Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5D2D73B6B32811EBACAA9811F8AEA228.roa
File:                     5D2D73B6B32811EBACAA9811F8AEA228.roa (raw, json)
Hash identifier:          FZ9y7VqLRHtBXktYCoep2RUTLxtM3eiApvuHnSyz6vo=
Subject key identifier:   13:48:FE:68:F0:13:2A:ED:59:1F:09:C7:C2:86:FA:2F:E1:1F:E7:6F
Certificate issuer:       /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial:       02E6
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5D2D73B6B32811EBACAA9811F8AEA228.roa
Signing time:             Wed 12 May 2021 13:45:51 +0000
ROA not before:           Wed 12 May 2021 13:45:44 +0000
ROA not after:            Tue 13 May 2025 13:45:44 +0000
asID:                     133847
IP address blocks:        192.142.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
                          rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 04 Jun 2024 00:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 742 (0x2e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
        Validity
            Not Before: May 12 13:45:44 2021 GMT
            Not After : May 13 13:45:44 2025 GMT
        Subject: CN=609bdc0f-0be8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:36:09:b2:2a:ff:9f:3f:98:22:6e:12:df:a6:
                    79:f6:cb:07:31:a9:0a:b8:c6:2e:c4:7a:f6:8c:c0:
                    60:f6:61:e4:8f:73:8a:3d:31:5f:59:95:62:72:8a:
                    0e:44:53:dd:d3:e0:88:89:99:40:40:44:be:31:7f:
                    b0:7e:e1:2d:c0:e1:50:7e:8b:9d:9e:dd:56:22:2a:
                    b1:81:18:5f:06:99:73:fc:d0:49:ff:8a:04:f5:ed:
                    2c:35:ff:d7:54:4c:5b:69:d5:6c:f5:dd:fc:aa:d4:
                    0a:9f:fe:6c:93:23:7b:a9:bf:b9:d1:44:aa:50:16:
                    8b:36:8b:5d:02:68:b2:fb:e4:33:a2:a0:fa:53:af:
                    e6:29:96:c0:5b:b0:52:57:8b:ce:d7:ea:da:b2:39:
                    b7:1d:b5:e9:8e:75:e0:50:5d:0c:76:38:0d:d4:9a:
                    80:07:1c:c6:cb:2a:41:ed:0d:30:f6:6e:20:d7:0b:
                    47:39:90:90:7d:af:2f:63:86:89:ba:3c:04:79:8d:
                    1b:ee:70:5d:87:4d:81:6d:37:3c:a5:14:90:e9:95:
                    79:d8:20:0f:c9:86:ea:03:67:c4:52:00:45:7f:58:
                    8a:7b:45:ed:30:37:91:7f:cf:59:e3:f6:62:c7:30:
                    9c:44:18:51:26:24:9f:08:9c:fe:8a:2d:bb:e7:91:
                    be:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:48:FE:68:F0:13:2A:ED:59:1F:09:C7:C2:86:FA:2F:E1:1F:E7:6F
            X509v3 Authority Key Identifier:
                keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/5D2D73B6B32811EBACAA9811F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.142.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ad:20:df:5a:78:3a:6c:db:e1:f0:37:fa:3c:33:69:f8:e9:f8:
         1e:d0:6d:8e:f1:e7:d6:88:fd:a2:3a:a4:cf:84:a8:70:b8:b5:
         c7:d1:bc:cc:1e:b8:42:2e:c7:d6:a4:45:11:83:cc:b9:ee:81:
         b1:98:f8:43:de:41:c0:1d:fe:c2:07:53:1a:99:2a:4f:7d:45:
         d1:07:25:04:6b:69:13:48:f4:49:9d:75:6a:72:8a:5b:4e:ca:
         c3:56:79:37:4e:36:21:d9:91:ae:04:dd:8c:49:e5:37:e5:eb:
         e4:6a:7d:c6:90:68:f9:32:e2:17:16:94:5f:e6:10:df:28:6d:
         09:a6:e3:26:49:e6:50:25:c5:b4:08:d8:db:93:a4:bc:db:b9:
         66:2f:fc:46:4d:a4:4c:f8:f5:ac:e9:94:b2:0a:00:d5:3e:05:
         35:e0:0d:df:60:58:05:70:04:fe:cb:86:01:d5:de:f3:95:b8:
         fc:8d:e3:2a:f1:3d:ff:c5:20:c2:38:81:28:b5:7c:dc:f2:57:
         50:aa:3a:d6:cd:8c:56:a9:36:22:1c:4c:49:bd:3f:d0:6f:67:
         a3:6e:0f:c4:56:05:38:be:05:69:ba:d2:3a:13:1f:ec:25:44:
         68:dd:62:64:b0:0f:80:22:3f:8f:5a:6b:df:94:dc:2b:e5:de:
         84:96:db:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:40 2024 by rpki-client on console-ams.rpki-client.org