Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/FB9A12F48E0211E9B8ABE44BF8AEA228.roa
File:                     FB9A12F48E0211E9B8ABE44BF8AEA228.roa (raw, json)
Hash identifier:          Gatab+2uv5qKhboPXwi4ii30P6zNxnvir8uQqIaNONc=
Subject key identifier:   C6:CC:B9:4A:A8:AA:C4:13:72:09:F2:26:2D:E5:20:FE:33:A4:0E:36
Certificate issuer:       /CN=F36F56CAAR/serialNumber=9831B838BE2B90047CE52BD425A08295D4361EF2
Certificate serial:       02
Authority key identifier: 98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/FB9A12F48E0211E9B8ABE44BF8AEA228.roa
Signing time:             Thu 13 Jun 2019 17:45:08 +0000
ROA not before:           Thu 13 Jun 2019 17:44:51 +0000
ROA not after:            Mon 30 Jun 2025 17:44:51 +0000
asID:                     328037
IP address blocks:        164.160.88.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.mft
                          rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 30 Mar 2024 00:16:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F56CAAR/serialNumber=9831B838BE2B90047CE52BD425A08295D4361EF2
        Validity
            Not Before: Jun 13 17:44:51 2019 GMT
            Not After : Jun 30 17:44:51 2025 GMT
        Subject: CN=5d028ba3-98ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:1d:7f:64:65:ab:77:fd:4f:71:18:70:15:
                    9a:75:e5:98:b0:77:53:98:38:d4:62:b3:9f:6f:a0:
                    72:a5:b7:44:d9:e1:c7:d2:f5:83:0b:ef:01:fb:fe:
                    5e:1e:9a:41:a2:40:44:ac:b5:e1:4c:81:81:a1:11:
                    49:a5:ee:d9:ae:8f:ee:4d:85:16:dd:56:09:14:1b:
                    a0:ad:25:7e:64:0d:c3:53:dc:ec:49:62:3e:ab:d2:
                    a8:de:4c:3c:60:cf:93:ab:09:e0:3d:b3:8f:ba:c0:
                    9f:e9:09:8c:2c:cc:1e:ee:c2:d2:c0:7e:79:18:c6:
                    e2:b7:9f:ef:23:62:8f:2e:9e:b8:a1:86:df:87:14:
                    6f:a3:da:97:e4:40:2d:44:02:06:f8:e3:ec:7d:d2:
                    7f:c6:9f:22:c7:b7:28:65:57:30:17:02:a1:99:e1:
                    5f:a9:2b:04:db:24:39:59:89:b1:ba:13:54:8e:e3:
                    aa:9a:f4:f3:3e:c9:a2:5b:41:1a:75:92:e7:55:c1:
                    02:1e:19:bb:10:b2:57:ce:05:df:42:47:8c:e7:b3:
                    68:85:dc:b4:e7:11:02:4a:40:27:b2:d8:84:2d:cf:
                    46:92:a1:34:f6:65:69:99:d1:fe:fd:47:77:5d:88:
                    61:b6:20:0b:13:c9:b2:2b:d7:60:7e:70:c7:d5:00:
                    ab:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:CC:B9:4A:A8:AA:C4:13:72:09:F2:26:2D:E5:20:FE:33:A4:0E:36
            X509v3 Authority Key Identifier:
                keyid:98:31:B8:38:BE:2B:90:04:7C:E5:2B:D4:25:A0:82:95:D4:36:1E:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/mDG4OL4rkAR85SvUJaCCldQ2HvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mDG4OL4rkAR85SvUJaCCldQ2HvI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/0D056CD48E0111E98519644AF8AEA228/FB9A12F48E0211E9B8ABE44BF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.160.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:26:ba:68:e0:84:26:7d:74:c9:66:c0:40:5b:14:07:c2:11:
         d4:f4:78:6c:3c:0f:2f:9a:6d:f9:52:c4:07:8e:8d:68:61:50:
         62:3f:67:d6:7b:ad:67:d1:52:21:81:9d:82:03:1d:97:9d:33:
         22:70:48:be:5c:a8:d1:e1:0a:07:93:01:7e:3a:47:f4:c8:54:
         97:af:84:cf:d9:3b:58:c7:88:49:88:9f:14:0b:88:48:94:a0:
         bb:5e:82:16:ef:b3:c3:da:1c:3e:ee:de:c8:d0:d9:81:41:fc:
         5c:9d:39:5d:da:a2:84:57:25:75:4a:07:58:2c:f9:c7:72:e4:
         b1:be:d5:eb:0c:db:74:89:9a:cf:c2:39:09:f8:b2:29:6d:c8:
         42:f0:7e:3b:e4:23:ee:75:b8:ec:2b:95:30:53:52:24:d3:7c:
         66:6f:1c:ea:ad:b9:a0:67:dc:c0:60:3e:b0:8f:4f:a8:3b:06:
         9d:46:e1:ce:fb:78:dd:84:69:5a:88:af:ec:42:96:53:93:7e:
         a7:94:03:36:d4:a2:58:5c:d1:c8:4d:06:ae:dd:b7:26:aa:5b:
         75:3c:3c:c4:dc:8d:62:58:c0:f5:c5:70:42:a8:03:46:e0:05:
         b2:c1:31:2b:ff:c8:6e:73:af:ec:f4:a6:87:72:46:6b:88:f6:
         73:15:e4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 01:52:58 2024 by rpki-client on console-fra.rpki-client.org