Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/00307E6259A911EF91DA6285762E951A.roa
File:                     00307E6259A911EF91DA6285762E951A.roa (raw, json)
Hash identifier:          3zIXcyVjpe0mDbJIOm/O5ql4RWpz3CMVHaXxWduDN7Q=
Subject key identifier:   24:CC:41:A9:D8:1B:66:94:64:A1:A0:01:64:4B:75:00:6E:C3:2E:D0
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0E1B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/00307E6259A911EF91DA6285762E951A.roa
Signing time:             Tue 13 Aug 2024 19:19:46 +0000
ROA not before:           Tue 13 Aug 2024 19:19:41 +0000
ROA not after:            Tue 13 Aug 2030 19:19:41 +0000
asID:                     61290
IP address blocks:        161.123.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3611 (0xe1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug 13 19:19:41 2024 GMT
            Not After : Aug 13 19:19:41 2030 GMT
        Subject: CN=66bbb1d2-827e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:30:71:7b:26:5e:0c:ae:45:d4:46:89:83:96:
                    84:e2:a2:b6:da:66:d8:5e:88:26:ea:d6:38:5a:9f:
                    fb:c6:dd:81:05:0e:f2:50:f0:88:e9:17:89:e6:47:
                    4d:43:e9:ea:ed:6f:b7:95:f1:8a:70:85:34:16:96:
                    5c:32:2d:dc:72:d8:be:4f:f8:eb:e4:bc:9e:e9:58:
                    be:46:3c:2d:d8:55:53:8c:c3:f0:39:28:4b:59:f9:
                    7b:f9:e7:18:90:b1:d3:7f:d6:ae:2a:a5:5c:c0:1f:
                    b2:04:86:e7:82:fc:20:5e:b0:85:44:96:32:b9:35:
                    7a:ea:c5:fd:bf:57:af:99:6f:ed:33:8e:4d:1a:b9:
                    4a:e0:d9:77:7c:eb:a0:b8:93:4e:12:a3:a0:89:a3:
                    db:92:78:db:15:62:98:fb:82:2f:ef:a8:b3:fe:b7:
                    d8:7b:ed:c7:49:5b:7c:d4:49:27:f8:d7:b8:9f:65:
                    c0:26:23:31:32:45:85:40:78:4f:1d:36:2a:e6:4a:
                    b2:dd:f0:9f:89:18:6c:d5:ba:9a:21:a0:2e:05:91:
                    cd:fc:d0:58:1b:b1:07:c7:1c:89:61:d6:2c:e5:3e:
                    28:07:43:f2:5d:fd:b9:aa:c0:62:66:df:ea:6f:c9:
                    e0:73:e5:69:3a:13:f7:51:c7:c1:a0:fb:87:e4:64:
                    3a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CC:41:A9:D8:1B:66:94:64:A1:A0:01:64:4B:75:00:6E:C3:2E:D0
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/00307E6259A911EF91DA6285762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:ee:ef:71:c7:99:fd:1b:eb:7c:37:bb:e3:0e:88:37:7e:18:
         f5:81:bc:7e:b2:60:cc:de:25:1d:a2:bd:cd:e5:ca:55:b4:da:
         1c:1c:1d:24:24:f2:ec:96:b5:5d:91:3a:7b:18:77:91:54:cb:
         f1:33:db:d5:62:7f:e7:f8:97:79:a3:e5:87:ed:41:66:d2:80:
         29:0c:ae:5b:3e:66:46:36:93:9a:1b:13:6c:36:67:cf:23:55:
         4a:ca:12:b3:61:1e:0d:e3:67:6f:cf:20:89:77:1f:3f:bb:3e:
         5d:b2:36:87:d2:33:d9:21:26:7d:6c:6f:85:0a:7d:2e:55:2b:
         44:e5:c3:7b:18:3f:40:88:4c:83:59:9a:0a:e5:be:de:60:5f:
         99:9e:85:75:1d:91:89:dd:02:91:3f:b5:a7:76:b2:25:ca:bf:
         db:a0:a6:36:da:16:a2:ef:55:b5:f6:89:79:c1:65:c7:7f:7d:
         9a:3a:06:71:a2:d7:99:7a:31:4d:75:07:74:41:03:cc:06:58:
         f2:b8:da:46:4a:6a:a3:aa:d3:a4:91:43:3c:b8:e5:e6:d0:cd:
         0d:17:34:7c:73:75:57:39:a8:46:34:2d:01:69:40:16:2d:dd:
         99:91:38:f1:03:75:fe:e7:42:c6:50:d5:e8:98:aa:1e:9a:ec:
         ce:c8:73:6f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDhswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yNDA4MTMxOTE5NDFaFw0zMDA4MTMxOTE5NDFaMBgxFjAU
BgNVBAMTDTY2YmJiMWQyLTgyN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDkMHF7Jl4MrkXURomDloTiorbaZtheiCbq1jhan/vG3YEFDvJQ8IjpF4nm
R01D6ertb7eV8YpwhTQWllwyLdxy2L5P+OvkvJ7pWL5GPC3YVVOMw/A5KEtZ+Xv5
5xiQsdN/1q4qpVzAH7IEhueC/CBesIVEljK5NXrqxf2/V6+Zb+0zjk0auUrg2Xd8
66C4k04So6CJo9uSeNsVYpj7gi/vqLP+t9h77cdJW3zUSSf417ifZcAmIzEyRYVA
eE8dNirmSrLd8J+JGGzVupohoC4Fkc380FgbsQfHHIlh1izlPigHQ/Jd/bmqwGJm
3+pvyeBz5Wk6E/dRx8Gg+4fkZDqhAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUJMxB
qdgbZpRkoaABZEt1AG7DLtAwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzAwMzA3RTYyNTlBOTExRUY5MURBNjI4NTc2MkU5NTFBLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChe/YwDQYJKoZIhvcNAQELBQAD
ggEBAC/u73HHmf0b63w3u+MOiDd+GPWBvH6yYMzeJR2ivc3lylW02hwcHSQk8uyW
tV2ROnsYd5FUy/Ez29Vif+f4l3mj5YftQWbSgCkMrls+ZkY2k5obE2w2Z88jVUrK
ErNhHg3jZ2/PIIl3Hz+7Pl2yNofSM9khJn1sb4UKfS5VK0Tlw3sYP0CITINZmgrl
vt5gX5mehXUdkYndApE/tad2siXKv9ugpjbaFqLvVbX2iXnBZcd/fZo6BnGi15l6
MU11B3RBA8wGWPK42kZKaqOq06SRQzy45ebQzQ0XNHxzdVc5qEY0LQFpQBYt3ZmR
OPEDdf7nQsZQ1eiYqh6a7M7Ic28=
-----END CERTIFICATE-----