Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/6A068618782D11EFA6D4A078762E951A.roa
File:                     6A068618782D11EFA6D4A078762E951A.roa (raw, json)
Hash identifier:          chV4S9m3KoPgfqu5cP7sLILuVr+qgeQ1n/geuKlaFME=
Subject key identifier:   C9:68:97:63:B2:C1:54:BB:29:70:67:AC:B3:3C:2B:7F:90:AB:B0:90
Certificate issuer:       /CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
Certificate serial:       0F
Authority key identifier: F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/6A068618782D11EFA6D4A078762E951A.roa
Signing time:             Sat 21 Sep 2024 15:23:12 +0000
ROA not before:           Sat 21 Sep 2024 15:23:08 +0000
ROA not after:            Wed 27 Sep 2028 15:23:08 +0000
asID:                     140869
IP address blocks:        45.221.96.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.mft
                          rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Oct 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644574AR/serialNumber=F608628A4682F553804AF3AB2E58A19C30A8ADD2
        Validity
            Not Before: Sep 21 15:23:08 2024 GMT
            Not After : Sep 27 15:23:08 2028 GMT
        Subject: CN=66eee4e0-069b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:89:cc:35:bb:2c:7d:f8:09:75:99:35:a5:29:
                    aa:37:2f:26:c7:b2:c7:20:2e:b5:37:e1:25:25:f7:
                    82:93:c1:c2:0d:ad:d9:84:ef:fb:c6:d0:bb:04:60:
                    32:df:ea:c6:1c:a3:54:03:9b:94:38:30:70:5f:1c:
                    03:6c:cc:06:f4:f9:1c:e0:5f:13:9b:03:17:e2:5c:
                    6e:86:bb:26:a9:e0:87:c8:49:38:52:83:f4:45:52:
                    d7:2a:3c:ec:ae:9c:be:8c:33:5c:01:2b:a8:bb:99:
                    a3:eb:e6:9e:82:10:e5:03:44:70:4d:b5:02:31:94:
                    b2:7c:03:e7:b8:6a:e1:08:46:2f:0e:43:b6:28:b8:
                    0f:f1:c4:4f:cf:6f:e7:76:79:39:82:d0:c5:5e:e5:
                    c6:3a:1d:5b:11:cb:fb:4b:93:01:93:15:51:4b:c6:
                    73:65:21:6b:48:bb:dc:ad:4c:5d:26:b0:af:02:ca:
                    8e:e7:9b:9b:dc:8e:44:1a:6f:1a:ab:56:7f:ff:16:
                    b4:ee:33:13:97:8b:b1:f2:e0:fe:47:ed:91:9a:fa:
                    f8:c1:3b:ff:20:ad:9f:ad:36:71:6f:51:40:ba:7d:
                    cf:8c:2c:2c:28:f4:b5:8a:5f:95:95:ba:64:c3:ed:
                    43:7c:45:33:3f:7f:ab:0d:05:f6:b6:2e:a7:6d:53:
                    8c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:68:97:63:B2:C1:54:BB:29:70:67:AC:B3:3C:2B:7F:90:AB:B0:90
            X509v3 Authority Key Identifier:
                keyid:F6:08:62:8A:46:82:F5:53:80:4A:F3:AB:2E:58:A1:9C:30:A8:AD:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/9ghiikaC9VOASvOrLlihnDCordI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9ghiikaC9VOASvOrLlihnDCordI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/37DB92B2778011EFA6D72EB2762E951A/6A068618782D11EFA6D4A078762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.221.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:c8:c5:6f:94:e5:85:06:4d:55:76:75:f0:c6:c0:38:b3:18:
         76:9a:96:9b:a6:4c:a0:42:00:66:fe:e8:ac:83:e1:86:ad:90:
         89:d0:45:df:0a:4f:ea:df:fe:fa:ed:d4:7c:82:07:de:3c:60:
         c0:48:57:90:19:6b:a1:5b:80:72:d8:9d:ee:a0:2a:8f:23:1d:
         7c:2b:b8:76:1e:68:14:53:8b:0b:9c:14:26:10:27:2e:ed:ff:
         dd:e3:13:28:22:cb:fe:8d:69:12:40:4b:38:79:55:d4:d0:9e:
         49:ac:65:8a:60:a7:7d:51:8f:bd:34:30:f6:6a:2e:95:80:d0:
         a7:d2:17:43:86:9c:e2:ac:90:96:3c:88:83:8e:8e:39:2c:9c:
         0d:2a:2e:d6:34:a0:66:01:1b:b4:a4:89:9c:3f:53:49:60:59:
         64:6d:44:65:d7:01:2b:19:7a:6b:29:ac:c4:fe:aa:61:63:d5:
         ad:54:c0:30:59:2f:56:6b:ea:b4:4c:b0:13:f2:d3:d2:d1:c7:
         03:83:38:81:09:74:e8:00:a5:09:d8:56:9d:e6:e6:8b:0e:e1:
         d5:0a:a6:ee:91:84:67:43:bb:3e:7b:cc:3e:a9:79:7d:53:64:
         00:05:82:a6:16:9a:7a:69:9f:5a:af:c0:ff:ed:37:4e:9b:1c:
         ca:af:da:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 07:10:17 2024 by rpki-client on console-ams.rpki-client.org