Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/Riffi/1/326131323a646434373a383730303a3a2f34302d3438203d3e20323033383638.roa
File:                     326131323a646434373a383730303a3a2f34302d3438203d3e20323033383638.roa (raw, json)
Hash identifier:          2Wh5hlf3CE2eoqpnrDOGkbGPepB3PkjHR7Zo2h4WjyU=
Subject key identifier:   0C:4D:04:5D:BB:C4:D5:F9:21:E3:1E:95:82:5F:D2:8B:6C:D6:C1:0B
Certificate issuer:       /CN=A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136
Certificate serial:       03C5AAE2BA2C76162D85D6E2868B4364C25D2264
Authority key identifier: A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer
Subject info access:      rsync://rpki.co/repo/Riffi/1/326131323a646434373a383730303a3a2f34302d3438203d3e20323033383638.roa
Signing time:             Sun 30 Jun 2024 00:47:47 +0000
ROA not before:           Sun 30 Jun 2024 00:42:47 +0000
ROA not after:            Sun 29 Jun 2025 00:47:47 +0000
asID:                     203868
IP address blocks:        2a12:dd47:8700::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.crl
                          rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft
                          rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl
                          rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Jul 2024 18:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c5:aa:e2:ba:2c:76:16:2d:85:d6:e2:86:8b:43:64:c2:5d:22:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136
        Validity
            Not Before: Jun 30 00:42:47 2024 GMT
            Not After : Jun 29 00:47:47 2025 GMT
        Subject: CN=0C4D045DBBC4D5F921E31E95825FD28B6CD6C10B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bb:2d:fe:fa:c4:e9:a2:79:66:6c:70:d1:c8:
                    22:95:6a:44:23:ed:c6:c6:c0:68:c8:ae:ba:81:36:
                    d9:01:3b:76:45:01:65:91:a4:a6:f0:d0:b8:b2:eb:
                    a4:7a:66:bb:04:7d:21:5d:94:5c:37:bf:c3:35:eb:
                    a4:15:d4:c8:0d:e3:47:45:b9:fe:3b:c8:7a:d9:68:
                    16:b6:7b:35:36:20:c8:e8:eb:22:50:c1:a7:86:43:
                    4a:83:4c:4b:39:7c:62:68:b1:87:6e:ac:cd:ab:98:
                    55:e2:44:00:d2:ed:8d:d5:42:29:a0:da:39:db:e5:
                    13:45:e3:e2:3f:58:64:c4:27:5e:08:ca:26:b6:58:
                    44:c9:e7:9a:8a:0d:11:e9:9e:1f:64:95:06:cb:46:
                    86:6a:5e:8c:af:72:45:b9:3e:e0:59:ad:be:c1:52:
                    49:b4:31:26:78:75:13:49:44:9a:4e:45:20:b7:96:
                    fe:59:b3:83:0e:fc:5d:bd:c5:ef:a8:9b:5e:cb:e5:
                    f6:b1:c5:98:90:2d:42:17:72:13:4b:c2:55:45:1b:
                    98:f6:e9:68:e9:d7:ff:af:b7:06:0f:25:49:c4:dc:
                    ca:76:f1:b4:8f:4c:31:b6:d8:55:5d:ab:f5:f8:62:
                    b3:8f:46:20:71:c5:39:b8:c8:18:a9:04:da:b1:de:
                    b4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4D:04:5D:BB:C4:D5:F9:21:E3:1E:95:82:5F:D2:8B:6C:D6:C1:0B
            X509v3 Authority Key Identifier:
                keyid:A7:DB:DD:E4:5B:9B:ED:9C:17:CB:20:F2:AE:29:EC:70:3C:86:A1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/Riffi/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/A7DBDDE45B9BED9C17CB20F2AE29EC703C86A136.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/Riffi/1/326131323a646434373a383730303a3a2f34302d3438203d3e20323033383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8700::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:ae:f1:f8:7c:f5:72:f5:8e:fc:3c:46:83:e3:2c:2a:ec:61:
         7e:85:59:83:13:76:37:99:d5:4f:be:f1:40:61:8b:5a:de:68:
         f6:b7:b1:c2:11:d5:0d:37:bd:9b:f3:2c:81:ac:4c:85:1c:fa:
         90:a5:89:ed:3b:01:15:82:06:dd:ed:52:c1:f4:9f:d9:1e:c8:
         2c:7a:17:9b:76:36:63:09:61:ca:8b:a1:f0:3b:6f:f1:1a:e5:
         92:72:2b:70:75:e7:a8:8b:fe:85:9f:5c:5f:ec:17:0f:47:20:
         c5:d7:c2:cc:8a:f7:4f:74:1f:da:a0:29:61:e8:45:30:13:34:
         75:ad:f5:28:89:0b:cf:4e:d0:87:fe:dd:24:0a:cd:10:f3:72:
         73:38:21:36:aa:c8:27:71:25:89:5d:96:fb:d1:d4:2c:ba:35:
         83:db:0a:10:9e:82:1e:46:56:22:1b:30:31:e4:84:db:dc:eb:
         59:29:b9:03:fd:7a:d8:41:42:85:f8:09:e3:cd:ec:d9:e2:ad:
         59:7b:2d:cb:f3:2d:31:20:fe:b1:28:15:ae:28:04:dd:e4:43:
         e0:55:1e:eb:4f:fb:6f:69:55:9a:fd:93:17:94:a3:dd:ac:1f:
         8d:bd:30:f1:46:4f:15:06:9d:c5:2c:8e:a5:84:6a:5f:17:72:
         d4:98:0f:48
-----BEGIN CERTIFICATE-----
MIIE+DCCA+CgAwIBAgIUA8Wq4rosdhYthdbihotDZMJdImQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdEQkRERTQ1QjlCRUQ5QzE3Q0IyMEYyQUUyOUVDNzAz
Qzg2QTEzNjAeFw0yNDA2MzAwMDQyNDdaFw0yNTA2MjkwMDQ3NDdaMDMxMTAvBgNV
BAMTKDBDNEQwNDVEQkJDNEQ1RjkyMUUzMUU5NTgyNUZEMjhCNkNENkMxMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIuy3++sTponlmbHDRyCKVakQj
7cbGwGjIrrqBNtkBO3ZFAWWRpKbw0Liy66R6ZrsEfSFdlFw3v8M166QV1MgN40dF
uf47yHrZaBa2ezU2IMjo6yJQwaeGQ0qDTEs5fGJosYdurM2rmFXiRADS7Y3VQimg
2jnb5RNF4+I/WGTEJ14Iyia2WETJ55qKDRHpnh9klQbLRoZqXoyvckW5PuBZrb7B
Ukm0MSZ4dRNJRJpORSC3lv5Zs4MO/F29xe+om17L5faxxZiQLUIXchNLwlVFG5j2
6Wjp1/+vtwYPJUnE3Mp28bSPTDG22FVdq/X4YrOPRiBxxTm4yBipBNqx3rQpAgMB
AAGjggICMIIB/jAdBgNVHQ4EFgQUDE0EXbvE1fkh4x6Vgl/Si2zWwQswHwYDVR0j
BBgwFoAUp9vd5Fub7ZwXyyDyrinscDyGoTYwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL1JpZmZpLzEvQTdEQkRE
RTQ1QjlCRUQ5QzE3Q0IyMEYyQUUyOUVDNzAzQzg2QTEzNi5jcmwwgZMGCCsGAQUF
BwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMzNkYmRlY2M0ZmE0LzEv
QTdEQkRERTQ1QjlCRUQ5QzE3Q0IyMEYyQUUyOUVDNzAzQzg2QTEzNi5jZXIwfQYI
KwYBBQUHAQsEcTBvMG0GCCsGAQUFBzALhmFyc3luYzovL3Jwa2kuY28vcmVwby9S
aWZmaS8xLzMyNjEzMTMyM2E2NDY0MzQzNzNhMzgzNzMwMzAzYTNhMmYzNDMwMmQz
NDM4MjAzZDNlMjAzMjMwMzMzODM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAqEt1HhzANBgkqhkiG
9w0BAQsFAAOCAQEAAq7x+Hz1cvWO/DxGg+MsKuxhfoVZgxN2N5nVT77xQGGLWt5o
9rexwhHVDTe9m/MsgaxMhRz6kKWJ7TsBFYIG3e1SwfSf2R7ILHoXm3Y2Ywlhyouh
8Dtv8RrlknIrcHXnqIv+hZ9cX+wXD0cgxdfCzIr3T3Qf2qApYehFMBM0da31KIkL
z07Qh/7dJArNEPNyczghNqrIJ3EliV2W+9HULLo1g9sKEJ6CHkZWIhswMeSE29zr
WSm5A/162EFChfgJ483s2eKtWXsty/MtMSD+sSgVrigE3eRD4FUe60/7b2lVmv2T
F5Sj3awfjb0w8UZPFQadxSyOpYRqXxdy1JgPSA==
-----END CERTIFICATE-----
Generated at Mon Jul 8 10:14:49 2024 by rpki-client on console-ams.rpki-client.org