Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e33302e302f32342d3234203d3e20313937353337.roa
File:                     3231362e3134362e33302e302f32342d3234203d3e20313937353337.roa (raw, json)
Hash identifier:          fcM++Ex+qOse4Xbg8bt+7VP5YHczWubCmDrGE1sG2es=
Subject key identifier:   B1:2B:F3:7E:FA:DA:1E:38:22:CF:4B:56:85:7A:16:EF:41:71:AF:CB
Certificate issuer:       /CN=07839405DFEB9B4CC12DD8DA940D6685691D1D4A
Certificate serial:       16B0F6A983C04AA385779F72E1C4C4BF36208302
Authority key identifier: 07:83:94:05:DF:EB:9B:4C:C1:2D:D8:DA:94:0D:66:85:69:1D:1D:4A
Authority info access:    rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e33302e302f32342d3234203d3e20313937353337.roa
Signing time:             Thu 20 Jun 2024 05:23:01 +0000
ROA not before:           Thu 20 Jun 2024 05:18:01 +0000
ROA not after:            Thu 19 Jun 2025 05:23:01 +0000
asID:                     197537
IP address blocks:        216.146.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.mft
                          rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer
                          rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.crl
                          rsync://dev.tw/rpki/August/0/D448BCAD3AEB3E217351992B27E9668AA87246E0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda47919316f24441f4472901fcb5e49d7cc55f4fb4f4097.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/54c0abe8-0a04-4316-aff2-9cdff0522fbd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jul 2024 07:55:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b0:f6:a9:83:c0:4a:a3:85:77:9f:72:e1:c4:c4:bf:36:20:83:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07839405DFEB9B4CC12DD8DA940D6685691D1D4A
        Validity
            Not Before: Jun 20 05:18:01 2024 GMT
            Not After : Jun 19 05:23:01 2025 GMT
        Subject: CN=B12BF37EFADA1E3822CF4B56857A16EF4171AFCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:91:d6:4f:20:3a:e0:4f:05:9d:28:86:d1:1f:
                    c9:d8:02:58:b8:47:c4:30:43:d0:d0:6d:81:9b:87:
                    c0:3c:2f:a2:13:8a:0a:77:b0:3b:50:96:a3:37:76:
                    e7:9f:00:0c:00:80:b7:2c:4e:ef:83:2b:9c:1e:da:
                    2e:42:2a:37:91:ff:fa:6d:92:64:1a:63:e7:ab:9d:
                    22:9c:81:72:35:00:4e:ab:b2:09:33:51:35:cc:af:
                    b4:48:66:7f:c8:14:b8:57:03:ee:f5:1b:4d:d6:08:
                    41:8e:4e:61:14:42:72:9a:9c:c8:a6:06:a1:29:85:
                    70:8c:d6:8b:ab:40:65:9a:56:b9:c4:c3:15:fb:7f:
                    36:b6:98:e0:06:29:87:6e:cf:ae:9d:83:9f:a0:ed:
                    fd:00:53:ae:e8:74:ed:67:f4:b7:b3:8b:dd:44:37:
                    b5:dd:ca:2c:b5:d4:f0:8c:00:e0:41:4d:02:93:8c:
                    b5:92:a0:2e:1a:61:53:12:e2:b8:dc:85:dd:f0:8e:
                    4b:ba:4b:32:7e:a9:5c:7c:a3:e4:9e:dd:46:08:39:
                    04:db:18:ca:9d:37:91:31:e9:c7:56:50:66:57:21:
                    1b:ca:c5:e6:39:fd:31:f5:cd:07:7e:a5:e7:ed:91:
                    c6:eb:68:50:64:ed:65:58:6f:7b:bb:a8:2f:14:b8:
                    1e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2B:F3:7E:FA:DA:1E:38:22:CF:4B:56:85:7A:16:EF:41:71:AF:CB
            X509v3 Authority Key Identifier:
                keyid:07:83:94:05:DF:EB:9B:4C:C1:2D:D8:DA:94:0D:66:85:69:1D:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/0/07839405DFEB9B4CC12DD8DA940D6685691D1D4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/3/3231362e3134362e33302e302f32342d3234203d3e20313937353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:4a:78:2d:8d:c7:62:0e:44:aa:ef:86:f2:bf:a3:60:43:e6:
         23:5b:e4:eb:c2:22:5c:05:e4:79:cd:b5:a2:a6:91:51:2a:f0:
         2a:14:dc:68:ae:d0:dd:cf:ed:2d:8a:e4:5e:bf:6f:09:bf:a9:
         2a:3f:42:bd:d6:16:76:97:00:b3:eb:23:4c:ff:65:36:34:bc:
         93:c5:93:83:b6:67:11:98:8b:91:61:b2:bc:04:7e:5f:c2:ba:
         15:46:46:f2:6c:13:3a:df:2d:f9:15:dd:55:9b:fc:d2:a5:27:
         be:b9:1e:5d:57:29:bc:69:9d:e8:97:2c:47:55:4d:49:6b:22:
         7e:cb:d4:5f:de:55:9b:ca:b2:0e:54:3e:b1:0f:5b:11:86:8e:
         1c:aa:39:f7:53:7c:96:34:ea:b4:a9:bf:61:cd:9f:b6:68:98:
         32:c6:b3:05:ba:89:fc:10:bb:9a:d6:06:9b:8c:e4:49:55:9d:
         9b:fd:73:22:23:38:35:c0:05:6b:70:bc:ba:91:33:d9:6e:66:
         3b:20:97:92:bf:ba:4d:68:c7:23:c6:3a:c8:63:22:0e:3b:91:
         49:54:ad:2f:05:c8:0d:34:c7:e6:b2:0a:7a:e5:0d:c9:bf:dd:
         25:a9:11:86:cf:52:33:11:b9:8e:b5:1c:72:0b:a5:08:2d:8d:
         95:31:b3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 09:36:13 2024 by rpki-client on console-fra.rpki-client.org