Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e32382e302f32322d3234203d3e20343031313131.roa
File:                     3231362e3134362e32382e302f32322d3234203d3e20343031313131.roa (raw, json)
Hash identifier:          /DDXqDvEIJQ7wkXPwXAg1b9geRuirzWDfef7ryN/Nkw=
Subject key identifier:   7A:6A:F7:AA:83:C9:F8:17:48:1B:58:58:19:02:E8:41:26:F8:66:7C
Certificate issuer:       /CN=07839405DFEB9B4CC12DD8DA940D6685691D1D4A
Certificate serial:       2C6BAADC94454F227006FBC70F9EBD3BAE5E3BBB
Authority key identifier: 07:83:94:05:DF:EB:9B:4C:C1:2D:D8:DA:94:0D:66:85:69:1D:1D:4A
Authority info access:    rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e32382e302f32322d3234203d3e20343031313131.roa
Signing time:             Wed 11 Sep 2024 10:49:14 +0000
ROA not before:           Wed 11 Sep 2024 10:44:14 +0000
ROA not after:            Wed 10 Sep 2025 10:49:14 +0000
asID:                     401111
IP address blocks:        216.146.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.mft
                          rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer
                          rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.crl
                          rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Oct 2024 22:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6b:aa:dc:94:45:4f:22:70:06:fb:c7:0f:9e:bd:3b:ae:5e:3b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07839405DFEB9B4CC12DD8DA940D6685691D1D4A
        Validity
            Not Before: Sep 11 10:44:14 2024 GMT
            Not After : Sep 10 10:49:14 2025 GMT
        Subject: CN=7A6AF7AA83C9F817481B58581902E84126F8667C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4a:1c:17:fb:27:10:27:21:ba:95:43:f4:73:
                    de:ce:e6:12:6b:8b:29:53:8a:1d:74:7b:fc:51:9d:
                    44:42:65:e5:3d:9e:5c:17:34:f8:0c:6b:74:a8:53:
                    81:a8:12:c1:f4:bc:19:74:f4:5b:26:19:c6:7a:c9:
                    e1:93:ba:2b:e5:6d:32:d6:67:70:fc:a8:b5:0d:b8:
                    2a:13:40:5d:dd:c1:b9:7d:77:91:54:dd:70:f3:ee:
                    d2:ea:79:5e:f3:4d:43:c0:07:7c:2a:63:3c:2d:26:
                    8e:52:b3:9d:c8:e5:74:2b:c1:6c:96:af:27:99:c5:
                    6c:07:c1:25:1a:b9:f1:94:2f:f3:67:ac:5b:48:78:
                    9f:e0:60:1f:5e:ae:da:4c:c6:49:72:76:d2:a0:fd:
                    16:50:b5:87:dc:a4:1d:29:6c:56:b3:45:6b:f1:83:
                    e0:84:1d:66:4d:d5:0c:fb:f9:e9:e7:ab:58:ef:45:
                    39:31:31:be:bb:a3:73:cd:21:e8:e3:5f:1f:2a:6c:
                    67:4e:7f:16:52:22:4f:7e:d5:63:10:30:af:a6:45:
                    eb:44:f7:fa:bf:a2:63:e0:1e:6d:13:d4:1e:1f:a2:
                    e2:62:b5:77:81:39:24:7b:97:99:cc:b3:05:ef:7a:
                    cc:4e:1f:33:20:8b:25:16:10:55:ec:fd:38:60:bc:
                    09:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6A:F7:AA:83:C9:F8:17:48:1B:58:58:19:02:E8:41:26:F8:66:7C
            X509v3 Authority Key Identifier:
                keyid:07:83:94:05:DF:EB:9B:4C:C1:2D:D8:DA:94:0D:66:85:69:1D:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e32382e302f32322d3234203d3e20343031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:e4:ba:17:a8:6f:16:b3:81:96:fb:de:0c:3c:42:ad:6e:50:
         e8:bf:ed:b3:ef:29:62:81:34:a2:1b:19:66:bc:7f:be:27:71:
         cd:87:16:5a:d6:e1:09:a9:a8:48:3a:50:89:51:a3:42:b8:72:
         f1:bd:1d:4a:c7:77:34:18:1a:24:2f:a7:1b:43:b5:9f:ce:25:
         4b:ae:35:9e:0f:50:3d:e6:38:81:08:fb:9f:59:eb:d1:99:cd:
         6a:24:0d:6e:d5:29:91:8e:28:d4:fa:59:2b:ce:95:51:0f:06:
         c6:12:a8:b5:58:e0:54:c2:85:e8:6d:df:b3:09:1f:a5:b1:a6:
         6d:d2:22:70:66:21:12:0e:c6:98:9b:f8:0d:cb:e2:20:c5:c2:
         d3:c1:3f:c9:e3:c7:dd:f8:e9:70:3f:81:42:c8:ee:a6:50:0a:
         63:30:b8:ca:e1:55:71:e7:a0:0d:ca:1d:02:4f:50:2a:c8:28:
         d4:54:f2:0b:7e:e2:d9:9f:f9:b3:aa:5c:44:36:04:ee:30:44:
         b7:77:4c:df:2c:45:eb:9c:c7:c0:a8:e9:04:a7:fa:27:20:0a:
         98:c3:aa:fd:aa:af:00:5e:9c:87:35:42:d7:e6:ba:4b:57:11:
         4a:0f:06:2f:35:3a:d1:4e:b5:e6:7c:7d:a3:ce:ae:6e:01:93:
         76:4b:05:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 05:14:49 2024 by rpki-client on console-ams.rpki-client.org