Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/2AAAA51ACA5F11EAB07F4086F8AEA228.roa
File:                     2AAAA51ACA5F11EAB07F4086F8AEA228.roa (raw, json)
Hash identifier:          9lpPgbRATZcc3ZHLRlyfVXyO2KMqQ5Z59ZWuFR9owTA=
Subject key identifier:   B2:C2:D9:B9:CF:3B:13:AF:AA:34:F6:1A:7A:6C:52:F3:0D:A3:11:90
Certificate issuer:       /CN=F36B95DEAR/serialNumber=3EE1A342951BC120226271F30B850A877E7AA19B
Certificate serial:       07
Authority key identifier: 3E:E1:A3:42:95:1B:C1:20:22:62:71:F3:0B:85:0A:87:7E:7A:A1:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/2AAAA51ACA5F11EAB07F4086F8AEA228.roa
Signing time:             Mon 20 Jul 2020 08:01:08 +0000
ROA not before:           Mon 20 Jul 2020 08:01:02 +0000
ROA not after:            Sat 20 Jul 2030 08:01:02 +0000
asID:                     327849
IP address blocks:        169.255.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
                          rsync://rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 17 Jun 2024 00:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B95DEAR/serialNumber=3EE1A342951BC120226271F30B850A877E7AA19B
        Validity
            Not Before: Jul 20 08:01:02 2020 GMT
            Not After : Jul 20 08:01:02 2030 GMT
        Subject: CN=5f154f44-e1eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:97:20:1f:fc:63:51:61:ae:89:07:7a:a6:5f:
                    24:82:82:47:0f:aa:e8:3e:2c:56:cf:38:b3:0f:1c:
                    66:67:7c:87:f1:dc:96:8a:8e:0e:77:d4:b8:1d:cd:
                    cd:2c:b2:1e:93:c8:fb:a4:64:60:2d:07:26:3d:ca:
                    d6:f3:c8:f8:58:67:f5:4f:4e:74:cd:f5:a9:b3:c1:
                    80:c8:39:ca:2a:65:a3:51:0f:e6:74:78:88:f8:29:
                    9c:85:f6:1e:3e:bc:0c:89:99:41:29:25:1e:39:97:
                    f4:24:9b:55:2c:63:ba:ed:54:f0:6b:95:58:2b:3b:
                    66:83:cf:42:cc:e6:b6:21:3c:b8:17:59:ae:31:b6:
                    5e:81:e3:ea:6f:19:da:9f:b1:8e:39:33:14:0b:25:
                    73:1b:48:1d:ad:31:3f:e2:e5:ae:47:fc:34:e9:1e:
                    64:23:38:75:8a:25:df:13:59:65:28:56:42:39:8c:
                    73:8d:ea:ca:b6:78:20:29:c0:50:29:ba:39:5b:a2:
                    c4:b3:b0:74:04:2b:64:1d:6b:12:8b:cd:b3:19:30:
                    f4:c7:93:5a:fd:63:e1:4e:74:de:41:d3:7e:c7:4c:
                    b0:d9:a6:51:4d:0b:de:29:ee:e2:a1:9a:d0:de:7a:
                    12:b9:b7:a5:b1:19:c5:d8:a4:8a:c4:f1:03:c2:0a:
                    35:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C2:D9:B9:CF:3B:13:AF:AA:34:F6:1A:7A:6C:52:F3:0D:A3:11:90
            X509v3 Authority Key Identifier:
                keyid:3E:E1:A3:42:95:1B:C1:20:22:62:71:F3:0B:85:0A:87:7E:7A:A1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/2AAAA51ACA5F11EAB07F4086F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.255.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:0b:2c:ab:6a:e2:ab:d9:92:87:fc:0a:69:24:29:ea:ea:99:
         bb:8c:0d:20:e7:4b:e8:b8:b8:ab:a0:cd:11:2e:c0:02:b4:77:
         5a:a3:85:4d:b7:73:fa:46:c8:25:eb:ce:66:88:1e:94:09:a8:
         71:21:f5:07:58:85:0f:6a:7c:bc:f6:23:f1:04:5e:0d:62:ab:
         60:98:7d:19:61:16:b6:7d:0c:41:9e:50:53:b6:b0:e2:b5:9a:
         6a:f3:43:08:4a:a4:69:4d:39:14:36:49:dd:9e:18:5f:8a:af:
         12:ee:b0:6c:78:fc:90:d4:a3:4d:96:42:f8:ca:db:66:f1:f8:
         82:e4:6e:f9:e3:c4:b3:9b:30:c0:91:35:c6:5d:3e:a5:99:e8:
         c1:5e:e5:21:55:5b:05:5e:f9:49:81:c2:fc:b1:a3:65:8a:e7:
         60:66:bc:36:9e:cf:9d:c7:87:b8:15:46:16:65:3f:27:57:73:
         79:1a:28:93:de:41:53:67:df:48:a5:ad:1e:4a:9b:20:9b:82:
         01:94:de:46:e0:7e:6b:94:3f:c7:d2:82:23:30:d4:e5:5e:94:
         36:7a:b3:fe:9d:ac:ea:64:b2:1b:10:2c:6b:dc:c4:aa:fa:16:
         87:f1:26:b2:7e:5c:23:83:68:3a:78:2a:a6:6d:10:b4:bf:99:
         05:09:37:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:44:19 2024 by rpki-client on console-ams.rpki-client.org