Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48F44B64022511EF85B03B63017001B1.roa
File:                     48F44B64022511EF85B03B63017001B1.roa (raw, json)
Hash identifier:          jUVvpXzbMqelLuy5qvKcTu3yyABLGGo6nj2z+MyyHNk=
Subject key identifier:   2C:CC:4B:F7:06:47:47:8E:94:F4:6A:47:6F:15:18:3C:05:A9:D0:98
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       84DE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48F44B64022511EF85B03B63017001B1.roa
Signing time:             Wed 24 Apr 2024 10:27:43 +0000
ROA not before:           Wed 24 Apr 2024 10:27:40 +0000
ROA not after:            Thu 12 Sep 2024 10:27:40 +0000
asID:                     142286
IP address blocks:        156.244.64.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34014 (0x84de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 24 10:27:40 2024 GMT
            Not After : Sep 12 10:27:40 2024 GMT
        Subject: CN=6628de9f-a740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:91:b2:55:8e:62:58:2e:46:4e:61:dc:7e:
                    73:60:05:f1:c6:52:4c:43:e4:69:34:17:fc:44:5a:
                    30:6e:8f:b0:5b:bd:7d:11:d7:7d:bb:2e:fd:b8:db:
                    e8:88:05:7e:4a:10:cd:ed:b8:70:c3:d4:b3:6c:f7:
                    19:85:d2:c2:01:1e:fd:8d:89:cd:77:87:80:4a:38:
                    54:c4:f8:90:51:bd:e4:8f:7d:04:a6:fa:33:19:1c:
                    00:ee:37:fb:53:2d:f7:b8:26:64:b1:e1:96:7e:5b:
                    59:b1:e5:9b:a9:4e:1a:16:04:a6:73:1c:8c:17:e5:
                    a9:3f:6c:29:6c:4d:69:61:d1:57:98:90:21:d2:80:
                    6f:5a:f0:02:45:3f:32:54:bb:34:9d:1a:87:b0:ca:
                    86:ac:b4:3a:82:60:b0:fa:30:9a:82:c9:34:ab:f1:
                    02:37:e7:d0:62:05:22:e6:38:c7:c4:92:91:84:3c:
                    ba:92:8b:4c:0c:45:87:ef:2d:5c:5c:f9:be:f3:e0:
                    0f:e8:44:05:65:8f:e0:31:c2:97:f4:dc:b3:9e:6a:
                    d3:9e:14:cb:c0:2f:15:e9:48:5f:bd:58:1e:40:27:
                    52:9c:d9:b5:12:8a:42:35:d3:a3:0f:cd:5c:fa:4e:
                    13:33:21:c2:6d:5b:6f:38:87:5e:7b:06:c8:58:61:
                    aa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CC:4B:F7:06:47:47:8E:94:F4:6A:47:6F:15:18:3C:05:A9:D0:98
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/48F44B64022511EF85B03B63017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.244.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         69:20:63:02:65:3b:33:28:a1:b1:aa:e8:19:d3:a5:05:9d:3e:
         b6:69:5f:c4:8e:da:8f:d1:8b:a6:c9:72:de:66:b4:05:29:64:
         1c:5d:6a:02:83:cb:58:a2:ec:7d:48:f7:ea:e0:63:59:f4:5d:
         ae:25:42:e4:b5:a5:6e:c6:b2:6e:ee:a5:7d:8d:0c:7b:13:c1:
         6c:98:5b:07:62:c0:f0:d0:4d:c0:6a:b1:6c:83:0d:aa:ec:44:
         41:1a:03:f7:64:85:3f:2a:ca:92:05:68:2f:b1:70:c8:5e:7e:
         3e:1c:1d:2f:3f:26:56:e7:a6:36:6b:79:b1:4a:16:c2:f6:ca:
         a8:92:5f:10:9b:29:62:84:9d:9f:46:0b:f6:a0:a1:a4:6d:f7:
         6c:b7:1d:98:79:ee:cc:3f:f7:65:5b:76:cf:e0:5a:d9:d4:4e:
         9c:ac:13:3b:15:75:75:e2:dd:8b:48:e0:27:96:e5:ed:a6:a2:
         6e:51:ea:b0:e5:c5:90:d0:6f:1b:e1:3d:6f:74:df:38:05:e3:
         3d:a8:df:3c:61:bd:cc:81:f2:e1:b2:fa:c2:07:0a:62:01:50:
         75:81:34:1a:2c:10:1c:b6:e3:7f:4e:62:d2:96:74:53:75:ae:
         51:32:a1:bb:89:8e:f0:bc:db:ca:d9:8e:af:fc:cd:33:4a:e6:
         6c:20:c8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:52 2024 by rpki-client on console-ams.rpki-client.org