Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa
File:                     3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa (raw, json)
Hash identifier:          E7BWS9fcmykb5LAaVExEC7h9Gm7EYPwmyXadzyEuF3w=
Subject key identifier:   28:97:2F:29:18:19:86:C8:FE:4D:6F:7D:93:F4:0A:98:90:61:89:E0
Certificate issuer:       /CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
Certificate serial:       143B493A652272BB5800213E4BA422240F046C40
Authority key identifier: DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28
Authority info access:    rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa
Signing time:             Thu 20 Jun 2024 05:23:08 +0000
ROA not before:           Thu 20 Jun 2024 05:18:08 +0000
ROA not after:            Thu 19 Jun 2025 05:23:08 +0000
asID:                     7719
IP address blocks:        199.189.156.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.mft
                          rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
                          rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl
                          rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jul 2024 08:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:3b:49:3a:65:22:72:bb:58:00:21:3e:4b:a4:22:24:0f:04:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
        Validity
            Not Before: Jun 20 05:18:08 2024 GMT
            Not After : Jun 19 05:23:08 2025 GMT
        Subject: CN=28972F29181986C8FE4D6F7D93F40A98906189E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:81:d4:3c:bb:56:f9:25:31:b8:8c:7d:8f:
                    72:c9:81:ea:c2:0c:ca:05:18:73:b4:16:9e:01:73:
                    7f:f5:b9:7f:8e:00:79:f2:b5:3b:93:f6:7a:d5:38:
                    24:08:8f:01:c8:b4:85:ca:e2:25:16:5a:12:bc:69:
                    39:2f:f6:6c:54:dc:c2:33:30:1e:e9:46:b3:e7:22:
                    e1:22:78:68:a4:ba:a3:46:9a:2d:aa:d4:24:e6:a8:
                    b4:08:a1:54:b2:7f:66:88:eb:42:2f:55:96:f9:f8:
                    34:b4:40:72:b8:ef:47:cb:8a:f9:b9:b7:de:06:16:
                    97:42:59:35:dc:fa:32:ab:0e:17:28:64:87:ef:d0:
                    c4:32:c8:51:75:90:1f:6a:c7:50:71:09:d6:e5:c7:
                    58:3c:a8:32:f9:42:bc:31:d5:bb:6d:aa:f7:42:1d:
                    6c:0f:ef:68:18:e2:05:af:7b:bb:94:1d:e9:33:0e:
                    57:e0:6c:7d:90:9b:e3:ab:5e:84:0e:8c:c6:b3:2c:
                    e1:4c:ba:81:a1:69:07:bf:86:8b:a5:04:5b:99:f5:
                    34:5c:62:81:af:9e:e4:13:63:73:dc:08:96:66:5e:
                    70:35:7d:4b:c2:95:f3:77:d0:55:de:1d:42:a8:f7:
                    12:1b:8b:1c:31:ff:9c:de:2f:de:3b:fc:83:0e:0e:
                    48:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:97:2F:29:18:19:86:C8:FE:4D:6F:7D:93:F4:0A:98:90:61:89:E0
            X509v3 Authority Key Identifier:
                keyid:DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/3139392e3138392e3135362e302f32322d3234203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:69:3d:27:97:0b:80:56:b1:91:d9:7f:70:6d:08:26:95:53:
         3c:39:0f:d7:aa:7d:41:ed:7f:81:2e:88:24:a2:a2:5f:22:cd:
         0e:13:b6:d5:1e:31:0d:fa:df:32:d2:01:1b:0c:7c:ee:bf:99:
         3f:fe:16:14:87:72:86:6e:4d:dc:ef:37:0a:d0:29:3c:a9:b4:
         21:95:fd:8f:22:8b:00:c9:4d:ed:bf:9e:0b:00:ab:64:e8:56:
         47:49:8f:58:ee:a8:b3:fe:b7:df:db:6d:ea:67:f2:e2:bd:f9:
         7a:73:a1:19:8f:83:92:42:3e:e8:dc:51:e2:f5:c6:07:5b:c9:
         97:91:81:84:ad:b2:cc:a1:af:6b:e0:86:a4:87:05:cd:e6:94:
         83:74:c9:5b:58:9c:1c:fe:11:6e:9e:bd:5a:d7:f4:9b:61:8c:
         a9:c2:a4:59:03:f2:e5:45:08:62:43:ab:b7:57:22:4b:0f:0e:
         5b:81:8c:c1:99:78:62:6e:82:cc:f9:05:eb:cf:ee:6e:16:d1:
         99:77:a4:8a:21:57:41:16:b8:5d:4b:49:f8:7f:26:b6:27:4e:
         8e:20:35:18:c9:bd:67:ca:c5:d4:60:a2:e8:5c:67:f4:bf:a7:
         ed:9b:40:4f:68:3d:c5:70:69:63:7c:03:63:ab:6f:b7:7b:36:
         cc:11:4b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 15:30:37 2024 by rpki-client on console-fra.rpki-client.org