Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/2844069E782B11EFBBB9D268762E951A.roa
File:                     2844069E782B11EFBBB9D268762E951A.roa (raw, json)
Hash identifier:          lvbgbCGhMPXk48qld0omu7UI7xIcHWWn2r28UwSXXQY=
Subject key identifier:   CB:E9:F8:7C:12:B8:88:82:02:E7:F7:97:9E:49:63:10:94:7A:63:80
Certificate issuer:       /CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Certificate serial:       0D
Authority key identifier: F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/2844069E782B11EFBBB9D268762E951A.roa
Signing time:             Sat 21 Sep 2024 15:07:03 +0000
ROA not before:           Sat 21 Sep 2024 15:06:59 +0000
ROA not after:            Wed 10 Sep 2031 15:06:59 +0000
asID:                     932
IP address blocks:        45.221.112.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
                          rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
        Validity
            Not Before: Sep 21 15:06:59 2024 GMT
            Not After : Sep 10 15:06:59 2031 GMT
        Subject: CN=66eee117-3e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a9:01:ae:04:5d:5b:42:90:7f:7f:07:8a:48:
                    19:05:9f:7d:5c:88:6a:7e:4d:10:56:1e:93:c5:bc:
                    1a:0b:e6:eb:66:8d:00:24:c2:9a:9a:2e:7c:50:36:
                    56:4a:c2:ae:22:61:d6:47:25:a5:82:6f:31:9f:b2:
                    ed:a5:2f:1f:fd:73:5e:94:55:a4:63:7c:3f:26:51:
                    5e:47:42:16:62:1b:78:37:ea:50:03:25:1e:6a:6c:
                    d4:d3:79:c6:11:94:86:d4:8f:78:bf:b8:76:b4:c1:
                    ad:22:62:0e:06:f8:98:bb:41:84:44:83:02:32:4b:
                    ba:fc:d5:65:bf:78:d6:7d:46:41:c0:7d:6c:05:38:
                    5b:4d:7c:48:89:a8:f0:8a:ad:e1:b6:f8:5a:93:bf:
                    67:64:48:5d:42:96:6b:1c:19:94:bb:61:c6:71:4e:
                    be:ef:f2:9a:24:5e:e3:30:5c:d4:b0:9c:42:8a:9d:
                    b0:89:68:13:42:68:68:b4:75:2e:15:db:cd:fb:28:
                    eb:6e:1a:58:10:aa:bd:42:c7:9d:0c:17:4c:36:34:
                    a0:3c:45:6c:02:17:bd:29:16:8f:1b:7b:d7:23:72:
                    d1:ec:9b:5b:49:16:88:df:d1:30:44:d8:10:fe:22:
                    a5:46:a9:93:37:4c:6e:c8:d3:ee:43:60:c2:37:bb:
                    f2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:E9:F8:7C:12:B8:88:82:02:E7:F7:97:9E:49:63:10:94:7A:63:80
            X509v3 Authority Key Identifier:
                keyid:F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/2844069E782B11EFBBB9D268762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:76:7f:2f:11:2b:0e:81:93:e6:dc:89:ca:0d:6b:08:9a:81:
         1a:57:ad:e4:be:62:42:7a:ca:b2:3b:42:de:31:a1:e4:f0:ad:
         b6:74:c9:58:63:8c:0c:5f:46:63:30:f8:ed:05:b5:c9:38:e0:
         01:2c:88:ee:a1:58:04:2d:fb:7b:55:27:1d:8b:9d:43:a9:63:
         45:1f:0f:18:cd:27:96:88:67:96:8d:01:5b:9d:90:0d:3c:a4:
         bd:38:76:ca:9b:ed:3f:1e:d1:d6:06:d1:38:37:27:43:9c:d5:
         a6:3d:a5:e7:0d:c6:2b:51:c0:68:c4:f8:72:e7:10:72:41:31:
         38:f4:aa:da:6f:84:eb:d0:4b:bd:53:c2:aa:4d:27:31:46:b0:
         1a:59:a7:8d:75:9d:ef:d3:e6:67:20:39:5b:06:02:92:03:ba:
         e9:db:16:46:8f:67:f5:8e:99:28:89:85:fa:dc:28:78:9b:18:
         d3:50:e4:35:3e:3b:9d:89:e5:6b:d7:2f:94:e8:f3:69:5c:22:
         50:7e:21:20:df:93:18:f9:9a:01:e8:37:97:eb:2e:59:0f:22:
         a9:2b:83:c2:ad:91:fd:26:fb:c5:5f:5b:45:9c:27:88:7d:07:
         a3:60:41:fb:93:e9:65:b1:91:03:60:41:c6:ec:67:50:18:8e:
         af:ea:1b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:33 2024 by rpki-client on console-ams.rpki-client.org