Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/51F5B2B01FE611EEB3ACF1554AD9E6FC.roa
File:                     51F5B2B01FE611EEB3ACF1554AD9E6FC.roa (raw, json)
Hash identifier:          uciSex8YgFYs63q9jKATNI8zZ79s9CJ1l4hipuvVnOk=
Subject key identifier:   53:91:62:A1:2E:FD:36:3E:2D:97:7C:FD:F3:6A:3A:E3:72:B7:2C:C2
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       0B4F
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/51F5B2B01FE611EEB3ACF1554AD9E6FC.roa
Signing time:             Tue 11 Jul 2023 12:27:37 +0000
ROA not before:           Tue 11 Jul 2023 12:27:34 +0000
ROA not after:            Thu 11 Jul 2024 12:27:34 +0000
asID:                     133499
IP address blocks:        161.123.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 04 Jun 2024 00:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2895 (0xb4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jul 11 12:27:34 2023 GMT
            Not After : Jul 11 12:27:34 2024 GMT
        Subject: CN=64ad4ab9-79ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:67:5f:8a:d6:ca:6b:8d:f7:88:30:f0:6c:
                    8e:00:34:a3:16:ef:cc:14:47:c4:70:23:8c:9b:2e:
                    c6:8e:3c:7b:90:87:70:cc:35:a0:eb:db:4c:08:f2:
                    48:59:28:88:b6:b7:c7:c0:33:13:72:18:ac:3b:78:
                    8c:f3:43:1a:ad:6d:97:bf:bd:ac:ff:ff:d2:21:ba:
                    89:c2:c5:e7:19:18:9a:dd:e4:0d:94:24:29:94:0b:
                    62:04:72:63:d1:4d:0c:62:98:81:5e:28:10:30:d2:
                    5a:6b:2a:50:f3:e7:5c:e4:e4:4d:ef:42:44:76:09:
                    3e:f2:4b:90:1a:9a:96:21:06:95:ff:00:42:4a:84:
                    75:33:c2:19:f4:4b:5f:89:3a:66:ba:17:b2:5c:ce:
                    9b:41:56:37:18:c5:25:fe:f4:6c:fd:b7:c5:11:0d:
                    ff:74:10:69:d2:ad:d1:d1:9e:90:63:3c:f4:64:73:
                    c2:c3:5b:55:36:bd:8e:b1:4d:0d:51:7f:8f:05:46:
                    ec:96:ac:a5:db:c7:04:e1:dd:e2:07:bc:9e:ce:7c:
                    d9:b1:ba:2d:ba:65:d4:f3:c2:ff:72:85:fa:30:89:
                    65:6c:8b:57:58:76:69:81:b5:c5:b5:fe:77:96:30:
                    87:25:df:ea:44:1b:4f:82:17:8c:46:58:46:a5:ae:
                    89:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:91:62:A1:2E:FD:36:3E:2D:97:7C:FD:F3:6A:3A:E3:72:B7:2C:C2
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/51F5B2B01FE611EEB3ACF1554AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:4a:ae:65:01:f3:c5:48:86:9b:7f:16:99:59:b3:33:8e:2d:
         13:bb:12:6d:37:14:c7:7e:66:76:41:3f:6b:c3:38:d9:c2:cd:
         e8:a9:a2:65:66:f0:1d:10:5e:65:80:3f:e2:37:1e:28:b4:78:
         a8:e4:69:5b:a6:ba:ee:8b:62:4e:b1:e4:a3:c2:20:0c:20:73:
         80:09:a8:d3:d1:1d:53:45:6c:c2:13:d8:4d:84:fd:91:0a:30:
         55:e5:7d:d9:e0:e5:b1:47:a5:5a:0b:ff:28:06:ca:e8:03:48:
         0e:b5:4d:d9:09:ec:3f:bc:a7:86:a5:8a:d2:e8:c3:61:a9:d6:
         e2:58:98:65:37:a4:18:60:36:c7:3a:fd:38:5b:3e:67:e6:6e:
         9c:e1:3f:81:0c:0d:6a:7c:4d:6e:76:7d:45:1c:32:31:69:14:
         db:85:33:48:f6:af:9a:49:8d:ef:81:6c:16:d8:e8:77:1d:cf:
         6f:ed:55:b5:83:6b:89:b0:bd:0a:d2:06:8e:80:d3:02:ab:2e:
         88:c1:08:00:1f:d7:6c:4a:94:db:f5:bc:7a:9e:5f:60:05:1f:
         6f:2e:2e:cc:86:6c:45:67:8e:7b:a9:51:34:f2:ff:b7:2a:92:
         40:84:d4:d9:63:4a:76:c1:7f:b9:e5:1e:ec:e8:83:a4:e2:45:
         a3:51:12:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 03:40:59 2024 by rpki-client on console-ams.rpki-client.org