Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e33302e302f32342d3234203d3e203130313033.roa
File:                     3231362e3134362e33302e302f32342d3234203d3e203130313033.roa (raw, json)
Hash identifier:          Kw8fmtz8iDOTF3DPr25ECGGy/qlsrO5U0Edr+1PlM1c=
Subject key identifier:   9F:BA:D3:86:77:93:D7:76:AB:01:D1:26:AD:D2:8E:00:87:67:75:F8
Certificate issuer:       /CN=07839405DFEB9B4CC12DD8DA940D6685691D1D4A
Certificate serial:       3FCC804C473F638E229626E898A74B996D78CE7E
Authority key identifier: 07:83:94:05:DF:EB:9B:4C:C1:2D:D8:DA:94:0D:66:85:69:1D:1D:4A
Authority info access:    rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e33302e302f32342d3234203d3e203130313033.roa
Signing time:             Thu 20 Jun 2024 05:23:00 +0000
ROA not before:           Thu 20 Jun 2024 05:18:00 +0000
ROA not after:            Thu 19 Jun 2025 05:23:00 +0000
asID:                     10103
IP address blocks:        216.146.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.mft
                          rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer
                          rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.crl
                          rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jul 2024 07:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:cc:80:4c:47:3f:63:8e:22:96:26:e8:98:a7:4b:99:6d:78:ce:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07839405DFEB9B4CC12DD8DA940D6685691D1D4A
        Validity
            Not Before: Jun 20 05:18:00 2024 GMT
            Not After : Jun 19 05:23:00 2025 GMT
        Subject: CN=9FBAD3867793D776AB01D126ADD28E00876775F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:96:8d:bd:7a:35:9b:8e:bc:66:c5:e9:02:7a:
                    0e:86:d4:da:98:77:9b:40:fc:5e:aa:e5:14:44:06:
                    8f:27:9a:24:e9:51:c8:da:78:6b:07:f3:e3:a5:d1:
                    b1:a6:01:c1:c7:e2:f2:17:5b:dc:fc:54:5c:a8:62:
                    a8:83:8a:e4:60:0d:b6:97:84:9f:76:03:db:60:31:
                    61:2f:34:2f:73:9f:35:f7:cb:ac:67:de:15:56:1d:
                    ec:23:64:1b:e3:e8:6e:99:2d:1c:fd:b1:b9:7b:65:
                    e4:30:6a:f3:07:88:d3:33:60:6a:a2:13:02:1a:a2:
                    7a:58:c2:3c:fb:2a:80:e5:8d:8c:6b:1a:02:88:2c:
                    1c:0a:2a:a7:17:26:54:cd:26:30:78:7a:a5:d2:7e:
                    4e:ad:4a:92:bf:4d:b2:43:51:d3:8b:78:38:f7:86:
                    36:60:7d:1e:6b:d3:28:d5:03:f6:9e:8e:56:3c:26:
                    0f:6f:c8:fa:7d:17:a1:62:0d:c9:71:e9:5a:2a:5d:
                    6d:bb:a6:40:9b:ca:38:6c:8a:d5:e2:88:e5:3f:8d:
                    0d:28:56:b8:2b:27:2c:1a:db:45:68:d9:31:01:59:
                    e1:99:6e:23:11:ce:78:74:79:0f:7e:0b:9d:24:27:
                    5c:73:6e:a7:6a:fb:de:78:b4:58:15:29:17:d3:61:
                    48:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:BA:D3:86:77:93:D7:76:AB:01:D1:26:AD:D2:8E:00:87:67:75:F8
            X509v3 Authority Key Identifier:
                keyid:07:83:94:05:DF:EB:9B:4C:C1:2D:D8:DA:94:0D:66:85:69:1D:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e33302e302f32342d3234203d3e203130313033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:81:1e:bf:99:29:44:54:3b:5b:32:4c:85:06:64:3f:d7:b7:
         b3:6d:ef:64:7f:a4:74:7b:5d:6a:69:ad:c0:92:04:37:8b:bb:
         0a:8d:3a:1d:ea:73:d2:17:1b:a2:1a:53:4c:97:66:b5:ba:51:
         5d:94:58:3f:47:4f:03:89:bc:dc:b8:8c:28:ad:0b:74:ea:28:
         b9:3a:92:df:59:88:35:1c:a5:fe:27:54:cb:a3:a3:ac:c0:9f:
         2d:4b:7e:aa:1d:5c:e6:b5:80:9f:31:6c:6e:05:9c:55:a2:d0:
         98:fa:df:ab:26:2f:02:0d:78:9c:25:5a:16:c1:ea:9e:83:1a:
         6d:a3:85:54:94:32:7b:a0:66:38:fc:bd:9d:8d:9a:86:6d:b0:
         79:07:67:7b:6d:92:56:1a:27:45:ad:18:c6:d6:ea:dc:5e:5a:
         a9:83:e2:3e:72:8a:d3:bb:4f:f9:60:84:6a:bf:d2:fa:6a:98:
         80:b0:e6:4c:89:e6:7f:cb:9a:86:19:5c:56:50:15:96:e7:92:
         75:87:dc:9f:1b:41:13:bb:5a:5b:4f:50:d9:1e:86:ef:75:82:
         4e:27:60:8e:ed:6c:6c:b5:1e:fd:5f:1a:16:7a:6c:48:c7:f8:
         99:a7:b6:db:82:ff:7d:4c:d4:98:64:e9:5a:6c:a3:b9:00:19:
         d5:d9:d4:d8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIUP8yATEc/Y44ilibomKdLmW14zn4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDc4Mzk0MDVERkVCOUI0Q0MxMkREOERBOTQwRDY2ODU2
OTFEMUQ0QTAeFw0yNDA2MjAwNTE4MDBaFw0yNTA2MTkwNTIzMDBaMDMxMTAvBgNV
BAMTKDlGQkFEMzg2Nzc5M0Q3NzZBQjAxRDEyNkFERDI4RTAwODc2Nzc1RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lo29ejWbjrxmxekCeg6G1NqY
d5tA/F6q5RREBo8nmiTpUcjaeGsH8+Ol0bGmAcHH4vIXW9z8VFyoYqiDiuRgDbaX
hJ92A9tgMWEvNC9znzX3y6xn3hVWHewjZBvj6G6ZLRz9sbl7ZeQwavMHiNMzYGqi
EwIaonpYwjz7KoDljYxrGgKILBwKKqcXJlTNJjB4eqXSfk6tSpK/TbJDUdOLeDj3
hjZgfR5r0yjVA/aejlY8Jg9vyPp9F6FiDclx6VoqXW27pkCbyjhsitXiiOU/jQ0o
VrgrJywa20Vo2TEBWeGZbiMRznh0eQ9+C50kJ1xzbqdq+954tFgVKRfTYUi7AgMB
AAGjggIjMIICHzAdBgNVHQ4EFgQUn7rThneT13arAdEmrdKOAIdndfgwHwYDVR0j
BBgwFoAUB4OUBd/rm0zBLdjalA1mhWkdHUowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMy8wNzgzOTQwNURG
RUI5QjRDQzEyREQ4REE5NDBENjY4NTY5MUQxRDRBLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzAvMDc4
Mzk0MDVERkVCOUI0Q0MxMkREOERBOTQwRDY2ODU2OTFEMUQ0QS5jZXIwgaIGCCsG
AQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8zLzMyMzEzNjJlMzEzNDM2MmUzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzEzMDMxMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEANiSHjANBgkqhkiG9w0BAQsFAAOCAQEAdIEe
v5kpRFQ7WzJMhQZkP9e3s23vZH+kdHtdammtwJIEN4u7Co06Hepz0hcbohpTTJdm
tbpRXZRYP0dPA4m83LiMKK0LdOoouTqS31mINRyl/idUy6OjrMCfLUt+qh1c5rWA
nzFsbgWcVaLQmPrfqyYvAg14nCVaFsHqnoMabaOFVJQye6BmOPy9nY2ahm2weQdn
e22SVhonRa0Yxtbq3F5aqYPiPnKK07tP+WCEar/S+mqYgLDmTInmf8uahhlcVlAV
lueSdYfcnxtBE7taW09Q2R6G73WCTidgju1sbLUe/V8aFnpsSMf4mae224L/fUzU
mGTpWmyjuQAZ1dnU2A==
-----END CERTIFICATE-----
Generated at Mon Jul 8 10:09:15 2024 by rpki-client on console-ams.rpki-client.org