Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BAAECA8544B11EE864ACC884AD9E6FC.roa
File:                     2BAAECA8544B11EE864ACC884AD9E6FC.roa (raw, json)
Hash identifier:          YXmPOfbsPu815zO7mu+odZHSnR7ZPGzJbJ07kHX/3Xw=
Subject key identifier:   5D:8E:8D:0E:91:C5:71:24:B1:AE:F7:F5:60:68:EE:18:D8:49:01:DF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       3A63
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BAAECA8544B11EE864ACC884AD9E6FC.roa
Signing time:             Sat 16 Sep 2023 04:40:33 +0000
ROA not before:           Sun 01 Oct 2023 04:40:29 +0000
ROA not after:            Thu 08 Aug 2024 04:40:29 +0000
asID:                     133199
IP address blocks:        156.245.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14947 (0x3a63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  1 04:40:29 2023 GMT
            Not After : Aug  8 04:40:29 2024 GMT
        Subject: CN=650531c1-2c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dc:ee:ba:c8:8e:aa:76:23:6d:19:f5:8e:f8:
                    73:3f:eb:26:68:68:45:46:4e:10:98:9e:0c:a3:d2:
                    1f:7f:73:cf:be:82:ed:08:1c:d2:ed:6d:c4:02:8c:
                    76:0a:21:2d:65:40:2e:98:d7:ef:5b:db:10:dc:a3:
                    16:8a:ca:8e:aa:7e:41:2b:6b:07:8e:f9:c0:ee:25:
                    21:89:20:18:0d:d9:0e:bf:80:43:cf:b4:e6:ac:d6:
                    df:1d:9e:a6:61:fb:ae:b7:09:3f:39:26:70:83:0e:
                    08:06:84:96:43:1a:e7:f4:52:1c:7f:94:78:03:13:
                    0d:6b:01:9b:95:3b:b3:07:c8:8a:cf:9f:ea:d6:4b:
                    ba:18:4c:9e:fd:6f:d1:01:b9:5d:98:eb:18:0e:67:
                    f6:e8:1e:1c:ff:47:37:af:e5:a7:40:1d:cb:38:7e:
                    44:a1:7a:dc:5b:bd:53:b4:74:cc:83:59:0a:e9:7d:
                    2b:46:9a:56:a5:3a:c1:ee:60:b8:d9:ce:98:a8:57:
                    8d:ef:ac:c8:39:ab:fb:c4:cb:14:52:3d:e2:c2:ed:
                    2d:33:1c:1e:39:ee:a4:31:2c:b2:a8:60:56:3b:55:
                    88:e2:b1:b7:49:85:ec:8d:d7:37:fc:6d:53:99:05:
                    45:f5:62:36:7c:47:c3:7e:7b:7c:e6:8c:b6:ce:cc:
                    ff:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8E:8D:0E:91:C5:71:24:B1:AE:F7:F5:60:68:EE:18:D8:49:01:DF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2BAAECA8544B11EE864ACC884AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:76:37:a0:cb:b9:9f:aa:f1:34:bb:2f:2e:c8:eb:35:8b:06:
         23:e8:90:d4:ac:8c:c0:20:6c:17:58:77:f9:3f:67:2e:e8:f3:
         f6:2f:7f:07:27:eb:6b:10:67:a1:f1:dc:11:7c:c5:e4:7a:e8:
         68:6b:63:38:71:1d:94:f3:f2:8a:9e:22:ed:23:7d:d2:d3:ec:
         21:72:71:18:50:c9:c9:15:24:8f:95:19:28:dc:fe:fd:05:20:
         32:ec:29:23:66:c8:65:28:bb:38:c6:9d:89:89:9d:ae:cb:e9:
         0b:84:5d:26:de:a9:2b:cb:b7:1c:c6:dc:da:54:61:5d:c0:88:
         78:78:1e:cd:60:7b:83:f6:c1:72:29:8e:14:32:2d:19:c2:19:
         5b:01:cb:58:e5:ac:4c:4a:1a:e8:af:1c:2d:ca:e1:20:a9:e6:
         fa:90:de:be:71:0d:77:5d:d5:b5:b9:dc:19:5b:ca:1a:7d:87:
         4b:1f:30:74:5f:9d:c1:12:1a:4d:f8:32:f1:40:26:da:a8:4b:
         a0:8d:66:32:9d:73:76:ac:45:96:b1:62:e4:61:b4:13:ae:96:
         b4:c0:d2:69:48:84:d9:7d:b2:36:ab:05:90:50:4f:ca:e1:33:
         db:4c:ad:13:9e:46:7d:09:1c:d9:07:19:a1:d3:99:0c:2d:74:
         03:f9:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:06 2024 by rpki-client on console-fra.rpki-client.org