Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/769C6180A44311EF9850B673762E951A.roa
File:                     769C6180A44311EF9850B673762E951A.roa (raw, json)
Hash identifier:          00z4JzMpJt8hJrlFhFRoi8s1f5KgZr77Iz076m8Qdxk=
Subject key identifier:   6B:D3:81:10:F0:65:5C:50:CB:4E:76:D1:35:AF:70:FC:96:EC:D8:D1
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       D36A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/769C6180A44311EF9850B673762E951A.roa
Signing time:             Sat 16 Nov 2024 17:51:53 +0000
ROA not before:           Sat 16 Nov 2024 17:51:50 +0000
ROA not after:            Sat 23 Nov 2024 17:51:50 +0000
asID:                     54467
IP address blocks:        156.247.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54122 (0xd36a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 16 17:51:50 2024 GMT
            Not After : Nov 23 17:51:50 2024 GMT
        Subject: CN=6738dbb9-21f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ce:da:80:4f:da:4e:cf:3f:ab:18:be:5c:f1:
                    d4:69:3a:75:87:43:62:cb:9c:37:85:02:f8:62:65:
                    d7:1f:b6:1b:6e:91:8a:f0:33:3e:8b:bd:d9:fc:fe:
                    c8:44:b2:d0:c2:45:3e:e5:5a:35:70:c2:e1:71:56:
                    67:63:c3:3c:2d:e3:3d:20:ce:19:9b:8a:66:ee:25:
                    83:6e:88:ad:8e:73:00:5c:4f:3c:01:d5:04:73:ea:
                    55:d7:14:94:94:4e:00:8a:dc:d4:21:6f:8f:37:4c:
                    78:a1:ea:eb:45:43:bc:d7:a0:d0:41:ef:d8:f2:e9:
                    05:d8:37:e5:54:d2:4c:4f:d1:8c:23:b9:6c:4c:08:
                    8c:1e:19:83:88:35:c8:5c:9a:f3:11:61:f9:f5:b8:
                    70:2a:ae:6c:fd:94:06:5b:07:f5:d1:81:77:0c:4f:
                    ca:cb:c6:77:2c:ee:ac:a3:e4:89:ed:96:e6:7e:97:
                    09:06:2f:dd:21:95:43:f0:34:66:ab:8b:94:7a:f5:
                    eb:96:7b:74:f3:79:52:8b:75:8e:a2:ce:be:74:a1:
                    24:9b:5a:58:8c:ab:1e:cf:15:6f:0f:a0:8b:e2:d5:
                    d3:7a:af:f4:eb:45:2f:8b:08:ce:96:f7:7e:35:af:
                    52:fb:46:ba:82:68:ed:04:26:28:ba:ec:c0:4f:dc:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D3:81:10:F0:65:5C:50:CB:4E:76:D1:35:AF:70:FC:96:EC:D8:D1
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/769C6180A44311EF9850B673762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ba:6c:6c:ac:74:3a:4e:26:6b:94:3c:01:29:02:eb:64:4b:4c:
         37:8f:30:f3:3c:18:f3:95:dd:90:d7:e4:9d:66:e0:95:86:d4:
         73:b8:d9:76:42:19:17:06:0b:cc:e0:5b:f0:f8:a2:28:9e:05:
         a6:9a:0f:26:f4:f1:9d:55:3d:ef:75:ec:b8:d6:66:0b:da:48:
         ae:e3:7c:2f:36:43:2b:3d:4a:c9:90:ae:d3:6e:e2:58:24:88:
         69:6f:5a:c7:56:01:fa:7c:13:41:29:c0:51:46:b5:81:8e:a5:
         69:44:d7:d2:4a:e6:1b:17:b3:a0:fc:9c:12:1f:37:0d:01:80:
         5b:3d:31:5a:0d:6c:cb:bb:43:b6:1f:91:2f:df:b0:fb:fd:c8:
         22:ff:7f:dd:3a:f4:97:5b:ad:78:9f:9a:41:cf:60:11:70:80:
         c6:e1:4b:b6:60:69:d3:b1:2e:8f:fc:0d:9c:bc:f9:2f:94:e5:
         45:e4:cd:5e:90:8f:6c:73:ab:bc:22:4b:ef:4c:fa:c4:9c:2e:
         74:d4:c8:25:51:a8:2e:34:43:33:26:cd:03:61:f0:41:02:8b:
         3b:b5:93:f4:a7:a1:be:01:a3:3a:35:de:67:33:7e:a8:89:8a:
         c5:a6:bf:2a:e8:aa:e1:c1:51:54:8e:48:88:71:b7:6f:e7:b5:
         c0:17:27:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:05:35 2024 by rpki-client on console-fra.rpki-client.org