Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4ABB190CCBB11EEA8ADB781775412E6.roa
File:                     E4ABB190CCBB11EEA8ADB781775412E6.roa (raw, json)
Hash identifier:          2QI/kLRndOE7PUIWcsX5amUTYzhiQpSVl84XUUq2/tU=
Subject key identifier:   C6:95:C7:52:7C:F2:35:E7:D1:6B:72:D0:DC:B8:FB:00:2E:F6:A6:9C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       7129
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4ABB190CCBB11EEA8ADB781775412E6.roa
Signing time:             Fri 16 Feb 2024 11:09:46 +0000
ROA not before:           Fri 16 Feb 2024 11:09:43 +0000
ROA not after:            Fri 26 Apr 2024 11:09:43 +0000
asID:                     9009
IP address blocks:        156.246.53.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Apr 2024 11:09:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28969 (0x7129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 16 11:09:43 2024 GMT
            Not After : Apr 26 11:09:43 2024 GMT
        Subject: CN=65cf427a-7d6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8f:b2:5c:c6:f8:28:3a:e1:7f:52:4c:d7:d7:
                    1e:90:7b:b4:c2:82:d5:d2:dc:98:53:95:41:5f:4b:
                    84:0a:8c:f3:fc:3d:5e:3d:e5:b4:5c:a2:d7:f0:71:
                    b9:0d:dd:81:9a:84:8a:8e:b2:de:96:06:39:ef:6a:
                    29:7f:89:a3:e3:b3:f9:20:ff:3d:28:8b:62:68:a7:
                    ea:9b:d8:b7:93:57:2f:bd:7f:19:a4:7c:d1:19:02:
                    45:67:21:2d:ad:27:cd:4e:ab:fb:82:b4:3a:d9:4e:
                    f2:e0:d6:ab:52:8b:3f:18:32:4a:ae:63:7a:9f:f8:
                    72:c9:54:47:57:22:fe:56:0e:0d:90:e3:57:5f:e4:
                    c1:b0:0b:f4:fa:3b:c4:09:fe:81:d3:8f:41:15:ca:
                    8a:23:e0:2a:35:6e:9f:76:fd:1d:69:f5:15:23:84:
                    8d:2e:75:8f:63:7f:4f:a8:9b:8c:2b:ee:52:f9:cd:
                    c6:9b:65:4f:01:8e:00:54:33:c7:7f:07:ca:02:07:
                    21:b8:98:67:81:37:21:d3:ee:8e:62:f4:af:f1:ec:
                    f9:98:4e:65:e2:c9:1c:b4:d8:d2:e0:0e:e0:5c:43:
                    b4:0d:44:45:74:2f:67:a3:9b:88:42:44:ef:3a:cd:
                    10:f8:ca:59:91:78:01:76:2d:e0:1c:fb:cc:33:27:
                    db:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:95:C7:52:7C:F2:35:E7:D1:6B:72:D0:DC:B8:FB:00:2E:F6:A6:9C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4ABB190CCBB11EEA8ADB781775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:0e:20:de:5a:1b:5e:b5:bb:16:13:7c:cf:0e:f2:5e:03:8d:
         1a:c5:23:f8:0a:ab:2e:08:35:4f:6b:99:e3:f4:c5:42:57:94:
         c6:1c:79:e7:03:a5:34:d6:7d:86:8c:9c:ba:d9:07:b2:b2:63:
         58:97:db:e4:14:63:b8:ee:35:8a:6e:59:43:a9:a9:fc:90:05:
         fc:01:22:d8:29:2e:86:83:e5:09:a0:43:7a:58:1e:df:2f:53:
         4d:cd:b6:24:4b:93:e8:bd:92:06:7d:94:e1:9c:b6:04:f5:35:
         9d:be:0a:1a:94:f6:3c:04:2e:5c:78:25:cc:02:e7:b8:13:bb:
         b2:b2:d2:ed:ae:88:e1:8d:97:32:7a:8f:cc:62:88:cd:11:74:
         b3:1c:d5:2c:33:46:e2:5e:0c:e7:06:f1:25:b6:0c:6f:2a:c6:
         a1:2a:40:e6:aa:5a:7c:ea:4c:78:d0:ce:e3:96:3c:e0:69:0f:
         d9:0c:29:60:9b:9a:65:1b:d1:a0:22:c0:c1:98:a7:2a:53:fe:
         b5:1c:e9:44:1c:58:80:74:c1:d0:79:ef:49:ae:f6:54:33:7c:
         66:21:a6:1c:1b:9e:47:e9:ab:d6:06:d1:ef:77:73:7a:00:69:
         e1:55:a6:76:80:28:b8:01:e8:77:ab:93:63:a6:bf:03:c8:e3:
         63:d1:f6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:04 2024 by rpki-client on console-ams.rpki-client.org