Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C15EEF6C451711EEA7AFF5864AD9E6FC.roa
File:                     C15EEF6C451711EEA7AFF5864AD9E6FC.roa (raw, json)
Hash identifier:          GqAWzGGHdoTgxq6YbzVjMAu2ar4lZp3xDmRXQRxNiew=
Subject key identifier:   B6:CB:80:6F:3D:EA:73:F1:E1:00:15:FD:A2:13:7C:D4:87:C2:6F:81
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0BD6
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C15EEF6C451711EEA7AFF5864AD9E6FC.roa
Signing time:             Sun 27 Aug 2023 20:24:43 +0000
ROA not before:           Sun 27 Aug 2023 20:24:38 +0000
ROA not after:            Sun 25 Aug 2024 20:24:38 +0000
asID:                     212738
IP address blocks:        161.123.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3030 (0xbd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug 27 20:24:38 2023 GMT
            Not After : Aug 25 20:24:38 2024 GMT
        Subject: CN=64ebb10b-6f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6e:2e:28:d7:b9:eb:28:5e:b0:fc:93:36:49:
                    08:8c:0e:69:4f:8a:cf:13:c9:51:18:fe:8c:7e:0e:
                    9d:4a:69:00:8a:21:31:6c:a5:7e:b0:7d:0b:b7:3d:
                    55:82:3c:38:06:bb:ef:2e:f4:dd:7c:ba:f9:11:18:
                    93:0b:57:03:84:e3:94:e2:18:83:3c:78:bc:4a:e6:
                    5e:d0:93:cd:2b:8e:b7:40:ce:f5:0a:a7:92:38:a7:
                    6b:e9:f8:68:e5:45:38:3f:9e:b2:9b:1e:0e:92:df:
                    04:96:f5:f1:53:61:e5:e9:8a:ff:91:1e:ba:17:d0:
                    07:5a:20:77:0b:5b:72:35:45:e9:e3:46:e9:a8:07:
                    3f:d7:f2:ba:c3:39:93:32:31:59:86:85:94:d3:37:
                    5d:24:b7:d9:09:ad:c1:f4:c1:54:8a:1c:be:f5:a8:
                    30:88:d8:85:08:23:73:af:30:f4:31:0c:ab:e8:b8:
                    71:de:9d:cf:65:fc:b5:0a:87:51:cd:6f:09:90:c4:
                    09:4d:7b:4f:49:c5:23:d6:98:2c:10:3d:67:99:f4:
                    34:c6:45:56:57:f4:bc:ae:63:41:fa:52:57:f6:93:
                    e7:d8:96:93:83:5b:76:1f:47:a5:49:d0:62:d4:aa:
                    a4:02:56:ae:0d:f0:58:05:d1:81:83:e5:9e:53:83:
                    b5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CB:80:6F:3D:EA:73:F1:E1:00:15:FD:A2:13:7C:D4:87:C2:6F:81
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/C15EEF6C451711EEA7AFF5864AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:4c:f1:21:7b:1b:ff:55:c3:ca:94:7c:df:39:9f:79:68:ac:
         7d:bb:5d:fe:f7:5a:de:6f:07:fa:b1:e7:9f:29:b7:39:a3:f2:
         1d:d5:2c:e6:ef:1c:98:41:1a:29:9a:8c:01:b2:8e:df:67:fc:
         e0:a3:5e:87:26:74:09:3f:75:e2:52:6c:d3:72:ab:f7:ca:09:
         e8:d8:00:98:21:65:1f:0b:2a:8a:85:21:d8:f1:eb:15:80:ca:
         12:3f:d7:0a:cf:ee:04:94:cc:aa:65:4e:3d:51:87:c6:f6:30:
         16:7a:ff:68:a6:00:a0:01:40:fe:a2:c8:3d:1d:22:ee:e7:6b:
         ee:a8:01:f5:5f:41:61:83:af:ae:41:fc:fe:32:d0:03:d3:90:
         63:df:a0:68:58:22:98:56:db:33:33:3c:e2:dc:84:81:40:7b:
         4f:05:68:3e:4a:68:30:24:3b:8c:fe:1a:4a:85:42:f0:59:bf:
         cb:d0:a6:52:fd:78:15:4c:88:17:5c:c0:84:0f:0b:b0:b5:b1:
         1f:71:57:03:b1:01:82:28:b2:75:f2:71:3e:5a:e5:6b:d4:40:
         96:1d:77:c5:5c:a5:0c:39:1f:2c:a7:98:19:58:f6:02:cd:be:
         4c:f9:53:5c:06:28:4c:88:11:d3:e7:11:bf:90:f2:70:e1:cb:
         52:ea:52:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:04:07 2024 by rpki-client on console-ams.rpki-client.org