Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/3134392e3131322e35332e302f32342d3234203d3e2037373139.roa
File:                     3134392e3131322e35332e302f32342d3234203d3e2037373139.roa (raw, json)
Hash identifier:          wKGfzQ4lNUYPAK7g9x4se+4ZkMAt/w1kNJviX+oezS0=
Subject key identifier:   35:AC:22:D9:94:F3:45:CE:81:BE:F7:A5:D5:D1:F6:B0:D2:12:62:D4
Certificate issuer:       /CN=6BB389B1DCABC9FDD074CABDCD341E32E416F472
Certificate serial:       54245F6C19A13CFCD4581D8FA46AB8C661ADC638
Authority key identifier: 6B:B3:89:B1:DC:AB:C9:FD:D0:74:CA:BD:CD:34:1E:32:E4:16:F4:72
Authority info access:    rsync://dev.tw/rpki/August/8/6BB389B1DCABC9FDD074CABDCD341E32E416F472.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/3134392e3131322e35332e302f32342d3234203d3e2037373139.roa
Signing time:             Wed 03 Jul 2024 06:27:06 +0000
ROA not before:           Wed 03 Jul 2024 06:22:06 +0000
ROA not after:            Wed 02 Jul 2025 06:27:06 +0000
asID:                     7719
IP address blocks:        149.112.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/6BB389B1DCABC9FDD074CABDCD341E32E416F472.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/6BB389B1DCABC9FDD074CABDCD341E32E416F472.mft
                          rsync://dev.tw/rpki/August/8/6BB389B1DCABC9FDD074CABDCD341E32E416F472.cer
                          rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.crl
                          rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jul 2024 03:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:24:5f:6c:19:a1:3c:fc:d4:58:1d:8f:a4:6a:b8:c6:61:ad:c6:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB389B1DCABC9FDD074CABDCD341E32E416F472
        Validity
            Not Before: Jul  3 06:22:06 2024 GMT
            Not After : Jul  2 06:27:06 2025 GMT
        Subject: CN=35AC22D994F345CE81BEF7A5D5D1F6B0D21262D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9a:b3:00:c3:c6:9c:88:a2:1e:c8:94:c4:85:
                    3e:f0:78:12:dd:ec:7b:eb:66:cf:60:b0:9c:5d:81:
                    3c:8b:f1:59:4c:fd:63:62:f4:e4:b4:d8:3b:0d:23:
                    c7:e6:c8:72:84:cf:01:5d:3c:bc:19:67:d4:13:bb:
                    72:33:a8:6c:df:12:19:4c:ee:7e:01:73:5c:6d:b7:
                    cb:9f:e6:46:64:6f:f4:57:80:f8:4e:5a:5b:dd:5d:
                    6e:d6:12:07:28:ad:7a:c6:69:55:28:52:c7:31:a8:
                    c4:6e:39:a0:17:5a:fe:d2:df:74:ce:88:74:0d:6d:
                    01:4f:17:ef:68:ea:af:f8:38:57:02:b4:d9:83:cf:
                    01:a5:f3:68:0e:5f:81:82:b7:fc:a1:3f:6d:f8:09:
                    5d:21:3a:0a:91:0c:98:01:16:d5:b1:bb:74:de:47:
                    21:e4:e5:95:88:07:ba:e1:aa:78:c6:2f:35:08:05:
                    22:da:52:91:19:e9:07:94:7d:40:0e:31:99:82:02:
                    11:02:66:db:7e:2a:b0:83:49:8b:8e:00:95:5c:0c:
                    bd:75:b0:df:4d:61:54:05:a3:20:cb:14:b7:12:b9:
                    75:20:d7:29:68:b5:ff:26:ba:9e:8e:75:bd:57:8a:
                    ac:c7:e3:33:27:fd:1e:41:32:87:84:78:b0:0d:b4:
                    c5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AC:22:D9:94:F3:45:CE:81:BE:F7:A5:D5:D1:F6:B0:D2:12:62:D4
            X509v3 Authority Key Identifier:
                keyid:6B:B3:89:B1:DC:AB:C9:FD:D0:74:CA:BD:CD:34:1E:32:E4:16:F4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/6BB389B1DCABC9FDD074CABDCD341E32E416F472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/8/6BB389B1DCABC9FDD074CABDCD341E32E416F472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/3134392e3131322e35332e302f32342d3234203d3e2037373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:01:29:f9:14:8a:5c:c7:6b:cb:4a:a7:5b:b6:bd:30:05:e2:
         61:f0:9d:2e:55:ff:19:4d:9b:6f:4b:ca:4b:81:a2:b0:84:f8:
         63:96:eb:ee:c7:26:a4:0d:b2:70:21:57:41:a7:d8:f7:81:44:
         35:74:8b:89:be:b7:25:29:4f:c8:13:3d:0c:05:80:36:81:89:
         36:e8:6a:7f:b0:63:aa:c2:fa:24:0f:5c:22:29:13:75:c7:24:
         37:fa:79:46:d1:11:70:4c:75:ea:87:76:82:84:59:10:3d:0d:
         95:34:26:c3:bc:aa:d1:18:fd:98:30:15:92:e4:0c:6c:fe:8e:
         60:2b:68:21:f2:ba:16:50:d1:62:ca:1e:ed:b7:37:de:e1:dd:
         cf:ea:30:81:41:44:5c:c8:e9:6f:69:cb:b4:c8:fe:17:fe:ac:
         e4:c3:44:8c:15:1d:8d:94:e3:6c:aa:4a:66:25:80:66:cf:06:
         99:cd:37:e8:e2:8b:ec:c2:f9:2e:2d:e5:56:87:7e:75:cd:1a:
         fa:fe:39:04:c7:fe:49:9b:49:2c:99:ba:87:5c:57:e3:3b:c8:
         39:a7:98:15:78:b9:b5:6f:b8:a3:3d:f2:92:1b:4e:21:76:77:
         6e:7b:64:68:03:a2:41:9f:cf:a6:cf:c5:45:f7:95:d8:fb:17:
         4f:06:cf:6e
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUVCRfbBmhPPzUWB2PpGq4xmGtxjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJCMzg5QjFEQ0FCQzlGREQwNzRDQUJEQ0QzNDFFMzJF
NDE2RjQ3MjAeFw0yNDA3MDMwNjIyMDZaFw0yNTA3MDIwNjI3MDZaMDMxMTAvBgNV
BAMTKDM1QUMyMkQ5OTRGMzQ1Q0U4MUJFRjdBNUQ1RDFGNkIwRDIxMjYyRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/mrMAw8aciKIeyJTEhT7weBLd
7HvrZs9gsJxdgTyL8VlM/WNi9OS02DsNI8fmyHKEzwFdPLwZZ9QTu3IzqGzfEhlM
7n4Bc1xtt8uf5kZkb/RXgPhOWlvdXW7WEgcorXrGaVUoUscxqMRuOaAXWv7S33TO
iHQNbQFPF+9o6q/4OFcCtNmDzwGl82gOX4GCt/yhP234CV0hOgqRDJgBFtWxu3Te
RyHk5ZWIB7rhqnjGLzUIBSLaUpEZ6QeUfUAOMZmCAhECZtt+KrCDSYuOAJVcDL11
sN9NYVQFoyDLFLcSuXUg1ylotf8mup6Odb1XiqzH4zMn/R5BMoeEeLANtMVPAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUNawi2ZTzRc6Bvvel1dH2sNISYtQwHwYDVR0j
BBgwFoAUa7OJsdyryf3QdMq9zTQeMuQW9HIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvNy82QkIzODlCMURD
QUJDOUZERDA3NENBQkRDRDM0MUUzMkU0MTZGNDcyLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzgvNkJC
Mzg5QjFEQ0FCQzlGREQwNzRDQUJEQ0QzNDFFMzJFNDE2RjQ3Mi5jZXIwgaAGCCsG
AQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC83LzMxMzQzOTJlMzEzMTMyMmUzNTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzczNzMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACVcDUwDQYJKoZIhvcNAQELBQADggEBAF8BKfkU
ilzHa8tKp1u2vTAF4mHwnS5V/xlNm29LykuBorCE+GOW6+7HJqQNsnAhV0Gn2PeB
RDV0i4m+tyUpT8gTPQwFgDaBiTboan+wY6rC+iQPXCIpE3XHJDf6eUbREXBMdeqH
doKEWRA9DZU0JsO8qtEY/ZgwFZLkDGz+jmAraCHyuhZQ0WLKHu23N97h3c/qMIFB
RFzI6W9py7TI/hf+rOTDRIwVHY2U42yqSmYlgGbPBpnNN+jii+zC+S4t5VaHfnXN
Gvr+OQTH/kmbSSyZuodcV+M7yDmnmBV4ubVvuKM98pIbTiF2d257ZGgDokGfz6bP
xUX3ldj7F08Gz24=
-----END CERTIFICATE-----
Generated at Mon Jul 8 15:30:37 2024 by rpki-client on console-fra.rpki-client.org