Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/DAB5B58871A111EF9A6AEC6F762E951A.roa
File:                     DAB5B58871A111EF9A6AEC6F762E951A.roa (raw, json)
Hash identifier:          YivpnequhZt8XqJ2qMGWn/m6KFZdSXQEvVcrsKtKSmY=
Subject key identifier:   17:1D:EB:88:88:B0:FA:18:FD:91:04:91:CF:A5:F1:24:B2:28:9B:7C
Certificate issuer:       /CN=F365E0EFAR/serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
Certificate serial:       036A
Authority key identifier: DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/DAB5B58871A111EF9A6AEC6F762E951A.roa
Signing time:             Fri 13 Sep 2024 07:29:04 +0000
ROA not before:           Fri 13 Sep 2024 07:28:55 +0000
ROA not after:            Mon 13 Sep 2027 07:28:55 +0000
asID:                     328164
IP address blocks:        169.255.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
                          rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874 (0x36a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E0EFAR/serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
        Validity
            Not Before: Sep 13 07:28:55 2024 GMT
            Not After : Sep 13 07:28:55 2027 GMT
        Subject: CN=66e3e9c0-a019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5a:e6:ef:99:88:15:a5:db:26:c4:2d:c8:27:
                    fb:22:90:da:1b:3a:66:6a:0d:81:67:a5:92:d9:6a:
                    3d:64:55:61:c3:ce:f8:6a:aa:bd:27:84:8f:a2:89:
                    6f:5e:21:ad:30:3b:dd:47:bf:29:b8:0e:08:bc:36:
                    8d:af:9f:6a:0e:46:a3:84:d3:fa:cc:04:08:29:c3:
                    7c:9b:f6:1d:a7:d0:cd:ff:9e:08:eb:c7:84:3e:dc:
                    82:0b:00:cf:f5:26:42:76:ff:e0:3e:b5:5a:1f:61:
                    d7:03:a8:4c:62:75:4e:e7:9a:3b:66:ac:0a:13:2e:
                    84:4e:64:05:b0:f8:b2:aa:17:93:11:3d:78:b3:c4:
                    ce:f0:0f:8f:b8:0d:f3:e4:7b:0a:23:86:31:b2:90:
                    99:13:f2:4a:82:bb:4d:b7:4f:39:70:18:6e:17:59:
                    99:57:68:5e:ee:a3:ea:cf:35:4f:8f:d8:4b:6b:8e:
                    ba:49:b9:a9:4c:78:46:5c:15:a1:40:a1:a4:f5:4d:
                    72:c7:1d:fb:71:d3:cb:63:f3:5f:2b:db:3d:f2:ea:
                    1e:03:bd:d7:da:33:7b:0d:4f:33:73:bd:80:90:d7:
                    05:3d:0d:46:7e:f3:16:9f:c4:30:3a:4c:6f:1a:0a:
                    dc:01:1d:59:eb:40:62:4d:b1:f1:4f:54:04:29:fe:
                    40:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1D:EB:88:88:B0:FA:18:FD:91:04:91:CF:A5:F1:24:B2:28:9B:7C
            X509v3 Authority Key Identifier:
                keyid:DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/DAB5B58871A111EF9A6AEC6F762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.255.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:a3:34:52:a5:49:1d:9d:a9:ac:1b:71:8f:24:45:d2:42:67:
         02:61:f6:b0:26:01:93:78:1d:e0:87:92:d5:12:3c:af:cd:ce:
         98:59:75:75:b5:79:d5:ed:83:2e:dd:69:b4:be:1b:02:43:ce:
         b5:73:7e:43:67:06:e8:32:5b:62:31:80:03:96:9c:8d:99:36:
         c2:ba:ee:0e:bd:be:20:53:87:c3:6c:1d:a8:b7:89:31:4d:dc:
         c2:7f:51:ef:d8:99:a9:79:87:cd:6e:72:73:83:5a:98:31:8f:
         33:f2:5a:08:35:76:6c:f3:0a:76:48:dc:11:fe:0e:2b:78:bb:
         3a:ad:4a:19:bf:44:73:98:7e:f2:7f:34:20:2e:64:7b:1d:11:
         cf:49:7d:e0:96:d4:ba:b2:92:22:be:ae:90:0e:5f:2f:b6:8e:
         1f:cf:43:e2:9b:b7:3d:16:f9:da:5c:ef:7c:a6:f1:3a:d4:82:
         12:c3:9a:0c:b7:16:3d:4b:f7:ef:5b:87:f5:bd:da:64:bc:44:
         18:8a:45:e8:0e:74:ff:51:03:e0:c1:b5:5c:0d:2d:46:73:a8:
         55:0d:30:7f:b3:9d:f8:ed:57:23:42:8d:ca:21:ea:27:46:10:
         be:b2:58:be:4a:86:80:c0:53:e2:48:f2:ac:04:26:33:6f:23:
         5a:08:80:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:54 2024 by rpki-client on console-fra.rpki-client.org