Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/AS945/2/323630323a666332333a3230303a3a2f34302d3430203d3e20323035343332.roa
File:                     323630323a666332333a3230303a3a2f34302d3430203d3e20323035343332.roa (raw, json)
Hash identifier:          F81FrPw0rYQmp55Ub4mYH/tCqVt2WZOoQGIJPCDe70k=
Subject key identifier:   AA:58:99:89:9C:F9:30:4C:F6:94:D6:92:BC:05:F7:F8:A1:F0:21:E3
Certificate issuer:       /CN=E06465DE1AB39B909A36BC5B67FA379790286C91
Certificate serial:       6A572A9C6C10A14A78888CAAAABF61B4EE799B71
Authority key identifier: E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91
Authority info access:    rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
Subject info access:      rsync://rpki.co/repo/AS945/2/323630323a666332333a3230303a3a2f34302d3430203d3e20323035343332.roa
Signing time:             Mon 11 Mar 2024 04:13:48 +0000
ROA not before:           Mon 11 Mar 2024 04:08:48 +0000
ROA not after:            Mon 10 Mar 2025 04:13:48 +0000
asID:                     205432
IP address blocks:        2602:fc23:200::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl
                          rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.mft
                          rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.crl
                          rsync://dev.tw/rpki/August/7/2B21F7C76C5921761FA8EF5B12172C8E4B45B6DA.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0f86ec1505c5066b525e09105c59426d17ad5bd54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 02 May 2024 00:25:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:57:2a:9c:6c:10:a1:4a:78:88:8c:aa:aa:bf:61:b4:ee:79:9b:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E06465DE1AB39B909A36BC5B67FA379790286C91
        Validity
            Not Before: Mar 11 04:08:48 2024 GMT
            Not After : Mar 10 04:13:48 2025 GMT
        Subject: CN=AA5899899CF9304CF694D692BC05F7F8A1F021E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:38:3a:43:ff:0f:08:d7:53:6d:9e:63:00:d7:
                    9f:14:20:d9:16:40:68:ba:7a:25:cb:db:ce:cb:75:
                    27:9c:12:2b:06:35:ad:39:08:f6:7b:d8:e6:3d:df:
                    8e:a7:eb:05:ae:fc:06:fd:85:cc:63:92:32:ea:28:
                    42:7d:c2:cd:75:76:ea:1f:a7:a2:b9:92:1c:58:b3:
                    49:4b:aa:d5:31:4d:1b:31:c2:c1:85:b1:7e:1b:6a:
                    50:3b:88:4e:c4:9f:44:4b:19:f3:02:df:28:9e:88:
                    9d:8c:62:ec:fd:18:58:cb:3a:81:54:53:3d:ea:17:
                    33:c7:f7:65:e1:26:2f:a0:7b:c2:e8:30:7f:95:dd:
                    e8:78:10:d1:bd:7d:3a:02:17:ee:89:14:c0:d8:59:
                    c0:93:88:0f:72:0a:0d:49:ee:19:0a:96:fa:0c:b2:
                    48:c0:6c:2e:99:77:ab:df:24:a3:18:8c:22:ec:8f:
                    cf:86:d8:6f:08:7f:a4:b1:e4:96:7d:32:d6:69:44:
                    59:b7:54:c0:db:39:bd:4b:4b:9a:53:d5:ac:6f:54:
                    77:2a:5c:9b:c4:a1:bf:92:49:61:f4:ac:9a:40:33:
                    3d:50:08:1c:c7:dc:5b:7d:ed:13:b1:ef:64:b1:68:
                    9e:85:33:6c:33:20:f8:dd:3b:ca:ef:8b:28:bf:41:
                    48:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:58:99:89:9C:F9:30:4C:F6:94:D6:92:BC:05:F7:F8:A1:F0:21:E3
            X509v3 Authority Key Identifier:
                keyid:E0:64:65:DE:1A:B3:9B:90:9A:36:BC:5B:67:FA:37:97:90:28:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/AS945/2/E06465DE1AB39B909A36BC5B67FA379790286C91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/7/E06465DE1AB39B909A36BC5B67FA379790286C91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/AS945/2/323630323a666332333a3230303a3a2f34302d3430203d3e20323035343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fc23:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         59:4d:51:16:96:fa:88:c4:b1:50:b8:e9:a1:e3:00:65:b6:9e:
         12:4a:ad:af:e9:51:71:c9:a2:85:7b:e9:5f:ee:8f:63:10:69:
         89:c2:f9:89:4e:75:77:e9:fa:7d:cb:6b:22:44:4f:89:36:de:
         80:7b:2d:aa:45:b9:01:0e:80:4b:d8:a0:7d:8f:05:9c:7d:9f:
         96:32:88:4d:45:21:e1:23:b6:c8:49:b1:d2:63:50:57:14:c0:
         bb:83:9f:ef:a7:6c:3e:91:ea:72:6e:b0:12:3f:95:84:15:10:
         b7:29:43:73:bb:84:e6:76:b4:8b:89:ac:19:26:ee:eb:8e:c1:
         31:a8:71:45:7f:07:9d:6d:fd:c8:d2:5b:96:77:79:69:8b:f3:
         02:67:78:e1:71:e0:66:e5:57:ba:50:83:b0:64:dd:ac:3c:1c:
         03:d3:1a:85:b2:e7:c3:07:95:e8:60:90:7a:da:fd:0f:ba:37:
         13:1e:b0:7e:c4:e2:d3:48:93:5a:94:79:db:8c:30:1d:11:ad:
         04:88:97:c6:97:d0:12:16:55:1e:04:16:bf:fb:d1:6f:a6:50:
         f5:ee:67:38:2c:58:f1:17:f8:50:3c:85:59:b9:6e:35:9e:8d:
         32:c7:6d:a7:36:0f:0c:74:7d:0a:e3:53:12:60:d4:37:6a:bc:
         5a:24:62:e2
-----BEGIN CERTIFICATE-----
MIIExzCCA6+gAwIBAgIUalcqnGwQoUp4iIyqqr9htO55m3EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA2NDY1REUxQUIzOUI5MDlBMzZCQzVCNjdGQTM3OTc5
MDI4NkM5MTAeFw0yNDAzMTEwNDA4NDhaFw0yNTAzMTAwNDEzNDhaMDMxMTAvBgNV
BAMTKEFBNTg5OTg5OUNGOTMwNENGNjk0RDY5MkJDMDVGN0Y4QTFGMDIxRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ODpD/w8I11NtnmMA158UINkW
QGi6eiXL287LdSecEisGNa05CPZ72OY9346n6wWu/Ab9hcxjkjLqKEJ9ws11duof
p6K5khxYs0lLqtUxTRsxwsGFsX4balA7iE7En0RLGfMC3yieiJ2MYuz9GFjLOoFU
Uz3qFzPH92XhJi+ge8LoMH+V3eh4ENG9fToCF+6JFMDYWcCTiA9yCg1J7hkKlvoM
skjAbC6Zd6vfJKMYjCLsj8+G2G8If6Sx5JZ9MtZpRFm3VMDbOb1LS5pT1axvVHcq
XJvEob+SSWH0rJpAMz1QCBzH3Ft97ROx72SxaJ6FM2wzIPjdO8rviyi/QUi9AgMB
AAGjggHRMIIBzTAdBgNVHQ4EFgQUqliZiZz5MEz2lNaSvAX3+KHwIeMwHwYDVR0j
BBgwFoAU4GRl3hqzm5CaNrxbZ/o3l5AobJEwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0FTOTQ1LzIvRTA2NDY1
REUxQUIzOUI5MDlBMzZCQzVCNjdGQTM3OTc5MDI4NkM5MS5jcmwwZQYIKwYBBQUH
AQEEWTBXMFUGCCsGAQUFBzAChklyc3luYzovL2Rldi50dy9ycGtpL0F1Z3VzdC83
L0UwNjQ2NURFMUFCMzlCOTA5QTM2QkM1QjY3RkEzNzk3OTAyODZDOTEuY2VyMHsG
CCsGAQUFBwELBG8wbTBrBggrBgEFBQcwC4ZfcnN5bmM6Ly9ycGtpLmNvL3JlcG8v
QVM5NDUvMi8zMjM2MzAzMjNhNjY2MzMyMzMzYTMyMzAzMDNhM2EyZjM0MzAyZDM0
MzAyMDNkM2UyMDMyMzAzNTM0MzMzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEF
BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGACYC/CMCMA0GCSqGSIb3
DQEBCwUAA4IBAQBZTVEWlvqIxLFQuOmh4wBltp4SSq2v6VFxyaKFe+lf7o9jEGmJ
wvmJTnV36fp9y2siRE+JNt6Aey2qRbkBDoBL2KB9jwWcfZ+WMohNRSHhI7bISbHS
Y1BXFMC7g5/vp2w+kepybrASP5WEFRC3KUNzu4TmdrSLiawZJu7rjsExqHFFfwed
bf3I0luWd3lpi/MCZ3jhceBm5Ve6UIOwZN2sPBwD0xqFsufDB5XoYJB62v0PujcT
HrB+xOLTSJNalHnbjDAdEa0EiJfGl9ASFlUeBBa/+9FvplD17mc4LFjxF/hQPIVZ
uW41no0yx22nNg8MdH0K41MSYNQ3arxaJGLi
-----END CERTIFICATE-----
Generated at Tue Apr 30 23:53:21 2024 by rpki-client on console-ams.rpki-client.org