Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e32392e302f32342d3234203d3e203130313033.roa
File:                     3231362e3134362e32392e302f32342d3234203d3e203130313033.roa (raw, json)
Hash identifier:          mMoq58hi7C7I0h4JlDCtSBKFtybj4Phch6TcjnUwZOg=
Subject key identifier:   BB:46:D6:84:9D:21:20:D9:F1:E1:6E:35:E6:77:A1:3F:3D:E2:D4:B9
Certificate issuer:       /CN=07839405DFEB9B4CC12DD8DA940D6685691D1D4A
Certificate serial:       696119169A3A3ABBCF38D90755E680A6D4E00498
Authority key identifier: 07:83:94:05:DF:EB:9B:4C:C1:2D:D8:DA:94:0D:66:85:69:1D:1D:4A
Authority info access:    rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e32392e302f32342d3234203d3e203130313033.roa
Signing time:             Thu 20 Jun 2024 05:23:00 +0000
ROA not before:           Thu 20 Jun 2024 05:18:00 +0000
ROA not after:            Thu 19 Jun 2025 05:23:00 +0000
asID:                     10103
IP address blocks:        216.146.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.mft
                          rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer
                          rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.crl
                          rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jul 2024 07:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:61:19:16:9a:3a:3a:bb:cf:38:d9:07:55:e6:80:a6:d4:e0:04:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07839405DFEB9B4CC12DD8DA940D6685691D1D4A
        Validity
            Not Before: Jun 20 05:18:00 2024 GMT
            Not After : Jun 19 05:23:00 2025 GMT
        Subject: CN=BB46D6849D2120D9F1E16E35E677A13F3DE2D4B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c8:10:63:89:58:7e:a8:18:79:57:f6:d8:97:
                    6f:3e:d8:8d:15:15:cf:45:0e:21:aa:77:b7:d1:03:
                    8c:51:5d:05:01:b7:0a:81:e2:80:5e:73:ed:9d:78:
                    07:3a:57:ab:6e:2c:0b:60:39:f3:bd:88:4b:85:6c:
                    ec:b8:15:be:be:58:04:aa:be:11:26:26:33:0b:52:
                    1c:bc:ec:3b:4d:53:0d:bd:38:32:46:62:9f:d8:8b:
                    43:9b:02:ec:3d:62:5a:40:7d:e2:92:e3:60:27:ae:
                    c5:b0:15:21:3c:e2:a5:20:cb:1d:df:f7:04:13:59:
                    20:b8:e4:8f:23:92:ad:ae:b7:5b:77:87:14:9a:9d:
                    ed:72:23:42:4c:7c:d2:69:42:97:86:e6:57:af:5d:
                    39:f9:7b:4f:6e:5e:57:63:ee:69:6c:3b:20:b0:d5:
                    42:85:fa:81:e0:bd:8c:e6:5d:36:08:02:d6:0f:06:
                    b5:73:e5:93:9b:61:74:df:71:6f:07:35:13:da:3e:
                    1d:6a:cd:6e:df:2e:38:95:2f:85:19:75:08:11:0b:
                    da:f0:bf:37:fa:4b:17:40:65:6d:98:dc:14:23:af:
                    16:6a:2b:6c:69:d3:6a:0b:af:5a:9e:df:31:9c:88:
                    7c:b4:5d:f5:7f:9b:80:eb:fc:6e:93:ff:a2:3f:1c:
                    3b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:46:D6:84:9D:21:20:D9:F1:E1:6E:35:E6:77:A1:3F:3D:E2:D4:B9
            X509v3 Authority Key Identifier:
                keyid:07:83:94:05:DF:EB:9B:4C:C1:2D:D8:DA:94:0D:66:85:69:1D:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e32392e302f32342d3234203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:6f:16:04:56:70:bf:bf:a5:5c:8f:8f:6e:69:ef:15:ef:2c:
         fe:bb:a1:06:07:f6:5d:ee:9e:84:39:c7:ad:b6:4e:be:7e:4d:
         30:9f:83:70:ca:b8:91:b3:e0:06:b2:e0:49:ca:52:77:1e:56:
         1d:49:82:5a:1f:d8:55:7c:69:d4:2a:8e:95:b1:39:a4:26:86:
         f1:26:b9:59:28:c0:ac:fb:5a:18:74:51:d9:a3:c4:d9:c0:c8:
         25:1c:a1:5f:07:18:c0:fd:15:ab:72:81:93:70:5a:fe:92:be:
         01:a0:5c:a9:d9:52:1e:62:06:ee:0f:b4:32:bb:39:f2:db:2f:
         f8:15:16:44:a6:a6:76:ae:e8:a4:fe:bf:a8:66:0b:02:4e:7c:
         8d:de:19:f2:ea:fe:b6:3d:8e:a8:c3:76:52:19:9d:06:1c:8e:
         1f:fd:e7:13:49:fa:fb:c9:0d:f7:73:1c:b3:82:01:c6:52:17:
         7b:fe:39:e1:91:f0:8d:99:5b:8f:27:a5:df:d4:7e:5d:92:eb:
         40:33:a4:11:df:fe:61:26:13:12:fd:a9:ae:75:86:09:b6:01:
         b7:7c:e6:c4:da:51:5e:67:be:10:f9:23:8e:e3:e5:1b:72:a6:
         bb:12:29:e8:98:f5:dc:1e:8e:d8:86:2e:94:4a:0f:43:bb:72:
         38:e3:f9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 09:36:13 2024 by rpki-client on console-fra.rpki-client.org