Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/32332e3134392e3234382e302f32342d3234203d3e20323032373336.roa
File:                     32332e3134392e3234382e302f32342d3234203d3e20323032373336.roa (raw, json)
Hash identifier:          7ngXenXstzuKfat7y91sIOYaOMD7UK912rowtLW8Fjo=
Subject key identifier:   2C:FC:4C:C8:A5:5D:55:4B:ED:D3:FB:1D:42:21:8C:F2:00:D5:7F:65
Certificate issuer:       /CN=6BB389B1DCABC9FDD074CABDCD341E32E416F472
Certificate serial:       766A306E573C914D4534A7078D62DFA4FB7672F9
Authority key identifier: 6B:B3:89:B1:DC:AB:C9:FD:D0:74:CA:BD:CD:34:1E:32:E4:16:F4:72
Authority info access:    rsync://dev.tw/rpki/August/8/6BB389B1DCABC9FDD074CABDCD341E32E416F472.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/32332e3134392e3234382e302f32342d3234203d3e20323032373336.roa
Signing time:             Thu 20 Jun 2024 05:23:01 +0000
ROA not before:           Thu 20 Jun 2024 05:18:01 +0000
ROA not after:            Thu 19 Jun 2025 05:23:01 +0000
asID:                     202736
IP address blocks:        23.149.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/6BB389B1DCABC9FDD074CABDCD341E32E416F472.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/6BB389B1DCABC9FDD074CABDCD341E32E416F472.mft
                          rsync://dev.tw/rpki/August/8/6BB389B1DCABC9FDD074CABDCD341E32E416F472.cer
                          rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.crl
                          rsync://dev.tw/rpki/August/8/47C720D80918A769C2CFD8427C334EAE6483655D.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ad88ffb745cd7c6345cf0767db15133636cd54504.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Jul 2024 09:02:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:6a:30:6e:57:3c:91:4d:45:34:a7:07:8d:62:df:a4:fb:76:72:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6BB389B1DCABC9FDD074CABDCD341E32E416F472
        Validity
            Not Before: Jun 20 05:18:01 2024 GMT
            Not After : Jun 19 05:23:01 2025 GMT
        Subject: CN=2CFC4CC8A55D554BEDD3FB1D42218CF200D57F65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b0:09:66:42:c1:f4:2c:28:70:0b:2f:c9:4c:
                    ae:1b:ab:90:6d:92:34:cd:78:dc:4d:0c:e2:ab:3f:
                    b1:8a:be:39:ed:16:6c:5c:03:cd:6b:3f:40:77:99:
                    10:1c:e3:4c:a6:3b:0c:e5:40:64:c5:30:1c:f8:17:
                    2c:d5:9e:c0:74:02:91:d3:25:aa:9c:d7:36:ea:7e:
                    73:70:8b:69:71:55:63:d8:c3:bf:04:23:61:20:54:
                    fb:30:6c:5f:9c:0a:85:5f:15:84:e0:bb:a0:94:3b:
                    b5:14:88:74:a9:e5:fb:ca:17:cd:78:b8:e2:d3:6e:
                    71:75:7f:6a:36:45:7a:7f:cb:30:95:7b:ee:f0:89:
                    60:22:d0:9d:dd:d9:d8:d5:e2:30:33:40:75:bb:29:
                    ae:04:1b:cf:7f:1f:5c:fc:72:fb:2f:4d:ad:ef:06:
                    b0:40:04:18:b9:ef:6c:14:e9:16:09:15:a1:05:80:
                    68:dc:37:63:9f:26:92:ea:1f:79:69:de:e8:91:34:
                    dd:87:fe:75:00:5f:b6:92:13:b0:27:64:76:79:1c:
                    95:3b:54:02:34:ab:46:b2:25:fb:4f:a4:b3:c8:a9:
                    8e:dc:00:08:4f:49:fe:86:62:a9:43:a8:f0:ce:c6:
                    04:bd:b0:ff:96:c8:58:8b:d7:62:89:be:d0:f8:de:
                    be:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FC:4C:C8:A5:5D:55:4B:ED:D3:FB:1D:42:21:8C:F2:00:D5:7F:65
            X509v3 Authority Key Identifier:
                keyid:6B:B3:89:B1:DC:AB:C9:FD:D0:74:CA:BD:CD:34:1E:32:E4:16:F4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/6BB389B1DCABC9FDD074CABDCD341E32E416F472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/8/6BB389B1DCABC9FDD074CABDCD341E32E416F472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/7/32332e3134392e3234382e302f32342d3234203d3e20323032373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:c1:ba:a3:7f:09:e2:a7:a9:8f:4c:1a:04:89:15:0b:6b:ac:
         1e:b2:8c:2b:c2:ec:f1:9e:97:d9:b0:b4:c7:89:34:d6:48:42:
         26:9b:05:e0:70:d6:ae:66:57:e5:2a:ac:46:9b:07:a5:b8:e2:
         72:49:aa:41:ff:82:fd:ee:8b:d9:61:f6:3d:99:32:23:1b:e8:
         df:95:b3:7c:97:87:67:c2:6f:d2:5b:9e:cd:db:ad:b3:71:8e:
         3c:ca:9e:5c:0f:43:b3:c4:de:51:cf:fd:5c:07:6c:aa:4e:a0:
         ea:a6:41:4e:4e:30:fe:e6:41:a5:ad:ad:9c:63:c0:5f:26:14:
         a0:d9:8f:ca:b7:6a:b8:df:77:08:13:02:86:9a:09:04:2a:9b:
         ac:8b:2a:09:2b:27:b9:1f:3c:59:a7:4e:39:4d:d1:2e:07:cd:
         ac:00:d5:80:93:a9:39:49:85:80:61:52:01:06:45:83:04:87:
         d1:78:43:22:34:f3:49:ff:21:70:e5:00:6b:bc:61:3f:49:57:
         5e:d2:53:18:ab:3f:b3:c6:58:87:65:37:5e:d7:2c:ac:2b:3d:
         23:dd:b0:66:b4:72:b4:7b:66:a3:1c:70:af:73:80:ce:f4:44:
         ec:0a:82:28:3d:ec:21:cf:60:94:3e:17:7b:2b:f8:28:47:e6:
         eb:e8:49:0e
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIUdmowblc8kU1FNKcHjWLfpPt2cvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkJCMzg5QjFEQ0FCQzlGREQwNzRDQUJEQ0QzNDFFMzJF
NDE2RjQ3MjAeFw0yNDA2MjAwNTE4MDFaFw0yNTA2MTkwNTIzMDFaMDMxMTAvBgNV
BAMTKDJDRkM0Q0M4QTU1RDU1NEJFREQzRkIxRDQyMjE4Q0YyMDBENTdGNjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsAlmQsH0LChwCy/JTK4bq5Bt
kjTNeNxNDOKrP7GKvjntFmxcA81rP0B3mRAc40ymOwzlQGTFMBz4FyzVnsB0ApHT
Jaqc1zbqfnNwi2lxVWPYw78EI2EgVPswbF+cCoVfFYTgu6CUO7UUiHSp5fvKF814
uOLTbnF1f2o2RXp/yzCVe+7wiWAi0J3d2djV4jAzQHW7Ka4EG89/H1z8cvsvTa3v
BrBABBi572wU6RYJFaEFgGjcN2OfJpLqH3lp3uiRNN2H/nUAX7aSE7AnZHZ5HJU7
VAI0q0ayJftPpLPIqY7cAAhPSf6GYqlDqPDOxgS9sP+WyFiL12KJvtD43r7lAgMB
AAGjggIlMIICITAdBgNVHQ4EFgQULPxMyKVdVUvt0/sdQiGM8gDVf2UwHwYDVR0j
BBgwFoAUa7OJsdyryf3QdMq9zTQeMuQW9HIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvNy82QkIzODlCMURD
QUJDOUZERDA3NENBQkRDRDM0MUUzMkU0MTZGNDcyLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzgvNkJC
Mzg5QjFEQ0FCQzlGREQwNzRDQUJEQ0QzNDFFMzJFNDE2RjQ3Mi5jZXIwgaQGCCsG
AQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC83LzMyMzMyZTMxMzQzOTJlMzIzNDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzIzMDMyMzczMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5X4MA0GCSqGSIb3DQEBCwUAA4IBAQBK
wbqjfwnip6mPTBoEiRULa6wesowrwuzxnpfZsLTHiTTWSEImmwXgcNauZlflKqxG
mweluOJySapB/4L97ovZYfY9mTIjG+jflbN8l4dnwm/SW57N262zcY48yp5cD0Oz
xN5Rz/1cB2yqTqDqpkFOTjD+5kGlra2cY8BfJhSg2Y/Kt2q433cIEwKGmgkEKpus
iyoJKye5HzxZp045TdEuB82sANWAk6k5SYWAYVIBBkWDBIfReEMiNPNJ/yFw5QBr
vGE/SVde0lMYqz+zxliHZTde1yysKz0j3bBmtHK0e2ajHHCvc4DO9ETsCoIoPewh
z2CUPhd7K/goR+br6EkO
-----END CERTIFICATE-----
Generated at Sun Jul 7 21:08:11 2024 by rpki-client on console-ams.rpki-client.org