Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/622024743B2811EEAC465A394AD9E6FC.roa
File:                     622024743B2811EEAC465A394AD9E6FC.roa (raw, json)
Hash identifier:          4SEAvj4F2co//JMslEXzhI0cMeo5zcV6XIP6J9T6AFM=
Subject key identifier:   8E:10:7E:DD:A7:3A:C4:96:20:B2:92:2E:F7:18:E9:B2:A5:3D:0A:05
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       35B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/622024743B2811EEAC465A394AD9E6FC.roa
Signing time:             Tue 15 Aug 2023 04:58:33 +0000
ROA not before:           Tue 15 Aug 2023 04:58:29 +0000
ROA not after:            Mon 27 May 2024 04:58:29 +0000
asID:                     140627
IP address blocks:        156.247.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13753 (0x35b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 15 04:58:29 2023 GMT
            Not After : May 27 04:58:29 2024 GMT
        Subject: CN=64db05f8-e61b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:22:87:d2:40:70:c0:1b:ca:0d:d8:fe:8a:
                    12:fc:b6:db:83:24:04:ee:f5:3f:1c:db:2a:b1:74:
                    e7:fd:50:61:4e:e1:12:4f:3f:0f:27:f7:aa:7d:a4:
                    c3:cf:a3:45:04:c1:53:41:3f:be:79:92:0a:71:9f:
                    f6:c8:94:b2:5a:85:4f:70:28:86:dc:3b:c2:f2:f0:
                    fa:be:0f:b6:b7:f0:82:69:3c:e6:d9:b4:ea:d9:e9:
                    51:2f:63:53:3d:7e:2e:1e:d0:a7:e1:15:4b:03:b3:
                    fa:21:f4:05:c0:f7:56:1a:57:f7:ae:d1:0d:97:bd:
                    d5:8a:80:96:84:cf:97:c1:ab:8c:dc:f8:a3:cd:d9:
                    fd:a7:78:27:87:a1:d4:31:16:49:79:75:a9:51:cc:
                    62:ac:e5:1e:2b:ef:10:15:f4:26:88:a4:06:4a:b4:
                    00:12:42:b1:88:b0:66:3c:d9:72:73:32:ad:ab:c0:
                    ee:23:04:6c:9e:4d:5c:fc:4b:5b:09:c4:a9:37:12:
                    08:2e:df:84:96:25:cb:c8:f5:da:fc:6c:24:83:90:
                    8f:fa:d7:41:5a:ad:37:2e:a2:0b:6e:ed:5a:9a:ec:
                    7d:fc:4a:87:63:5e:bb:9a:42:4b:7c:06:66:5f:03:
                    82:22:5b:5c:69:52:6a:2d:d9:43:b8:cb:72:fa:5a:
                    3c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:10:7E:DD:A7:3A:C4:96:20:B2:92:2E:F7:18:E9:B2:A5:3D:0A:05
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/622024743B2811EEAC465A394AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:60:01:91:82:4c:54:2c:af:29:d7:1d:07:2c:ab:13:b9:60:
         c0:66:8a:58:46:d4:14:dd:ea:33:11:ad:08:dd:56:7f:13:a9:
         60:3c:e4:a5:43:fe:ff:fe:5e:31:57:27:72:e9:18:2e:2f:78:
         a1:a2:46:bc:2f:b2:14:c1:d7:e4:b0:2a:8c:e8:1b:a7:a9:d6:
         20:cd:be:84:d0:45:54:6b:8d:48:6d:9d:4c:0d:4d:13:96:41:
         ef:2f:7e:05:26:98:30:31:f8:59:83:1f:59:ce:fa:3b:4c:f9:
         db:79:22:ce:cb:01:96:fd:2a:de:15:98:2c:da:19:41:89:e3:
         f6:81:8b:4d:6a:59:b4:41:54:b4:64:16:78:3c:7d:88:02:e8:
         3e:0a:64:19:e9:72:04:d6:90:b1:b5:cc:58:c7:42:b6:22:b6:
         e6:c5:e0:ce:dc:57:c5:ad:37:6f:56:e6:3f:8f:2c:d8:51:21:
         99:a2:40:9b:c7:77:6b:67:e7:2f:10:90:77:c7:58:05:ac:ad:
         ba:e7:c3:ad:2b:2e:94:d4:ca:89:df:22:8b:4b:a6:5c:10:52:
         b8:9e:20:1a:23:c9:b4:99:e4:06:01:41:cb:ae:c5:bb:29:9a:
         6b:66:6e:71:c0:62:9e:6f:ae:98:d1:7f:3d:f8:bb:28:65:fc:
         1d:e9:3b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:00 2024 by rpki-client on console-fra.rpki-client.org