm4DSBnMpryC3lrGx1i
LxQ++bikKm4rGH7R37d4UWV9xeFEhixnLs7Psc6M6cs6+P5Ty8G4qu48OLVTAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQU/PcOPFq/akYySpFL77C8WRyOIMYwHwYDVR0j
BBgwFoAUjAzHrRBxL9ot3cPMlFUIdLila2IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvNS84QzBDQzdBRDEw
NzEyRkRBMkREREMzQ0M5NDU1MDg3NEI4QTU2QjYyLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzEvOEMw
Q0M3QUQxMDcxMkZEQTJERERDM0NDOTQ1NTA4NzRCOEE1NkI2Mi5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC81LzMyNjEzMTMzM2E2MzMwMzAzNzNhMzgzNDMwMzAzYTNhMmYzNDMwMmQzNDM4
MjAzZDNlMjAzMjMxMzUzODM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqE8AHhDANBgkqhkiG9w0B
AQsFAAOCAQEAi9hzswbsYKFjOQM5C1TvVnLcaubd6teUJ58bDHz7VPQvz6oNTDxT
OBk0HrvkjaF3guyP+CL5iF0zgod3mJ0zSobPlfxQLVSvA6LOL+VSoxGLHkTPRzMq
NAhKKd6+wsAr6A5mYJ0j6NqfKW2AbFLNwNmRvIMU1Pv1VlmULRpvoBf/BF82wzjj
MoFi9hlS0/2p1teLAUvQO3owqW5tWia3FzPMueQoc/pAXR5aqKcAJRqrur4XyUPg
kV1J8QhLJ4acNpQUABxClhFCe1VHlnHnntOl/mUf6wEHa9rCMvwsaq+RI9bTVyCx
VEbPJ5twv3ERi34piJlOVZWSxJCkkcpPCQ==
-----END CERTIFICATE-----
Generated at Mon Jul 8 13:35:44 2024 by rpki-client on console-ams.rpki-client.org