Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/8/32332e3134392e3135322e302f32342d3234203d3e20323132383935.roa
File:                     32332e3134392e3135322e302f32342d3234203d3e20323132383935.roa (raw, json)
Hash identifier:          JYf0onTxJeU8CCCH3S3XXAs4PbLdIxgxzBOzr3Q2eJk=
Subject key identifier:   F1:E3:A2:B6:A2:55:30:B6:87:66:90:2F:E9:71:D6:5E:F9:2C:12:A7
Certificate issuer:       /CN=BC4F1527A35AD66A653E112A8738D6435D525513
Certificate serial:       3C43366B4EE95E53C95E809BE4049EC9ED24566C
Authority key identifier: BC:4F:15:27:A3:5A:D6:6A:65:3E:11:2A:87:38:D6:43:5D:52:55:13
Authority info access:    rsync://dev.tw/rpki/August/4/BC4F1527A35AD66A653E112A8738D6435D525513.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/8/32332e3134392e3135322e302f32342d3234203d3e20323132383935.roa
Signing time:             Thu 20 Jun 2024 05:23:02 +0000
ROA not before:           Thu 20 Jun 2024 05:18:02 +0000
ROA not after:            Thu 19 Jun 2025 05:23:02 +0000
asID:                     212895
IP address blocks:        23.149.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/8/BC4F1527A35AD66A653E112A8738D6435D525513.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/8/BC4F1527A35AD66A653E112A8738D6435D525513.mft
                          rsync://dev.tw/rpki/August/4/BC4F1527A35AD66A653E112A8738D6435D525513.cer
                          rsync://dev.tw/rpki/August/4/472CD8459E07B96A76A70CEBC0361E879014CF81.crl
                          rsync://dev.tw/rpki/August/4/472CD8459E07B96A76A70CEBC0361E879014CF81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16bd046654a2c5c02e899d0be89ca7bd188127a439.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/7a054d1e-8326-42a7-b1ad-02b30287b483.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/7a054d1e-8326-42a7-b1ad-02b30287b483.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jul 2024 11:31:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:43:36:6b:4e:e9:5e:53:c9:5e:80:9b:e4:04:9e:c9:ed:24:56:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC4F1527A35AD66A653E112A8738D6435D525513
        Validity
            Not Before: Jun 20 05:18:02 2024 GMT
            Not After : Jun 19 05:23:02 2025 GMT
        Subject: CN=F1E3A2B6A25530B68766902FE971D65EF92C12A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c2:e5:a0:82:f6:9e:e2:40:71:51:c1:87:2f:
                    ac:bd:b1:5a:ac:ca:ff:ab:5b:20:0b:2b:e3:64:27:
                    c0:a7:6f:03:63:4f:80:a7:4b:eb:49:58:20:e5:7d:
                    b5:e6:6e:21:f0:83:06:00:42:52:db:0e:bf:1a:68:
                    de:1f:f7:fa:3f:c4:7f:70:75:73:d1:8d:fe:4d:9d:
                    1b:31:95:d5:68:d6:5a:e3:1e:84:8e:d7:05:e2:a0:
                    6f:36:14:99:c5:cf:84:5e:17:67:48:df:19:14:05:
                    87:23:2c:15:dc:b5:de:a1:e4:45:5c:af:bc:c7:4e:
                    2f:ed:fd:5c:eb:f2:50:33:26:e0:61:50:10:e7:9d:
                    9f:85:ca:5a:6c:fa:2a:98:0a:0c:c4:ae:2b:dc:d6:
                    c1:d1:80:f3:c9:18:d3:0a:ce:f1:8a:52:31:36:03:
                    83:df:4f:f3:3f:fd:48:20:0e:ab:5b:ba:fb:91:1f:
                    78:ea:99:e7:88:d1:c6:a7:06:db:fe:aa:9e:78:e5:
                    c9:07:e5:f7:3e:5c:45:f7:6c:f7:ca:48:43:32:be:
                    e0:34:d9:c2:2b:fa:8c:a1:94:f8:5e:8a:dc:43:83:
                    f3:3a:ba:bd:61:f8:51:f1:bd:f9:67:8a:40:c8:af:
                    aa:11:1c:b7:7a:98:bb:57:84:75:a4:43:85:7d:39:
                    a3:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E3:A2:B6:A2:55:30:B6:87:66:90:2F:E9:71:D6:5E:F9:2C:12:A7
            X509v3 Authority Key Identifier:
                keyid:BC:4F:15:27:A3:5A:D6:6A:65:3E:11:2A:87:38:D6:43:5D:52:55:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/8/BC4F1527A35AD66A653E112A8738D6435D525513.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/4/BC4F1527A35AD66A653E112A8738D6435D525513.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/8/32332e3134392e3135322e302f32342d3234203d3e20323132383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:4c:db:87:58:85:be:7c:99:33:98:48:41:d6:94:de:43:22:
         0a:9d:82:6e:8d:73:77:b5:78:ac:20:70:c8:8c:0e:f5:2b:44:
         00:54:50:85:bb:91:02:a7:af:27:1b:31:a0:5f:8d:5b:ff:65:
         07:90:56:d9:67:d5:c9:00:9e:39:ac:31:86:8a:38:c6:da:e5:
         9a:6c:a8:67:ea:6d:94:68:9d:b9:8e:58:93:2d:32:d1:5d:94:
         d7:6a:03:71:44:08:94:35:aa:23:94:5d:9d:17:39:b9:bf:ee:
         4d:65:89:5c:69:cb:da:a6:d9:b7:7f:d9:cb:11:1e:cc:1d:9c:
         77:69:46:b9:f4:4d:60:f4:60:bf:de:05:0a:06:e8:32:d0:5a:
         e3:1d:5e:c9:03:b4:a8:f1:fc:c1:a6:c1:2c:8d:18:7a:e1:ac:
         91:b6:2d:c7:2b:8c:78:e3:65:6d:a4:58:0d:10:00:05:3a:e0:
         8a:67:4c:8e:15:f4:48:36:72:d7:54:de:84:a9:58:d4:21:ca:
         6f:24:13:22:8b:8c:eb:f2:82:88:74:ad:b0:14:1e:68:7d:dd:
         c0:39:70:2e:64:4b:6e:88:97:22:a3:43:8a:c6:78:29:60:5a:
         40:4e:aa:2a:a1:91:41:0b:a6:34:f8:44:83:17:53:c5:e8:f5:
         47:03:df:42
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgIUPEM2a07pXlPJXoCb5ASeye0kVmwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkM0RjE1MjdBMzVBRDY2QTY1M0UxMTJBODczOEQ2NDM1
RDUyNTUxMzAeFw0yNDA2MjAwNTE4MDJaFw0yNTA2MTkwNTIzMDJaMDMxMTAvBgNV
BAMTKEYxRTNBMkI2QTI1NTMwQjY4NzY2OTAyRkU5NzFENjVFRjkyQzEyQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjwuWggvae4kBxUcGHL6y9sVqs
yv+rWyALK+NkJ8CnbwNjT4CnS+tJWCDlfbXmbiHwgwYAQlLbDr8aaN4f9/o/xH9w
dXPRjf5NnRsxldVo1lrjHoSO1wXioG82FJnFz4ReF2dI3xkUBYcjLBXctd6h5EVc
r7zHTi/t/Vzr8lAzJuBhUBDnnZ+Fylps+iqYCgzErivc1sHRgPPJGNMKzvGKUjE2
A4PfT/M//UggDqtbuvuRH3jqmeeI0canBtv+qp545ckH5fc+XEX3bPfKSEMyvuA0
2cIr+oyhlPheitxDg/M6ur1h+FHxvflnikDIr6oRHLd6mLtXhHWkQ4V9OaMhAgMB
AAGjggIlMIICITAdBgNVHQ4EFgQU8eOitqJVMLaHZpAv6XHWXvksEqcwHwYDVR0j
BBgwFoAUvE8VJ6Na1mplPhEqhzjWQ11SVRMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvOC9CQzRGMTUyN0Ez
NUFENjZBNjUzRTExMkE4NzM4RDY0MzVENTI1NTEzLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzQvQkM0
RjE1MjdBMzVBRDY2QTY1M0UxMTJBODczOEQ2NDM1RDUyNTUxMy5jZXIwgaQGCCsG
AQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC84LzMyMzMyZTMxMzQzOTJlMzEzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIw
MzIzMTMyMzgzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5WYMA0GCSqGSIb3DQEBCwUAA4IBAQAO
TNuHWIW+fJkzmEhB1pTeQyIKnYJujXN3tXisIHDIjA71K0QAVFCFu5ECp68nGzGg
X41b/2UHkFbZZ9XJAJ45rDGGijjG2uWabKhn6m2UaJ25jliTLTLRXZTXagNxRAiU
NaojlF2dFzm5v+5NZYlcacvaptm3f9nLER7MHZx3aUa59E1g9GC/3gUKBugy0Frj
HV7JA7So8fzBpsEsjRh64ayRti3HK4x442VtpFgNEAAFOuCKZ0yOFfRINnLXVN6E
qVjUIcpvJBMii4zr8oKIdK2wFB5ofd3AOXAuZEtuiJcio0OKxngpYFpATqoqoZFB
C6Y0+ESDF1PF6PVHA99C
-----END CERTIFICATE-----
Generated at Thu Jul 4 19:51:52 2024 by rpki-client on console-fra.rpki-client.org