Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1E0EE3F2587C11EF9BCD5FAB762E951A.roa
File:                     1E0EE3F2587C11EF9BCD5FAB762E951A.roa (raw, json)
Hash identifier:          j7fcpPfHfI83weTllOga/EPkaKF3X67NFDIBkN20WbM=
Subject key identifier:   2A:8A:2A:97:70:8E:2B:95:F0:F1:0C:58:33:A3:1C:6A:54:37:50:10
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0E13
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1E0EE3F2587C11EF9BCD5FAB762E951A.roa
Signing time:             Mon 12 Aug 2024 07:25:57 +0000
ROA not before:           Mon 12 Aug 2024 07:25:54 +0000
ROA not after:            Mon 12 Aug 2030 07:25:54 +0000
asID:                     50028
IP address blocks:        161.123.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3603 (0xe13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug 12 07:25:54 2024 GMT
            Not After : Aug 12 07:25:54 2030 GMT
        Subject: CN=66b9b905-174c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f5:fd:62:1d:eb:cd:e8:eb:a6:27:16:b0:ec:
                    e1:26:1d:47:c3:df:66:f1:23:21:69:a9:3e:11:22:
                    b7:33:59:f1:f2:de:16:31:7d:08:ce:93:e2:31:25:
                    9a:f1:5c:1b:eb:89:78:98:2f:a7:72:c5:c9:cb:16:
                    53:2d:14:68:bb:55:88:da:74:27:44:47:a6:f6:93:
                    06:55:e7:8d:32:7c:a6:b7:2e:26:fa:c5:19:69:55:
                    c9:24:60:8b:1b:d6:7d:55:2d:c8:fc:d1:16:ed:7f:
                    86:f7:0b:65:6f:e2:76:31:f6:87:ae:ca:f2:e2:1b:
                    6f:df:73:73:5e:73:0f:d5:18:10:27:35:ea:12:99:
                    17:29:68:c8:d1:63:4b:02:da:26:2c:65:c0:4a:84:
                    1e:0c:8b:d0:8e:4d:0f:fb:a6:1f:74:15:46:a1:59:
                    d1:47:2e:97:42:b5:bf:aa:86:e7:d7:f2:33:96:a2:
                    9d:63:49:7a:fe:4b:56:4a:4c:50:d9:af:b6:b3:97:
                    d7:19:29:52:5d:63:b4:4c:7a:07:02:cb:34:6a:a4:
                    16:dc:65:64:27:55:bc:25:86:5d:ff:d3:f2:b0:6a:
                    6a:ba:bc:19:22:ed:99:53:c1:8a:f9:6a:2f:fb:37:
                    f9:41:4d:b9:10:6a:25:c7:e0:c8:95:ed:8a:55:80:
                    9e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:8A:2A:97:70:8E:2B:95:F0:F1:0C:58:33:A3:1C:6A:54:37:50:10
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/1E0EE3F2587C11EF9BCD5FAB762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:23:75:c1:5a:40:eb:c8:53:f3:e1:5d:d9:3d:3f:61:12:b4:
         49:7f:84:76:b7:e9:ee:4a:74:a1:7f:10:fd:d3:cf:85:86:35:
         7f:14:d2:d2:4e:05:e4:70:4c:3d:51:ac:39:4b:4b:eb:4d:69:
         6c:2e:11:92:90:99:79:83:d3:d6:08:d7:f2:1b:98:b3:ae:91:
         f7:76:28:d2:f8:bf:1f:5c:01:b3:d6:d5:50:d7:45:e0:a9:69:
         1f:ab:66:4d:48:d8:fa:3f:9b:cd:85:2c:5c:2e:3f:76:81:91:
         54:4e:5b:cb:47:69:02:3b:1b:0c:ab:00:57:12:15:0e:34:fd:
         3b:74:4a:cc:a5:8a:71:5c:17:28:93:77:da:29:bb:da:41:e5:
         2a:ba:9e:79:cb:90:a4:ed:73:46:5a:c2:22:16:30:da:96:55:
         91:8d:e5:63:c2:63:a2:62:27:ef:dc:b0:b9:20:25:99:f5:8a:
         08:fd:28:98:d0:0b:b0:45:e3:45:a3:b4:ff:d5:8d:cb:96:9e:
         85:3b:4a:7e:ad:bc:f1:a3:7f:70:17:0e:b4:a4:87:d2:a1:d9:
         1c:2b:61:85:18:03:04:0d:fd:23:1b:42:69:77:41:11:f4:1f:
         b8:97:45:1a:a6:98:48:b6:43:90:9f:b3:03:6a:bd:df:03:be:
         8c:e7:6a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----