Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366F191/2E3AA74E07F711E798F5CC0AF8AEA228/B6C8C0D60E4C11E7B18E4B41F8AEA228.roa
File:                     B6C8C0D60E4C11E7B18E4B41F8AEA228.roa (raw, json)
Hash identifier:          qjNnrxMoS+9GEr8u3PIhxy4X8c00vX65csUdJey7cFI=
Subject key identifier:   6B:EE:59:6F:D7:8E:68:B4:B3:F2:E8:DF:57:AE:51:4A:32:F6:30:CB
Certificate issuer:       /CN=F366F191AR/serialNumber=4600B813C76994ABD81CE9B861ECBCDDD1C97401
Certificate serial:       0A
Authority key identifier: 46:00:B8:13:C7:69:94:AB:D8:1C:E9:B8:61:EC:BC:DD:D1:C9:74:01
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RgC4E8dplKvYHOm4Yey83dHJdAE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F191/2E3AA74E07F711E798F5CC0AF8AEA228/B6C8C0D60E4C11E7B18E4B41F8AEA228.roa
Signing time:             Tue 21 Mar 2017 15:40:34 +0000
ROA not before:           Tue 21 Mar 2017 15:40:23 +0000
ROA not after:            Wed 19 Mar 2036 15:40:23 +0000
asID:                     36924
IP address blocks:        160.119.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366F191/2E3AA74E07F711E798F5CC0AF8AEA228/RgC4E8dplKvYHOm4Yey83dHJdAE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366F191/2E3AA74E07F711E798F5CC0AF8AEA228/RgC4E8dplKvYHOm4Yey83dHJdAE.mft
                          rsync://rpki.afrinic.net/repository/arin/RgC4E8dplKvYHOm4Yey83dHJdAE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F191AR/serialNumber=4600B813C76994ABD81CE9B861ECBCDDD1C97401
        Validity
            Not Before: Mar 21 15:40:23 2017 GMT
            Not After : Mar 19 15:40:23 2036 GMT
        Subject: CN=58d14972-efa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:1e:0f:ae:21:9d:91:ac:59:40:dc:e4:ff:
                    63:b5:2d:8a:d5:e1:f8:0b:74:3c:b2:81:aa:48:94:
                    70:47:d7:26:dc:81:4e:c3:12:ec:35:22:0f:e2:6e:
                    79:a8:02:41:f3:38:08:e2:15:0d:f8:47:84:18:60:
                    c1:2a:1f:7e:62:37:05:08:6b:39:cb:ca:5c:89:92:
                    6e:d8:28:9c:a4:e1:f1:2e:9f:89:90:f7:f9:c6:40:
                    4f:9b:aa:24:a2:f2:bf:44:6d:43:9e:06:f0:83:9e:
                    0f:ab:1d:31:c5:76:b8:2d:ea:7c:5e:16:d2:2a:f9:
                    db:76:6f:5c:30:71:61:71:e7:0d:2c:0d:6d:4a:33:
                    fd:78:2f:70:b4:b1:56:e9:02:21:5a:4b:f9:e3:87:
                    ae:7e:16:a6:9b:32:5d:6c:b5:71:e2:64:5e:36:28:
                    c6:dd:a8:a4:1a:3d:03:b3:f2:f3:9e:e9:83:66:c5:
                    9d:13:4b:0b:17:f8:c7:f1:a1:a1:b3:93:ee:c8:7e:
                    17:7f:85:a0:7d:58:f1:61:0c:6a:02:84:87:b1:22:
                    bb:24:61:b1:92:20:86:d7:eb:34:91:ee:9f:ba:26:
                    9a:ee:41:db:ce:89:cf:8d:df:d5:52:14:c6:04:b2:
                    55:ad:f3:a6:3c:c5:af:2c:ef:bc:99:8f:b4:21:8d:
                    2a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EE:59:6F:D7:8E:68:B4:B3:F2:E8:DF:57:AE:51:4A:32:F6:30:CB
            X509v3 Authority Key Identifier:
                keyid:46:00:B8:13:C7:69:94:AB:D8:1C:E9:B8:61:EC:BC:DD:D1:C9:74:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/2E3AA74E07F711E798F5CC0AF8AEA228/RgC4E8dplKvYHOm4Yey83dHJdAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RgC4E8dplKvYHOm4Yey83dHJdAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/2E3AA74E07F711E798F5CC0AF8AEA228/B6C8C0D60E4C11E7B18E4B41F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         95:cf:97:d4:3e:40:32:22:ee:c4:87:5f:c4:8d:73:2d:76:a3:
         9a:74:70:2c:9c:19:d1:a8:fb:92:d9:9e:eb:e5:76:04:04:ce:
         57:08:3e:b0:12:67:a4:b4:3e:37:38:c5:b0:92:03:1a:24:85:
         ee:d9:f0:0d:0d:e7:93:4b:4e:72:2e:40:18:4f:70:aa:df:93:
         0d:8c:2d:4f:20:86:07:54:dd:90:6a:f7:0e:8f:ab:73:46:d0:
         61:4b:d7:4e:97:5d:9e:f8:7c:2d:5a:e7:62:3b:bd:c8:15:50:
         f0:13:bc:d4:25:d7:0d:0d:02:59:f6:c0:24:ac:5c:bd:5e:fe:
         e8:d0:54:0e:05:4e:7d:a3:45:6e:eb:c3:fa:71:63:43:6e:10:
         b3:c3:e0:1e:d3:88:c6:d9:8f:cc:25:a4:0f:b3:0b:d5:10:71:
         eb:d1:c2:77:eb:f9:8d:ca:fa:54:7c:94:08:fb:0d:99:6f:7f:
         ba:a8:a6:dd:d0:ac:20:bb:45:6b:06:98:8d:e5:2b:03:54:4a:
         a5:ff:74:4f:f3:8b:87:6b:42:f3:c8:06:56:17:ea:55:c8:4c:
         77:bc:96:fc:0e:2b:31:a2:4d:f5:e4:c3:9d:00:c1:1d:f6:92:
         01:08:c8:37:30:d9:93:cc:12:32:f7:8c:9b:bb:40:c6:45:21:
         c8:0b:d9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org