Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA5CAE72E78311EEA690A2A1775412E6.roa
File:                     EA5CAE72E78311EEA690A2A1775412E6.roa (raw, json)
Hash identifier:          eEiG/m38w4N3Df65O3T4VrPmH5hwOLs0/Ai2E8apnr8=
Subject key identifier:   D2:47:59:AD:55:76:0B:03:10:32:9F:48:8F:1E:98:1C:FC:04:AB:46
Certificate issuer:       /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial:       A58F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA5CAE72E78311EEA690A2A1775412E6.roa
Signing time:             Thu 21 Mar 2024 13:07:05 +0000
ROA not before:           Thu 21 Mar 2024 13:07:02 +0000
ROA not after:            Tue 23 Apr 2024 13:07:02 +0000
asID:                     44559
IP address blocks:        154.210.85.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Apr 2024 00:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42383 (0xa58f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
        Validity
            Not Before: Mar 21 13:07:02 2024 GMT
            Not After : Apr 23 13:07:02 2024 GMT
        Subject: CN=65fc30f9-8ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3e:98:ec:c2:fc:bb:90:d5:0d:3e:2a:e9:98:
                    03:bc:ba:9b:ab:f9:07:4a:18:31:aa:b0:47:c8:21:
                    24:35:fa:b5:bf:97:b7:3c:f4:ef:11:fb:01:cf:db:
                    03:13:da:7d:67:26:20:c6:f9:c0:1d:93:19:0e:83:
                    e4:b9:a9:54:26:ce:ac:ed:06:29:f0:d1:78:73:f8:
                    38:33:e8:9b:2a:d6:96:45:ac:a0:cd:6c:be:1c:78:
                    64:3f:94:05:bf:8d:3e:f3:3b:87:db:5d:25:1b:d3:
                    6c:d8:1b:78:62:38:70:8a:23:6d:cb:0e:85:fc:3a:
                    b1:c8:84:b0:23:32:79:66:7b:ac:9d:29:8c:83:bd:
                    f4:f2:bc:6d:4b:56:a9:10:35:e4:f4:94:88:d5:3d:
                    ff:42:db:14:07:49:7c:66:a7:53:ab:aa:30:3e:4d:
                    86:2e:5f:a4:25:5e:24:03:d9:0d:07:03:f7:2c:57:
                    de:50:07:61:f7:b8:af:6f:eb:5c:1f:19:fb:88:07:
                    4b:bd:d4:f5:b4:a7:80:f2:54:6a:e8:1b:8a:51:ca:
                    7f:36:62:5c:36:03:9f:3e:1e:6c:63:aa:44:40:ea:
                    55:d0:fe:8a:8e:db:17:7b:2e:4c:f0:00:5b:d3:5f:
                    4f:bb:88:99:f5:30:34:96:5b:d7:17:1f:cd:df:90:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:47:59:AD:55:76:0B:03:10:32:9F:48:8F:1E:98:1C:FC:04:AB:46
            X509v3 Authority Key Identifier:
                keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EA5CAE72E78311EEA690A2A1775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.210.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:a8:7f:6f:6f:3c:71:0b:ef:43:89:df:80:c8:2b:ae:32:88:
         17:60:d6:f8:08:e6:26:69:54:c1:62:fc:f4:64:9d:ce:b4:4a:
         0e:a5:3b:69:b6:bb:78:1d:c8:be:2c:aa:7e:dd:33:84:c1:a9:
         fc:cc:c6:b2:7b:af:1c:29:44:87:9c:8a:a7:30:92:cb:f2:31:
         bd:59:24:00:27:41:19:d5:32:02:47:86:c3:4c:e0:9d:f9:4f:
         6b:44:34:37:6d:88:6d:8c:85:28:b2:4f:b0:76:7f:b8:89:a2:
         50:09:83:36:a0:fe:41:0a:f9:3f:77:44:f5:e8:c8:ac:e1:08:
         6c:93:a1:51:2e:37:3f:8b:c1:d7:c8:b6:bd:76:fb:2c:4c:5d:
         25:d8:49:0c:5c:0e:5e:26:b2:7c:0a:da:fd:ca:91:eb:0d:56:
         50:2a:ee:a0:57:6d:ad:a0:a7:80:d7:45:ca:22:56:47:3b:38:
         2b:65:02:c8:2f:b4:2f:85:8b:af:38:8c:80:a2:e9:10:b0:e7:
         12:27:86:2e:63:cf:13:3b:51:a2:21:fc:2c:5e:d8:99:25:ab:
         bd:84:bb:9e:1c:e6:99:de:52:1e:b6:a2:2e:0d:92:f9:68:bb:
         5b:0f:71:88:ae:51:dd:f1:f8:59:02:b7:51:ca:d2:a6:c4:6a:
         49:b2:c8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 21 04:04:26 2024 by rpki-client on console-ams.rpki-client.org