Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3630D050D0AD11EEBE85F570775412E6.roa
File:                     3630D050D0AD11EEBE85F570775412E6.roa (raw, json)
Hash identifier:          3C9aFu4LIPjm+F7XsExwwgBsjSkA2u8f69XYsXMJMmY=
Subject key identifier:   78:E2:2B:05:60:2D:EA:AD:1A:B8:87:32:1F:9B:9E:5B:76:14:72:D8
Certificate issuer:       /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial:       0F67
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3630D050D0AD11EEBE85F570775412E6.roa
Signing time:             Wed 21 Feb 2024 11:34:45 +0000
ROA not before:           Wed 21 Feb 2024 11:34:42 +0000
ROA not after:            Sat 21 Feb 2026 11:34:42 +0000
asID:                     61317
IP address blocks:        102.165.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3943 (0xf67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
        Validity
            Not Before: Feb 21 11:34:42 2024 GMT
            Not After : Feb 21 11:34:42 2026 GMT
        Subject: CN=65d5dfd5-3787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7b:db:9f:c0:ac:60:fb:41:f2:2b:68:1d:f4:
                    98:40:4e:4c:2b:91:fd:01:4b:e1:0a:57:dc:a8:35:
                    2b:75:c9:04:55:9a:a5:13:2f:55:73:b4:74:0d:ff:
                    12:c6:43:0f:b2:16:3e:a2:3d:30:96:15:f6:ef:70:
                    14:33:3c:f9:d4:ab:8c:e2:4a:de:9d:ae:e9:cd:ea:
                    02:7c:60:ad:ed:15:e8:a1:7c:4d:32:0c:48:a0:1a:
                    3f:78:8d:90:df:cd:40:8f:1c:f2:68:7a:38:ca:6e:
                    70:bb:15:50:f3:fd:00:82:ae:b2:83:48:0a:05:b7:
                    c6:e4:cb:c6:5c:bf:e7:5d:0c:8b:e7:ce:aa:3e:5b:
                    5d:67:49:37:fe:c7:49:0a:71:b2:ca:3e:ac:40:9a:
                    9b:c1:83:8c:fb:67:41:c0:a4:cb:4e:6f:02:f8:b9:
                    dc:6c:e2:12:8d:fb:d3:bd:87:09:0b:1c:81:d1:94:
                    b8:df:26:e2:07:c8:4a:ec:1d:3c:e8:51:c0:e9:54:
                    14:e8:30:c8:49:d3:32:a2:2a:9d:14:8d:f1:21:fd:
                    c7:dd:0d:86:1b:56:56:a6:9b:fc:85:4d:75:4c:c4:
                    9a:f5:17:94:c8:16:6e:43:c6:1c:d5:db:54:bd:f1:
                    b5:01:2e:b2:cf:6e:89:b2:84:42:df:3f:8e:36:1d:
                    88:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E2:2B:05:60:2D:EA:AD:1A:B8:87:32:1F:9B:9E:5B:76:14:72:D8
            X509v3 Authority Key Identifier:
                keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/3630D050D0AD11EEBE85F570775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.165.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:b2:54:e8:d5:80:96:ac:31:27:82:22:c1:43:2a:32:19:e2:
         65:9a:5d:36:e7:04:92:7c:13:ea:ab:1c:b2:14:5d:f9:68:e7:
         37:f8:de:aa:bc:a0:bd:f1:ca:e6:68:36:b4:8c:c1:07:3f:17:
         80:2c:b5:30:68:bb:c7:d3:d4:bb:9c:6a:42:d5:2e:4c:b0:b7:
         9b:ea:93:08:c3:19:2e:3e:63:dc:d6:e7:ba:5c:17:75:f2:5d:
         36:2c:cf:a4:5b:6c:22:aa:fa:13:25:16:43:25:e6:95:ae:ee:
         9e:13:a3:a1:6b:85:f5:ea:e0:d0:5e:12:2a:5a:d0:dd:ef:98:
         bd:85:76:e7:03:3d:93:cc:e4:8f:d7:12:db:40:d8:8e:64:f0:
         ce:75:c5:ac:70:c8:35:fa:37:60:a1:33:ec:7c:f6:17:5c:77:
         a0:ad:c6:b1:68:b2:27:64:c2:0d:62:ca:c7:4a:e6:7b:6b:93:
         4a:9e:62:d9:7e:96:aa:cb:bc:3a:c4:00:bd:22:a5:6e:ae:4d:
         9f:6d:32:c8:66:df:4f:37:af:cd:55:0b:fa:02:2e:a8:7a:05:
         a3:ab:82:fd:d5:ac:79:7e:10:0e:a4:95:22:5a:62:f0:a0:71:
         d4:10:17:7a:31:4b:88:e9:08:98:c3:5d:d0:84:22:41:d6:a9:
         4d:6f:4b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:41 2024 by rpki-client on console-ams.rpki-client.org