Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/323630323a666139303a3a2f33362d3336203d3e20393435.roa
File:                     323630323a666139303a3a2f33362d3336203d3e20393435.roa (raw, json)
Hash identifier:          YUeW2WEjWut8xz334uCfV8Hf9FNsCZaPhAzOQZSaXBw=
Subject key identifier:   1F:93:B0:ED:3E:32:23:66:1A:C8:94:78:7C:89:28:D0:AE:2D:97:CF
Certificate issuer:       /CN=6BB389B1DCABC9FDD074CABDCD341E32E416F472
Certificate serial:       55E12418EF1ED007FAA59AB238293E1ABA3E41C9
Authority key identifier: 6B:B3:89:B1:DC:AB:C9:FD:D0:74:CA:BD:CD:34:1E:32:E4:16:F4:72
Authority info access:    rsync://dev.tw/rpki/August/8/6BB389B1DCABC9FDD074CABDCD341E32E416F472.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/323630323a666139303a3a2f33362d3336203d3e20393435.roa
Signing time:             Thu 20 Jun 2024 05:23:01 +0000
ROA not before:           Thu 20 Jun 2024 05:18:01 +0000
ROA not after:            Thu 19 Jun 2025 05:23:01 +0000
asID:                     945
IP address blocks:        2602:fa90::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/6BB389B1DCABC9FDD074CABDCD341E32E416F472.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/6BB389B1DCABC9FDD074CABDCD341E32E416F472.mft
                          rsync://dev.tw/rpki/August/8/6BB389B1DCABC9FDD074CABDCD341E32E416F472.cer
                          rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.crl
                          rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jul 2024 09:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e1:24:18:ef:1e:d0:07:fa:a5:9a:b2:38:29:3e:1a:ba:3e:41:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB389B1DCABC9FDD074CABDCD341E32E416F472
        Validity
            Not Before: Jun 20 05:18:01 2024 GMT
            Not After : Jun 19 05:23:01 2025 GMT
        Subject: CN=1F93B0ED3E3223661AC894787C8928D0AE2D97CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0b:ca:52:96:75:bc:5b:20:57:7b:24:2b:97:
                    c3:cf:6b:e7:72:38:08:29:63:8f:0e:1d:5f:18:f2:
                    9f:a5:bc:f5:82:72:c6:f4:52:8d:44:a8:22:61:e3:
                    37:a2:74:27:55:c5:e2:83:8e:06:06:df:c4:49:5f:
                    90:f5:86:90:9d:63:04:3b:f0:b5:c0:d3:06:52:f3:
                    27:47:37:7f:b4:82:13:ab:d6:10:fe:35:ee:f3:8c:
                    45:04:cb:3f:aa:45:bc:2f:f3:af:72:0a:4f:77:28:
                    78:85:ee:4f:17:d8:64:5e:6d:70:d4:62:89:3b:c6:
                    fa:d6:df:bc:ef:2e:b4:67:5a:8c:77:a9:e1:0b:df:
                    2a:f9:e3:30:3f:9f:a7:d7:e0:6c:5a:70:30:a2:1f:
                    7a:a2:63:61:fa:13:a7:d7:31:be:1e:27:92:a5:1f:
                    5c:08:13:72:92:74:cd:d4:a7:35:4b:7b:41:00:28:
                    79:a7:f3:9f:20:97:08:99:a0:23:f4:ff:f0:df:dd:
                    1a:67:7d:05:b3:9f:08:b4:96:97:a7:b2:0a:cb:af:
                    0f:4e:ce:eb:8b:2f:0b:a2:f0:d3:87:ed:8c:21:20:
                    50:a3:d3:b2:47:fa:29:04:31:ff:12:13:6c:ef:17:
                    0d:d9:d3:91:58:5b:bd:d6:57:cf:15:26:c0:c3:10:
                    2f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:93:B0:ED:3E:32:23:66:1A:C8:94:78:7C:89:28:D0:AE:2D:97:CF
            X509v3 Authority Key Identifier:
                keyid:6B:B3:89:B1:DC:AB:C9:FD:D0:74:CA:BD:CD:34:1E:32:E4:16:F4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/6BB389B1DCABC9FDD074CABDCD341E32E416F472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/8/6BB389B1DCABC9FDD074CABDCD341E32E416F472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/323630323a666139303a3a2f33362d3336203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa90::/36

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:8a:42:c2:08:47:45:f0:18:fb:33:69:87:22:f7:99:17:
         60:64:59:b0:0a:23:d6:43:5f:01:da:a1:82:f6:59:79:8c:ce:
         0e:2a:d9:03:60:5a:2d:02:45:51:fe:e2:90:7a:5e:9d:9b:04:
         38:e0:14:5a:a3:0b:25:8d:03:35:d3:9c:af:b3:20:2a:45:ed:
         32:9b:39:0e:6a:41:98:ce:3e:3b:cd:df:9d:4b:e6:e4:d3:66:
         13:34:5e:87:55:c0:a4:18:08:5d:d2:30:14:14:5c:4c:f2:31:
         fb:e9:86:3c:21:dd:f7:d0:30:55:1a:94:f6:0d:10:3f:80:a8:
         15:88:39:6a:6b:b2:75:1e:f9:2e:af:af:5e:46:3d:6a:9b:31:
         6c:92:5c:73:38:e7:e8:b6:a4:d4:d6:8a:20:cc:2a:4b:0a:5a:
         b6:4e:bd:a1:41:50:b5:7c:c1:06:7b:a4:09:01:f0:07:89:15:
         f8:23:59:76:5b:15:58:dc:5e:be:a9:f9:74:65:3b:fb:8b:57:
         25:8f:9e:89:7f:74:9d:b1:13:a4:c4:a8:ce:b1:68:52:7b:13:
         a0:f2:cc:98:78:ac:32:d0:8a:44:d7:67:b2:51:9c:7b:ee:42:
         04:a8:50:cc:63:99:e1:28:9f:27:fc:5e:db:9b:43:1a:41:22:
         4c:5e:2c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 7 21:08:11 2024 by rpki-client on console-ams.rpki-client.org