Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5945C090B9F211EEBA0EBA9E775412E6.roa
File:                     5945C090B9F211EEBA0EBA9E775412E6.roa (raw, json)
Hash identifier:          1j32xqdKMZWFJVQJE1P7o8rvBk7SX5sBXtN8ABWBlGw=
Subject key identifier:   5C:41:26:67:29:ED:CA:28:D4:0C:22:AF:A1:8F:EF:B0:D6:E3:D7:3E
Certificate issuer:       /CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
Certificate serial:       023D
Authority key identifier: 09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5945C090B9F211EEBA0EBA9E775412E6.roa
Signing time:             Tue 23 Jan 2024 13:21:43 +0000
ROA not before:           Tue 23 Jan 2024 13:21:39 +0000
ROA not after:            Wed 22 Jan 2025 13:21:39 +0000
asID:                     174
IP address blocks:        66.251.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.mft
                          rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Apr 2024 20:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659F9CAR/serialNumber=09FB3136ECD5E3D7CF00B32C121F12E8AFD0A601
        Validity
            Not Before: Jan 23 13:21:39 2024 GMT
            Not After : Jan 22 13:21:39 2025 GMT
        Subject: CN=65afbd66-1274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:fa:40:af:07:3d:47:e4:96:dc:6b:61:ff:a4:
                    32:67:25:6a:d9:e0:fb:10:c5:38:0c:99:1a:11:38:
                    aa:ad:a8:2e:fc:ff:40:86:86:e8:05:0c:91:2e:92:
                    e3:77:fc:a5:95:ef:94:6a:06:8d:29:fb:12:a7:9b:
                    15:b5:62:92:b2:de:2f:65:4b:32:66:49:a6:fe:c7:
                    f3:7d:33:f3:1c:25:b1:82:6f:39:db:33:34:70:67:
                    a1:16:77:fa:17:32:7b:bf:26:cb:cd:9b:b3:88:e3:
                    bc:5f:ff:b1:1c:53:06:bc:b9:1e:c8:1c:07:14:3a:
                    e9:57:a7:9a:c8:e2:e9:61:06:88:3c:68:ad:89:0a:
                    e6:e2:7d:e2:de:3b:12:c9:f6:37:fd:58:de:5f:e4:
                    23:5d:d7:8f:91:31:4a:8e:d0:f6:c3:fb:54:16:96:
                    08:f3:7c:2c:e5:8b:ba:66:26:ca:99:cc:8c:64:6c:
                    9b:e3:fb:ce:c9:bb:1e:8d:4e:15:42:94:c7:ff:50:
                    35:5e:cf:ad:18:10:e2:06:c7:c6:21:a4:8e:22:40:
                    5d:97:7e:f9:28:06:87:3f:b0:9f:d5:e1:e9:1d:03:
                    d4:87:5e:71:13:64:e7:c1:a5:ef:b1:bb:fe:61:4f:
                    57:b0:40:df:58:d9:af:9f:1e:b0:b1:1f:1b:bc:ed:
                    38:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:41:26:67:29:ED:CA:28:D4:0C:22:AF:A1:8F:EF:B0:D6:E3:D7:3E
            X509v3 Authority Key Identifier:
                keyid:09:FB:31:36:EC:D5:E3:D7:CF:00:B3:2C:12:1F:12:E8:AF:D0:A6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/CfsxNuzV49fPALMsEh8S6K_QpgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CfsxNuzV49fPALMsEh8S6K_QpgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659F9C/1D22996E7A0911EDBD422185F1222468/5945C090B9F211EEBA0EBA9E775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.251.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:b9:2c:b0:f3:44:78:4e:73:c6:ed:ca:22:11:1b:a6:d6:26:
         89:c7:df:e5:f3:38:89:6e:98:a3:5f:43:6a:8a:64:9a:63:52:
         f9:d8:e4:54:42:bd:e3:34:fd:bb:e1:ba:55:9b:77:2b:4d:ac:
         e6:39:06:31:3c:3e:59:52:12:91:93:c7:a7:62:ec:5b:4b:29:
         c9:4e:25:b2:32:69:3b:f3:b0:8d:55:da:20:85:6b:72:56:36:
         f2:dd:3f:96:5e:58:39:e5:41:5a:1f:54:d8:fc:50:ea:7b:1f:
         c2:59:78:85:fb:38:13:3b:14:79:9f:9f:2a:bc:bd:86:d3:53:
         68:69:ce:88:ee:58:9c:7d:48:c0:71:14:d2:36:ca:37:83:46:
         46:c8:91:25:4f:16:4c:37:9b:f4:db:8e:cf:6b:55:66:88:dd:
         e0:d4:52:ca:97:8f:f1:e7:08:e7:7c:17:a0:37:1b:22:28:6e:
         0d:47:58:7c:d8:55:51:e7:2e:3b:f4:57:b9:77:00:ff:b7:ef:
         64:5c:37:1f:b3:ac:73:3b:f4:78:75:41:b6:a3:02:39:4a:c1:
         73:ed:83:df:9f:f5:f1:46:7f:50:63:16:43:5c:d5:9b:c8:37:
         f5:b2:fd:0d:f7:41:b8:1b:54:32:68:03:cb:6a:08:b1:3b:19:
         92:6f:fa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----