Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/0F6973BCF78011ECBFA8DEA8F1222468.roa
File:                     0F6973BCF78011ECBFA8DEA8F1222468.roa (raw, json)
Hash identifier:          mJJMtAY7c+zgNQVb90dCvSJuzRPPfkWMc4DArN/T4Pg=
Subject key identifier:   E6:B2:B6:A9:06:F0:CC:E5:80:F0:0E:5A:0B:75:26:29:01:3F:60:6D
Certificate issuer:       /CN=F362C7E9AR/serialNumber=B97DC46099CD50FCF299DA5E82B005646984C4F3
Certificate serial:       0400
Authority key identifier: B9:7D:C4:60:99:CD:50:FC:F2:99:DA:5E:82:B0:05:64:69:84:C4:F3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/uX3EYJnNUPzymdpegrAFZGmExPM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/0F6973BCF78011ECBFA8DEA8F1222468.roa
Signing time:             Wed 29 Jun 2022 07:49:53 +0000
ROA not before:           Wed 29 Jun 2022 07:49:49 +0000
ROA not after:            Sat 29 Jun 2030 07:49:49 +0000
asID:                     206283
IP address blocks:        66.18.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.mft
                          rsync://rpki.afrinic.net/repository/arin/uX3EYJnNUPzymdpegrAFZGmExPM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1024 (0x400)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C7E9AR/serialNumber=B97DC46099CD50FCF299DA5E82B005646984C4F3
        Validity
            Not Before: Jun 29 07:49:49 2022 GMT
            Not After : Jun 29 07:49:49 2030 GMT
        Subject: CN=62bc0421-c500
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d6:75:b6:ee:f5:ab:7a:c6:77:27:f0:9e:8f:
                    e7:7b:3b:28:9d:b3:77:db:54:6c:a1:f5:08:4f:c8:
                    01:66:38:fe:eb:8b:43:01:bc:1c:e7:80:73:ff:cc:
                    db:a2:c7:2f:ff:fd:11:15:c1:78:cc:17:07:77:a1:
                    a0:c2:f4:63:38:ab:d9:12:12:80:7d:49:27:ce:6c:
                    11:65:d8:f8:8d:02:f4:7a:64:54:eb:b7:3a:17:c4:
                    d4:56:7c:c4:15:fe:f7:72:e3:bb:b1:08:33:91:40:
                    55:cb:28:bc:02:1e:0c:ef:0c:f5:f7:1e:1d:a0:66:
                    e2:07:ea:d2:27:50:97:f2:6f:f0:38:ac:e0:de:84:
                    0d:c0:25:bf:ca:99:eb:57:01:d5:60:9a:b2:63:05:
                    03:5e:85:d4:4d:34:60:86:fe:a8:68:d7:7f:c0:25:
                    55:d7:b9:96:4c:f7:5e:8d:d8:36:3e:77:5e:3b:4c:
                    4d:6c:8e:b6:de:d9:fb:6c:35:09:cb:e3:77:ed:ee:
                    da:98:43:f4:70:9a:f2:80:c6:93:b2:46:98:ed:5c:
                    85:a4:d1:ae:5d:72:73:15:59:00:22:9d:de:0b:d8:
                    68:bf:f2:9b:f8:20:7e:8f:22:92:5b:d1:3b:b0:c4:
                    cd:52:cb:8e:4c:55:71:e7:37:6e:ef:00:ef:05:fa:
                    f8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B2:B6:A9:06:F0:CC:E5:80:F0:0E:5A:0B:75:26:29:01:3F:60:6D
            X509v3 Authority Key Identifier:
                keyid:B9:7D:C4:60:99:CD:50:FC:F2:99:DA:5E:82:B0:05:64:69:84:C4:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/uX3EYJnNUPzymdpegrAFZGmExPM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uX3EYJnNUPzymdpegrAFZGmExPM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C7E9/08F07C14E8D911E98515C740F8AEA228/0F6973BCF78011ECBFA8DEA8F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.18.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:bc:fe:87:8b:40:5f:d5:74:39:a2:2c:5d:dd:ef:18:cb:14:
         3d:76:53:12:05:0d:ab:34:12:a7:52:5e:8a:ff:33:13:8c:db:
         20:44:af:b9:f0:94:73:51:62:e7:fd:a4:23:21:3c:bf:51:da:
         91:ca:b2:84:32:55:ac:6d:68:e6:73:fe:16:6a:a8:8d:2d:14:
         8d:07:04:8f:fa:66:a8:aa:81:75:18:2a:a3:62:06:f6:6a:8e:
         94:34:84:2d:c7:6a:44:34:c9:df:7d:e2:73:a5:99:ce:30:6c:
         c2:83:e7:15:2a:de:03:48:10:ed:03:1c:d3:9d:0d:fa:0e:5b:
         05:cb:9d:0a:9b:ea:18:f4:4a:4c:0b:79:df:99:83:d3:35:9e:
         27:0d:ac:cc:fe:a6:21:3f:63:ec:cd:97:ca:de:74:eb:83:f8:
         70:b6:56:4a:93:8e:36:8c:3d:9d:90:97:e4:c8:b2:84:d1:37:
         bd:d1:77:b6:fc:54:d8:e4:31:8b:e1:f1:dc:9e:fc:27:36:fc:
         cb:8b:58:ec:d0:43:dc:5a:86:b2:2d:48:7d:84:2e:68:1c:9b:
         35:00:a2:f7:12:53:8b:2e:03:6e:7c:9d:9c:0f:ee:7b:5f:c0:
         3d:fb:8b:00:5a:68:1c:8b:b8:f5:21:14:aa:57:62:56:a3:3f:
         35:94:a1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:03:36 2024 by rpki-client on console-fra.rpki-client.org