Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A09CF1DEEDB411EEB5D97D97775412E6.roa
File:                     A09CF1DEEDB411EEB5D97D97775412E6.roa (raw, json)
Hash identifier:          fHq6ameC3HIh8bv9daAeHMKQT43XvfOcKW1bCcnsyz4=
Subject key identifier:   82:57:80:49:22:5A:57:87:1F:05:9B:7A:BB:B6:F1:61:7E:1B:C5:62
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A717
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A09CF1DEEDB411EEB5D97D97775412E6.roa
Signing time:             Fri 29 Mar 2024 10:10:54 +0000
ROA not before:           Fri 29 Mar 2024 10:10:51 +0000
ROA not after:            Sat 04 May 2024 10:10:51 +0000
asID:                     142062
IP address blocks:        154.86.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 10:10:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42775 (0xa717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 29 10:10:51 2024 GMT
            Not After : May  4 10:10:51 2024 GMT
        Subject: CN=660693ae-31d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:85:98:3c:a1:de:e4:27:ea:12:50:33:59:f8:
                    52:31:5b:b8:70:c2:f1:ba:9a:26:61:91:bf:13:ae:
                    a2:06:0b:5a:60:41:64:ba:b7:23:09:4c:07:20:3d:
                    18:02:72:52:ea:41:59:53:13:64:1f:09:91:52:ae:
                    f9:21:d6:46:bd:69:18:b8:59:72:80:7f:bb:af:8d:
                    d9:4f:fd:b2:ab:6a:3c:20:00:10:37:73:8c:6f:79:
                    c3:28:0c:14:93:cd:49:e3:80:b3:5a:40:88:29:61:
                    91:cd:af:59:80:8b:f9:1e:05:1e:bc:a7:dd:39:a2:
                    3f:6f:96:68:a0:48:b1:ae:96:d4:1e:f4:8a:44:01:
                    43:e8:b1:78:42:c2:18:2a:e7:d5:e1:8e:8c:3b:87:
                    97:df:4c:e3:b7:c3:af:5c:11:5e:65:9f:bf:70:a6:
                    0c:aa:90:37:56:1b:14:ca:57:2a:2d:9e:85:98:20:
                    f6:5b:70:6e:8b:48:45:69:57:7a:fc:6e:29:50:ac:
                    af:0f:4c:cf:4e:4f:8a:9f:39:bc:5f:ff:ad:b3:72:
                    c5:f8:3f:60:c7:de:c7:b4:f2:db:77:c9:92:2d:08:
                    45:8d:d6:c5:05:64:00:14:3d:6b:93:58:78:fe:62:
                    25:ce:a6:33:99:0d:46:b5:de:fe:8f:a4:0e:50:c9:
                    ab:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:57:80:49:22:5A:57:87:1F:05:9B:7A:BB:B6:F1:61:7E:1B:C5:62
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A09CF1DEEDB411EEB5D97D97775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.86.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:0f:d3:10:dc:fb:73:9a:a8:d7:4a:06:cc:83:da:5e:eb:97:
         76:5a:85:d5:0c:c9:9e:8a:4b:24:78:13:5a:bd:74:ea:3e:77:
         8f:d8:d6:b3:8a:9f:e7:76:98:c8:28:ee:8d:81:2d:c7:f2:d3:
         42:03:5b:ad:2a:4b:74:60:07:c8:60:ec:6c:dd:fd:f1:5a:be:
         5c:c4:74:e0:ce:d0:f9:58:d5:34:8e:0c:27:b8:d9:88:27:fb:
         3a:18:f9:f4:8d:1f:c1:82:26:64:9f:ed:83:09:78:68:4f:c1:
         14:d7:90:09:a7:6a:64:51:12:46:69:96:8f:13:45:ae:36:2a:
         e8:3f:dc:37:05:6d:50:c0:c9:f9:32:b5:de:16:8d:dc:93:7e:
         e6:b2:e1:51:45:fa:ca:87:c2:6a:44:05:e2:2d:c4:62:48:3f:
         2d:6b:5b:6d:7c:a2:6e:d6:c3:ae:62:68:60:c9:9d:b0:85:e1:
         9f:38:9b:1b:00:35:38:f4:af:3a:c6:8a:7e:55:0f:53:3b:76:
         fb:60:e7:81:26:a4:c6:a6:4f:00:54:6c:5a:58:8d:81:da:f4:
         8d:9d:94:f6:bb:06:e0:a5:6a:16:68:35:bd:6a:b5:a5:e1:af:
         bd:ad:a9:68:16:54:38:96:6c:41:1d:8e:f5:6c:15:37:69:eb:
         d7:c9:03:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:36:16 2024 by rpki-client on console-ams.rpki-client.org