Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/483D2F12155711EEB321C9364AD9E6FC.roa
File:                     483D2F12155711EEB321C9364AD9E6FC.roa (raw, json)
Hash identifier:          obtVuF0m2AcbRC7uX4RQTfDsTIQDVvNVgVs+FfzHrxs=
Subject key identifier:   EB:BA:76:83:06:0A:50:2B:1F:AA:36:90:BA:AD:8F:6E:5A:6C:DE:29
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       2D4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/483D2F12155711EEB321C9364AD9E6FC.roa
Signing time:             Wed 28 Jun 2023 01:58:31 +0000
ROA not before:           Wed 28 Jun 2023 01:58:28 +0000
ROA not after:            Mon 27 May 2024 01:58:28 +0000
asID:                     140627
IP address blocks:        156.247.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11594 (0x2d4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 28 01:58:28 2023 GMT
            Not After : May 27 01:58:28 2024 GMT
        Subject: CN=649b93c7-6b7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f1:81:f0:ca:bc:b0:c1:7e:cd:b2:ae:09:45:
                    0b:9b:be:7a:77:58:ba:f8:88:5b:d6:e7:74:8b:f3:
                    54:d9:69:52:42:cd:9c:0d:46:90:08:8d:fa:20:a0:
                    21:00:f3:c3:fc:cf:36:3b:51:25:1d:00:44:f4:c4:
                    ad:65:38:ab:0d:bf:df:d8:bb:37:83:4e:b7:62:74:
                    ab:8f:47:83:66:f9:f9:b7:55:51:c0:60:f3:19:3e:
                    86:e5:17:c5:4f:10:7e:02:08:43:a5:7d:f8:65:95:
                    52:d0:9d:f3:b3:39:f0:42:2b:13:37:28:ca:f2:c7:
                    cd:06:68:4b:f8:db:19:8e:29:97:55:53:a6:65:59:
                    12:6f:4d:e9:25:77:b8:71:07:fd:53:da:44:14:69:
                    0f:4d:16:83:92:5f:e7:15:36:2e:31:8e:19:b5:8d:
                    ed:88:42:e7:ec:6d:df:e4:c0:db:48:a3:5a:77:e3:
                    f4:c4:a8:43:51:e4:94:1c:94:71:32:89:70:8e:f4:
                    d1:61:23:17:1f:0f:cc:40:4f:c4:dc:d5:f9:ba:83:
                    15:51:12:52:6c:af:49:a1:fd:20:f6:8f:1f:39:ae:
                    ea:98:4e:20:98:32:8a:cb:62:58:b8:cf:e3:b4:16:
                    a5:a5:47:f5:b9:a9:52:b8:a5:70:ff:19:9b:63:00:
                    6d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BA:76:83:06:0A:50:2B:1F:AA:36:90:BA:AD:8F:6E:5A:6C:DE:29
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/483D2F12155711EEB321C9364AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:14:10:bd:72:5f:98:89:20:40:4a:05:d0:fb:92:ad:fe:80:
         2a:c9:1d:66:de:85:45:e9:ef:f6:5d:54:44:e2:ba:31:f2:04:
         22:52:a6:97:02:d7:56:5d:37:60:81:4e:cf:62:e8:b2:1f:f2:
         dc:96:bf:8b:30:23:51:3b:73:68:34:f9:3f:6e:3c:95:1f:97:
         28:c1:2a:d7:be:ac:2b:6f:ce:82:a4:37:44:22:d2:d1:39:18:
         64:d2:1e:73:8d:f1:74:57:19:3c:a3:d4:29:6b:0b:0a:f3:8f:
         2a:cf:26:76:92:4a:49:e2:e8:c1:1c:2f:95:04:8f:c0:4b:00:
         ea:a6:55:0c:64:4d:b0:9f:b8:f9:f6:98:30:2a:74:d2:48:e3:
         c9:74:8d:c8:c5:10:f3:84:4c:45:9d:45:52:d7:30:e1:2c:b4:
         13:b4:07:a3:ff:e5:35:e7:51:a9:0f:7b:ea:93:e6:a6:f3:62:
         42:6b:b6:15:5f:55:f9:4f:11:9e:f4:26:c0:1b:6a:d0:7f:d4:
         f1:5e:93:4b:6b:ae:88:04:16:95:48:6f:47:f1:98:a0:1e:e5:
         d3:0c:d2:57:4f:92:65:41:6c:80:13:6e:e4:ab:e2:f1:0a:05:
         f4:29:1f:9d:18:df:48:ae:99:72:d5:43:e2:67:b7:e6:5c:2c:
         4a:26:ee:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:52 2024 by rpki-client on console-ams.rpki-client.org