Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48CA6880CD1811EFB0E47642762E951A.roa
File:                     48CA6880CD1811EFB0E47642762E951A.roa (raw, json)
Hash identifier:          z6cOvGYH5I1d4h5W/2A/S+kJCVUHdYAAjyVZkikjpLE=
Subject key identifier:   EB:55:4F:A9:D5:0F:8D:3A:28:35:B6:0A:AC:D1:D6:8B:E4:E8:AA:42
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       FD2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48CA6880CD1811EFB0E47642762E951A.roa
Signing time:             Tue 07 Jan 2025 16:56:06 +0000
ROA not before:           Tue 07 Jan 2025 16:56:02 +0000
ROA not after:            Mon 13 Dec 2027 16:56:02 +0000
asID:                     17561
IP address blocks:        156.241.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Feb 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64813 (0xfd2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Jan  7 16:56:02 2025 GMT
            Not After : Dec 13 16:56:02 2027 GMT
        Subject: CN=677d5ca5-3f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:21:39:1f:2b:18:5c:34:4f:0e:5a:fb:42:57:
                    82:3e:7f:c9:79:28:e7:48:41:26:16:cc:f5:f6:b1:
                    12:bd:67:83:52:d8:9f:bb:92:6d:19:09:ba:d3:23:
                    52:51:77:11:7d:6e:3f:6a:92:f0:cc:74:7f:b2:31:
                    ef:36:b1:23:db:1f:c9:50:33:11:cb:0c:0e:d6:9e:
                    c4:51:1a:27:26:db:39:d0:4b:3d:2e:93:73:f0:0c:
                    cd:a0:21:b0:63:89:23:c4:67:f9:4d:d7:0a:fa:31:
                    ac:05:90:97:9f:3a:7c:50:01:2b:34:7f:34:eb:ce:
                    94:57:a7:0b:0b:1b:7f:ed:7c:be:a7:2a:d0:4b:a3:
                    93:a5:06:ba:ee:97:81:98:ad:d5:16:6e:ca:b2:b4:
                    3c:68:be:6f:cd:08:d8:67:33:f8:0b:6d:87:e6:5b:
                    04:04:21:83:22:da:c7:1c:ee:a9:94:8a:4c:b9:33:
                    22:1c:a7:2f:ed:35:63:b8:de:56:4b:10:66:4b:5d:
                    99:1c:7a:58:4d:c7:95:52:f1:18:9b:2f:d4:64:61:
                    75:1f:22:cc:f8:d3:71:e9:83:04:06:6f:85:eb:3e:
                    d9:49:e9:a3:fc:dc:04:c3:ec:c0:b6:a4:55:4d:20:
                    f6:98:09:5d:ca:38:d1:e9:c6:b5:ce:f7:94:43:0c:
                    50:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:55:4F:A9:D5:0F:8D:3A:28:35:B6:0A:AC:D1:D6:8B:E4:E8:AA:42
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48CA6880CD1811EFB0E47642762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.241.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:d1:26:c0:73:43:8e:ad:10:2d:51:89:b6:f5:e3:a3:9f:e0:
         ab:02:a7:f5:2f:82:8b:d4:c1:dc:cd:9a:a5:92:e7:2c:5d:e8:
         ac:70:21:83:b4:d9:01:a3:01:72:93:2e:72:de:28:4a:c7:4e:
         14:12:09:6e:b8:2d:7a:9c:bb:c1:08:d0:76:20:5d:d4:b7:c3:
         25:7a:41:61:92:ab:42:0b:d6:68:5f:47:de:35:64:11:1a:38:
         80:2e:e4:a9:6a:2d:5c:1b:3d:f2:40:27:e2:00:f0:52:13:b3:
         c8:b9:0b:7a:1d:21:af:d5:5b:d0:f8:43:17:ec:7d:8d:33:98:
         77:e2:b3:8a:46:37:84:ce:a8:de:ae:66:22:83:80:7b:75:6c:
         c2:ed:e1:6f:19:ed:a9:10:72:ee:fa:db:5b:0a:8f:96:ca:4b:
         d8:52:4a:28:2a:59:54:53:c9:87:bf:4f:00:2e:24:34:d3:84:
         89:aa:04:1b:64:b7:65:d2:da:2c:ed:c0:ba:45:f4:78:58:8e:
         24:78:85:6a:b2:1b:2a:8f:3a:46:d0:0b:62:06:d0:56:35:92:
         a9:19:60:26:1c:11:29:a1:2a:19:63:5a:1b:d2:70:a2:57:af:
         99:58:b3:b8:31:4a:cb:1b:9b:f6:8e:08:64:62:cf:39:3a:a3:
         14:bf:e6:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:59:56 2025 by rpki-client