Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50C07750AE1011EEA64A9287775412E6.roa
File:                     50C07750AE1011EEA64A9287775412E6.roa (raw, json)
Hash identifier:          uj3qGA90IW1NFtgs1kM2xoGzBdrM2v9J687cWG+Evts=
Subject key identifier:   37:2E:52:4B:A3:0B:F6:D8:95:07:6C:A9:C2:2A:F7:23:EC:25:A9:A4
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       728C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50C07750AE1011EEA64A9287775412E6.roa
Signing time:             Mon 08 Jan 2024 10:25:59 +0000
ROA not before:           Mon 08 Jan 2024 10:25:56 +0000
ROA not after:            Mon 30 Dec 2024 10:25:56 +0000
asID:                     150812
IP address blocks:        154.197.40.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29324 (0x728c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Jan  8 10:25:56 2024 GMT
            Not After : Dec 30 10:25:56 2024 GMT
        Subject: CN=659bcdb7-5a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:87:23:a9:fe:90:f0:f7:7c:1c:1c:c9:d3:
                    69:22:35:fb:ca:47:9c:5c:ac:dc:49:f7:2c:cf:f3:
                    7a:36:aa:e4:33:35:c7:3b:6c:ca:f0:74:46:8f:44:
                    cc:90:a1:8b:f3:77:db:97:d0:63:46:70:90:ba:48:
                    31:b6:d3:7e:8b:e6:42:9b:0d:16:88:09:9a:83:8d:
                    c2:66:40:b9:dd:af:9f:c3:0c:6a:0e:7c:59:7e:43:
                    e6:96:2d:ad:5a:9b:03:5d:ce:f4:1f:8a:8f:5a:70:
                    90:c7:97:56:b9:af:36:c8:af:a4:eb:24:80:6c:f8:
                    db:02:e2:47:c1:60:27:e6:07:82:8d:4b:a1:6a:b0:
                    3e:30:af:3c:cd:35:da:3e:65:25:2d:5d:89:53:ed:
                    0e:43:74:d8:27:3d:cc:fe:32:de:7e:99:e7:18:7a:
                    d1:c1:94:23:88:6f:9a:82:1c:61:be:26:67:a2:e6:
                    28:0a:b3:0a:17:92:f3:49:b7:6c:7b:08:ed:7b:12:
                    fc:f1:72:98:16:67:db:ff:73:01:07:2c:28:0f:c3:
                    ff:cd:27:5b:b0:bd:f0:4c:33:05:0e:39:59:91:fa:
                    66:6c:b1:0e:b0:89:56:d7:7e:d8:61:24:5f:76:bd:
                    f4:e6:a9:31:cb:e8:39:3b:ce:f9:83:ad:ff:90:82:
                    65:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2E:52:4B:A3:0B:F6:D8:95:07:6C:A9:C2:2A:F7:23:EC:25:A9:A4
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/50C07750AE1011EEA64A9287775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.197.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:94:e0:c5:ca:b6:bd:64:5f:0a:92:3a:17:1e:64:1d:14:c6:
         79:4b:05:9e:80:3c:d3:b6:51:10:62:1e:b1:29:a0:d9:8e:a3:
         16:51:a2:26:aa:c9:01:e0:59:76:07:3a:94:76:9d:c7:31:9e:
         2e:75:e4:75:79:99:d3:95:19:38:d3:fb:7e:9d:b1:4f:29:e4:
         ad:04:9f:88:f3:c6:4c:64:0d:64:c8:d8:ea:75:57:cc:6a:0b:
         d7:1d:0a:c0:45:e2:1e:2f:64:32:24:45:a6:14:06:06:6a:57:
         89:6b:d9:04:cc:ed:97:9c:9b:98:12:a7:9a:8b:20:b3:3b:01:
         bd:a7:52:34:a7:2a:53:8e:5e:4d:53:90:7b:66:59:d8:05:a8:
         a1:28:95:f0:44:c5:cd:18:3d:09:3c:5e:c2:65:08:05:45:9e:
         94:4c:c8:19:d1:2a:6d:c4:a4:68:fc:26:6e:be:2e:90:3e:c4:
         ed:f1:59:da:71:e9:65:65:8e:de:b8:86:8d:9d:2d:9b:ba:7c:
         49:46:0d:a4:81:cf:6f:8b:6c:f0:b3:a0:c1:b3:40:80:11:15:
         2f:79:3c:d1:90:f1:6a:69:54:8e:62:c7:fc:f3:1e:78:7c:24:
         c5:7d:2e:5f:69:ba:c1:26:a4:49:44:57:a4:24:6e:fd:c6:b0:
         ec:41:45:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:08 2024 by rpki-client on console-ams.rpki-client.org