Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/32332e3135302e31312e302f32342d3234203d3e20343031313131.roa
File:                     32332e3135302e31312e302f32342d3234203d3e20343031313131.roa (raw, json)
Hash identifier:          J3cANwneO/jxG6N8k7OELsyNErEVWu3lWfo9XN40H4U=
Subject key identifier:   2C:7D:3F:1B:3F:F7:CA:11:3E:59:06:65:50:14:9B:1A:6F:36:C4:01
Certificate issuer:       /CN=D18C30FD7C3E8114B736EBDD27FE93C06763BDC6
Certificate serial:       135F41C3B0FC4C03505514D4881560112402A30A
Authority key identifier: D1:8C:30:FD:7C:3E:81:14:B7:36:EB:DD:27:FE:93:C0:67:63:BD:C6
Authority info access:    rsync://dev.tw/rpki/August/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/32332e3135302e31312e302f32342d3234203d3e20343031313131.roa
Signing time:             Thu 20 Jun 2024 05:23:06 +0000
ROA not before:           Thu 20 Jun 2024 05:18:06 +0000
ROA not after:            Thu 19 Jun 2025 05:23:06 +0000
asID:                     401111
IP address blocks:        23.150.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.mft
                          rsync://dev.tw/rpki/August/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.cer
                          rsync://dev.tw/rpki/August/9/97F0ECC307F1DF828AE127E2D0FBB134683D295A.crl
                          rsync://dev.tw/rpki/August/9/97F0ECC307F1DF828AE127E2D0FBB134683D295A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4c79797b7823c18000dac80ec47b61c3be4fc55132.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/46c07e76-66d8-48d7-826a-85de29c66a22.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/46c07e76-66d8-48d7-826a-85de29c66a22.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Jul 2024 02:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:5f:41:c3:b0:fc:4c:03:50:55:14:d4:88:15:60:11:24:02:a3:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D18C30FD7C3E8114B736EBDD27FE93C06763BDC6
        Validity
            Not Before: Jun 20 05:18:06 2024 GMT
            Not After : Jun 19 05:23:06 2025 GMT
        Subject: CN=2C7D3F1B3FF7CA113E59066550149B1A6F36C401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9a:e0:16:90:a5:f8:9e:09:b3:0c:60:0c:af:
                    59:5d:21:0d:41:48:77:61:44:bb:cd:70:76:2d:14:
                    f9:68:26:78:44:65:a5:11:8c:67:df:51:87:5b:01:
                    0a:e4:49:f2:34:5d:22:59:ca:a7:f9:9d:1d:dc:12:
                    d7:65:a8:bf:d8:e2:c4:28:16:02:34:9f:8f:b5:f3:
                    67:a6:9a:b6:bf:45:24:78:5b:a3:60:96:73:c9:74:
                    cd:4b:a5:9b:13:16:8e:bb:c2:d6:95:52:14:5c:e8:
                    db:ed:cc:0f:66:37:1d:0a:d2:d9:87:b8:8c:e2:67:
                    d1:85:56:ac:5d:03:b8:c2:b3:62:5f:75:91:ff:f7:
                    b4:69:c7:5d:13:19:8b:ec:b3:04:6b:38:29:18:cd:
                    9b:34:52:ba:87:8b:9d:79:23:85:cd:8c:46:29:e1:
                    ca:6b:d3:24:a4:76:58:2c:4c:23:bb:b0:18:4c:f0:
                    ff:dd:c9:c9:0c:9f:83:fc:ac:87:03:7d:dc:41:2f:
                    4e:40:b3:3a:e2:d7:9a:19:32:59:b4:11:c7:0b:26:
                    94:36:5f:a6:03:46:c4:cb:0b:14:e2:21:7c:82:21:
                    cf:59:e2:6e:f7:b0:7a:2b:ed:40:75:39:35:a2:3c:
                    a8:a1:0c:3c:0a:66:79:6e:14:9b:17:79:16:5c:e8:
                    cf:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7D:3F:1B:3F:F7:CA:11:3E:59:06:65:50:14:9B:1A:6F:36:C4:01
            X509v3 Authority Key Identifier:
                keyid:D1:8C:30:FD:7C:3E:81:14:B7:36:EB:DD:27:FE:93:C0:67:63:BD:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/9/D18C30FD7C3E8114B736EBDD27FE93C06763BDC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/9/32332e3135302e31312e302f32342d3234203d3e20343031313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:57:e3:3a:7c:41:dc:0f:9f:89:c5:a6:51:e8:4e:6a:9c:fe:
         79:43:c6:bf:1e:36:a1:02:47:ec:84:8e:b6:50:b5:91:b2:74:
         97:dc:93:73:b7:24:b5:e9:06:fd:78:d5:2e:c7:26:ad:19:71:
         b3:a0:2b:4d:ca:be:f5:f4:fc:07:41:7e:07:bc:90:42:0a:5d:
         b9:cb:0b:cf:b7:90:76:0e:1e:bc:37:44:e2:ba:e6:4e:94:4d:
         73:34:fa:fe:50:6f:d0:8c:c3:eb:b8:a7:a5:00:8f:d4:8c:94:
         6f:e2:00:a2:2d:b2:31:35:e8:59:f4:7a:ff:9b:93:5c:d4:c4:
         70:f0:ee:70:3b:9e:73:a0:90:06:4b:0e:77:bb:d0:90:42:01:
         b7:2a:60:c0:85:bd:26:8f:8f:56:07:11:eb:c4:69:e5:22:d2:
         5c:c5:c3:05:1f:cc:bd:fb:81:70:36:0b:f4:bb:de:89:be:47:
         e6:ff:bb:31:92:25:06:d6:65:32:db:7c:3c:53:c8:0a:21:d4:
         02:7f:8f:83:a8:4c:7d:8b:90:43:48:e5:da:2b:0d:9a:10:4a:
         db:cd:09:4e:a8:db:d3:f4:d7:b0:a2:c0:cf:e6:dc:9c:b2:88:
         5a:d5:39:eb:33:ab:9a:cb:f7:18:4b:23:2c:c0:ed:f0:fa:37:
         0c:7e:4e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 13:35:44 2024 by rpki-client on console-ams.rpki-client.org