Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7A50D1041FE611EEAD9B54564AD9E6FC.roa
File:                     7A50D1041FE611EEAD9B54564AD9E6FC.roa (raw, json)
Hash identifier:          L5ERZJKo4CrH+fBI4l72dn45H0rcn9VXGQuh12uIr+4=
Subject key identifier:   2A:77:6F:5B:2E:5F:78:88:2C:F9:44:71:B5:B6:64:04:9C:76:4A:D6
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0B51
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7A50D1041FE611EEAD9B54564AD9E6FC.roa
Signing time:             Tue 11 Jul 2023 12:28:45 +0000
ROA not before:           Tue 11 Jul 2023 12:28:42 +0000
ROA not after:            Thu 11 Jul 2024 12:28:42 +0000
asID:                     133499
IP address blocks:        161.123.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2897 (0xb51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jul 11 12:28:42 2023 GMT
            Not After : Jul 11 12:28:42 2024 GMT
        Subject: CN=64ad4afd-17d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:40:fe:02:66:dd:8a:a8:76:9a:f6:2f:bb:17:
                    f8:71:4d:29:4f:97:99:d0:49:f1:06:95:12:d9:89:
                    1d:3b:15:49:80:1b:ea:f8:75:da:5a:b4:13:f7:4a:
                    bf:dd:71:a0:b4:db:bf:a0:01:99:42:71:0e:3c:b3:
                    3c:f0:02:aa:fa:50:43:78:e2:1a:eb:01:c9:f1:97:
                    38:52:1e:e1:11:62:42:4d:7b:ed:31:42:2a:af:e4:
                    4a:3c:05:a3:68:af:22:d1:8c:17:38:70:b9:60:22:
                    d8:f8:a3:39:a2:2f:42:ae:ed:f1:d2:15:70:c7:aa:
                    25:61:53:b5:a3:26:41:0e:4e:16:aa:0a:c9:f4:37:
                    b0:3b:e0:e3:5d:97:0c:2e:df:4f:63:79:d9:c5:84:
                    00:10:86:79:4d:e8:0e:5b:1e:c5:6b:7e:6b:92:80:
                    40:88:1d:b5:62:61:f4:46:9f:db:1c:2f:b9:ac:c9:
                    72:75:7a:53:a0:50:42:2d:07:e3:ee:59:fd:62:8f:
                    c5:31:c4:8e:6b:b6:f8:cf:b8:48:1a:13:63:1d:48:
                    7f:13:09:64:b1:05:aa:bb:81:ff:01:b0:d2:14:7b:
                    f2:c9:36:f5:83:5d:43:e9:5a:9d:e8:2f:cf:00:dd:
                    fe:cd:44:d3:05:6c:f7:99:bc:4b:05:a0:80:d3:e4:
                    c6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:77:6F:5B:2E:5F:78:88:2C:F9:44:71:B5:B6:64:04:9C:76:4A:D6
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7A50D1041FE611EEAD9B54564AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:78:96:5d:55:c8:20:9e:6f:13:36:83:66:aa:b3:20:bc:c9:
         70:77:60:e9:30:6f:d1:1f:8f:c3:7c:49:58:fe:62:06:63:d4:
         1a:45:1c:5d:a4:9e:65:79:2e:e2:f5:d1:53:d9:7b:6c:5d:c4:
         23:69:20:00:b4:94:47:c7:97:3e:d8:00:e5:e8:95:b4:8e:e2:
         80:a4:58:55:3e:cf:b0:99:83:3d:95:84:f5:ab:09:58:6c:b4:
         78:8c:7b:4a:7f:75:32:23:e7:96:d3:e8:38:9c:d0:5a:b9:52:
         22:40:3c:6d:5d:e1:e0:28:60:72:79:0c:44:84:56:58:59:52:
         4c:cd:66:1f:e0:d7:19:93:c8:5c:3e:76:f0:b9:e8:7e:85:1a:
         c5:bf:4d:4f:62:2d:a4:93:0a:06:59:62:20:60:90:e1:12:ef:
         e2:82:ee:56:72:ef:86:2e:c7:88:a6:dd:b3:9a:02:c6:ef:1d:
         6e:39:55:09:e5:87:65:00:7f:68:41:af:5e:48:b7:3b:44:30:
         25:bc:ab:f8:90:fd:23:ae:79:36:ba:1c:ce:4a:a3:97:7f:f8:
         89:2c:1a:3d:c3:94:d6:e8:07:6c:16:ab:41:23:64:56:21:b8:
         3a:25:b6:1c:c5:cf:dc:03:3f:30:5b:68:d6:12:66:83:10:6f:
         8b:43:26:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:28 2024 by rpki-client on console-fra.rpki-client.org