Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/32332e3133392e34302e302f32342d3234203d3e20323032373336.roa
File:                     32332e3133392e34302e302f32342d3234203d3e20323032373336.roa (raw, json)
Hash identifier:          nBEsej3k9Kg611lHVs9vJb3vIlXi6CoK5GI5GDWw9tQ=
Subject key identifier:   65:AE:E3:4C:5A:9C:74:AD:CA:27:BE:E9:8E:03:96:68:8F:B4:94:0E
Certificate issuer:       /CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
Certificate serial:       3A49AE2A846DEC104AB6F7DCCDB496A42B41F190
Authority key identifier: DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28
Authority info access:    rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/32332e3133392e34302e302f32342d3234203d3e20323032373336.roa
Signing time:             Thu 20 Jun 2024 05:23:08 +0000
ROA not before:           Thu 20 Jun 2024 05:18:08 +0000
ROA not after:            Thu 19 Jun 2025 05:23:08 +0000
asID:                     202736
IP address blocks:        23.139.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.mft
                          rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer
                          rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.crl
                          rsync://dev.tw/rpki/August/6/B1DCB069969486DE5888C9BE3AE4FB7C025BDE89.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35fec6cdaa8edc8f903e294086cf60b0594f55a17b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jul 2024 08:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:49:ae:2a:84:6d:ec:10:4a:b6:f7:dc:cd:b4:96:a4:2b:41:f1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228
        Validity
            Not Before: Jun 20 05:18:08 2024 GMT
            Not After : Jun 19 05:23:08 2025 GMT
        Subject: CN=65AEE34C5A9C74ADCA27BEE98E0396688FB4940E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:bd:e9:70:90:8a:5c:a7:2b:09:52:91:cc:
                    27:78:94:48:0b:c0:f6:c1:37:da:7a:c1:c2:a6:ed:
                    5d:df:50:1c:47:13:c1:fd:62:9c:ef:98:30:a2:95:
                    3e:a3:5f:a9:22:f5:6f:e6:ca:b7:82:60:dc:38:2c:
                    11:b4:09:ca:08:81:23:81:35:22:46:6c:27:96:85:
                    82:78:e4:91:98:66:55:2a:d1:87:f6:aa:b2:32:62:
                    30:9e:05:bd:a8:a6:a7:05:18:74:fa:e5:64:4e:47:
                    36:da:19:c4:85:59:f1:df:59:7a:6f:91:fc:ed:1b:
                    a2:e2:65:31:53:73:9f:26:aa:e3:11:fe:bb:a0:99:
                    44:ae:61:d9:cf:dc:59:a6:26:19:9f:90:ad:55:c6:
                    1a:dc:61:9c:b6:8c:5a:14:13:f9:00:0c:56:ed:8b:
                    c6:37:a4:f4:fc:52:f4:bd:32:4f:fa:2f:6b:3c:07:
                    14:6d:c2:19:5a:78:a5:b9:85:12:51:d0:4f:e2:86:
                    59:66:a0:a6:6f:97:41:f3:62:97:97:6e:03:c0:b4:
                    15:73:a7:90:f7:12:e5:40:0d:1e:d6:e6:14:46:c0:
                    32:bb:6d:d4:a7:67:02:d7:de:b0:0a:fc:a1:a1:19:
                    82:58:53:70:e1:2f:5c:b2:3f:9d:c6:92:34:cb:6b:
                    ac:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AE:E3:4C:5A:9C:74:AD:CA:27:BE:E9:8E:03:96:68:8F:B4:94:0E
            X509v3 Authority Key Identifier:
                keyid:DA:B1:C9:CA:28:00:7D:B3:E3:BF:92:EF:2E:CF:AB:07:30:D9:B2:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/6/DAB1C9CA28007DB3E3BF92EF2ECFAB0730D9B228.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/10/32332e3133392e34302e302f32342d3234203d3e20323032373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:dc:3f:f3:5f:fe:f0:fb:b8:a3:12:ed:75:28:c7:17:29:47:
         9e:03:f6:fe:b0:51:c3:56:c6:f1:22:2b:35:8e:b1:77:0d:82:
         dd:64:74:d0:84:72:ee:9e:58:ea:59:da:7f:ea:52:85:9c:33:
         5d:d7:b5:27:27:4e:d6:bc:1a:91:09:cf:25:4d:54:ef:b5:39:
         2c:ef:71:15:65:d0:fb:74:b4:cf:a8:88:0d:27:6c:d4:e2:fa:
         25:c1:39:cb:7c:d6:17:5e:9b:bb:8b:4d:2b:3e:d6:00:f5:b9:
         59:30:68:34:89:c5:d6:42:c7:fc:a7:3f:b7:f6:f4:ea:c0:04:
         98:27:06:10:81:0f:f8:e7:cb:45:4c:6a:62:a8:ef:e0:3b:12:
         21:e7:d9:9b:30:a0:b8:68:32:84:94:8d:5d:9b:6c:09:66:89:
         6b:56:37:68:ec:7c:96:e3:6c:6a:2f:e1:48:f0:60:5f:cb:77:
         10:20:d5:60:79:9f:fd:ad:b4:99:71:9b:d6:b1:70:3e:1d:c2:
         5e:f2:ac:21:fe:a5:15:ef:48:46:06:cc:d3:ea:c1:ca:58:86:
         88:a9:35:e2:e1:8e:f3:d7:ab:56:5a:8b:a0:f4:82:d7:b8:25:
         85:79:b8:7c:c6:e4:69:eb:da:77:43:9a:f3:7f:6a:69:46:d7:
         82:16:58:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 15:30:37 2024 by rpki-client on console-fra.rpki-client.org