Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E62976DCCCBC11EEAB1F3783775412E6.roa
File:                     E62976DCCCBC11EEAB1F3783775412E6.roa (raw, json)
Hash identifier:          FR5XbPxgkWupKRgggPoZWPQ9bUnWWSF7bOf7wV/+qbo=
Subject key identifier:   AB:C1:A7:52:14:23:0F:E9:75:B0:5C:FD:4F:C0:42:45:F8:9A:BC:30
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       712F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E62976DCCCBC11EEAB1F3783775412E6.roa
Signing time:             Fri 16 Feb 2024 11:16:58 +0000
ROA not before:           Fri 16 Feb 2024 11:16:55 +0000
ROA not after:            Fri 26 Apr 2024 11:16:55 +0000
asID:                     9009
IP address blocks:        156.246.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Apr 2024 11:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28975 (0x712f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb 16 11:16:55 2024 GMT
            Not After : Apr 26 11:16:55 2024 GMT
        Subject: CN=65cf442a-34ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d7:08:d0:9d:3f:e2:cb:67:ce:a4:e7:20:cb:
                    d6:ae:56:77:aa:1f:88:9a:89:94:87:4e:93:8a:85:
                    e7:3c:d0:1b:13:a1:ea:b4:2c:9e:d6:5c:23:65:08:
                    e6:3b:ae:33:b1:a8:65:7d:f1:d3:a8:7c:b5:1f:c0:
                    ef:fc:51:d0:10:e8:8d:6f:f7:6c:c8:da:d3:c8:c9:
                    99:5d:b4:b6:46:a9:d4:42:18:48:2e:2c:fb:28:5f:
                    51:5e:27:be:9e:4b:4e:aa:45:bf:59:ec:3f:aa:cc:
                    49:82:7f:fe:da:44:0a:3a:80:a0:1e:00:34:59:10:
                    99:f4:24:ff:4b:78:d2:a7:88:53:2f:0b:6a:41:31:
                    d1:4e:49:b6:96:2c:fa:21:df:ff:41:d4:65:67:5b:
                    92:ee:64:4f:ba:ee:85:a2:51:2c:13:51:b4:f5:b1:
                    10:0e:d6:81:d3:00:ec:75:67:8b:88:3d:35:ee:3e:
                    88:2e:be:f1:cc:46:ba:7c:68:df:90:ce:b8:95:73:
                    5d:be:aa:03:3b:14:3d:5f:aa:e1:a5:6b:f6:92:8e:
                    5e:cc:94:a4:fb:0b:12:69:18:3d:c8:2f:31:70:bf:
                    4a:bf:08:3c:d6:af:30:a2:67:ca:36:c6:b9:f0:17:
                    7f:51:86:a1:87:89:cd:8d:bb:db:2c:81:1d:f2:3c:
                    a6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C1:A7:52:14:23:0F:E9:75:B0:5C:FD:4F:C0:42:45:F8:9A:BC:30
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E62976DCCCBC11EEAB1F3783775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.246.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:58:14:79:59:10:f9:87:33:e5:32:b8:b0:2a:ca:39:51:bb:
         cc:1d:6d:7d:6e:ee:0f:2d:09:18:d3:9d:af:4d:59:0d:a8:2d:
         9b:40:4c:85:99:83:81:02:28:b7:f1:92:c2:1d:35:d0:a8:21:
         5e:44:6d:e1:44:2b:b5:03:89:85:b7:4e:cb:eb:3d:45:16:80:
         66:df:f2:2b:28:78:14:57:2f:67:0c:4c:95:8f:0e:26:4d:17:
         e8:5a:84:29:8a:05:7a:c3:7f:dd:78:72:23:ac:de:60:49:80:
         b3:ac:54:56:9f:0b:3b:41:64:ef:13:18:7d:34:20:09:5c:2f:
         34:90:45:0e:7b:69:b6:b0:25:64:35:29:7b:45:cf:b9:c6:e4:
         e6:f3:16:81:f5:9a:c0:c7:aa:0e:fe:26:76:de:b7:56:f2:d8:
         97:cf:fe:3e:4e:b3:f1:3b:cc:48:6a:93:25:a9:24:6f:ec:78:
         88:6a:a3:ec:18:ee:81:0d:b8:7f:0b:aa:bc:33:77:80:cb:fe:
         3c:81:5e:0b:d6:fe:cb:61:36:19:cd:0f:d0:3e:b7:6f:2e:56:
         ee:53:c2:d2:1f:00:03:d7:46:c2:c3:08:5a:0c:9c:b5:16:d0:
         a0:80:6d:af:e4:e3:7b:77:0d:da:ab:1a:bf:18:6c:44:e5:0e:
         a7:9e:53:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 11:02:04 2024 by rpki-client on console-ams.rpki-client.org