Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C1DCA62CD0C11EFAE2D0A77762E951A.roa
File:                     7C1DCA62CD0C11EFAE2D0A77762E951A.roa (raw, json)
Hash identifier:          dKc1Dobg128i2Hh25CrgIG3w3LrwNsuVcHmvjMTBNXA=
Subject key identifier:   EE:8F:59:13:ED:6B:A8:88:83:11:BE:8D:36:9B:70:8A:AF:48:9E:0E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       FCCD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C1DCA62CD0C11EFAE2D0A77762E951A.roa
Signing time:             Tue 07 Jan 2025 15:31:38 +0000
ROA not before:           Tue 07 Jan 2025 15:31:34 +0000
ROA not after:            Mon 13 Dec 2027 15:31:34 +0000
asID:                     17561
IP address blocks:        156.239.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Feb 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64717 (0xfccd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Jan  7 15:31:34 2025 GMT
            Not After : Dec 13 15:31:34 2027 GMT
        Subject: CN=677d48da-1fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ab:b5:c8:7b:3b:f1:c4:fc:03:31:1c:44:b2:
                    9a:99:ae:ec:fe:78:08:1d:d5:f3:d4:76:54:ff:7b:
                    d3:ac:1b:1c:ff:c4:0d:48:0c:a6:40:2b:b6:fa:ab:
                    a8:d7:f5:bf:dd:d9:43:43:9e:bb:75:0e:c1:ec:78:
                    9c:d9:69:28:cc:f4:d0:12:c5:c4:f7:cb:ba:26:f9:
                    0b:6a:22:98:67:a2:43:9c:42:25:43:d2:c7:48:3c:
                    dd:f2:1b:ba:03:c6:eb:0b:b6:fa:a1:21:98:ab:09:
                    a9:2f:12:1c:1b:c1:dd:9f:40:d8:b2:45:b0:ef:17:
                    12:fe:bc:37:30:49:4d:73:7c:99:f6:41:ae:23:01:
                    59:95:2b:b6:bf:40:ab:11:ee:00:2d:1e:1c:b4:ab:
                    95:d0:cd:77:df:3d:fa:a1:6a:98:8a:70:df:8b:f5:
                    31:74:2a:10:22:a2:2b:e4:20:5e:b9:ff:bc:f5:e8:
                    cf:fd:a3:0d:76:c6:3e:b4:a4:3a:44:ad:d5:be:6b:
                    70:cd:9d:db:1c:b8:1a:6f:a6:b1:3b:7a:a8:c0:26:
                    e0:f4:b7:c1:45:e2:5f:f5:5a:11:02:88:dd:bc:e6:
                    94:cd:21:c7:47:1f:15:73:79:19:6c:fe:f6:2d:36:
                    69:b5:cd:e9:66:1a:51:ca:a2:c6:c1:dd:4a:28:ec:
                    3b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8F:59:13:ED:6B:A8:88:83:11:BE:8D:36:9B:70:8A:AF:48:9E:0E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C1DCA62CD0C11EFAE2D0A77762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:74:48:5a:d8:c8:05:6c:e7:70:72:93:3c:bc:93:5d:eb:d4:
         33:29:23:95:d0:7a:90:58:ae:e4:3b:17:68:7c:68:24:f3:4e:
         fa:9b:7e:05:70:08:59:93:2b:e3:2b:0d:9f:46:29:81:f2:0d:
         28:b0:af:ac:23:72:74:3b:11:21:56:ec:eb:53:33:f8:e3:67:
         42:bc:55:21:ff:a7:d7:7e:2b:62:39:9f:af:b8:26:92:d5:93:
         b9:0f:36:c8:3d:b1:a4:47:c6:60:74:3d:c3:97:13:77:d2:fa:
         56:9f:83:25:66:18:52:8a:b7:cd:4e:2b:40:7e:fe:c2:d4:ae:
         5e:68:6c:3b:8f:bc:03:2f:10:ac:11:2a:31:9c:86:72:2a:9c:
         1d:fd:8d:e0:fe:72:e0:f5:24:44:0b:69:af:b2:d8:bc:52:c5:
         c6:89:72:bf:2c:c6:b7:4d:b4:97:c4:6d:5d:3b:0d:1d:13:bc:
         ca:3b:2b:4a:70:0a:93:5f:f3:53:85:5f:78:5e:d9:44:21:69:
         a2:be:1f:5e:5f:4e:ee:e0:88:de:1e:e4:37:09:7b:95:7a:7e:
         a3:1a:37:06:61:41:bb:09:e3:8b:3b:6d:f7:16:77:4e:8f:0d:
         e4:3c:27:93:ae:62:68:78:31:65:97:85:11:41:b6:17:ff:c5:
         ee:6c:34:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:19 2025 by rpki-client