Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4AF1A968506711EEBCD8EC1D4AD9E6FC.roa
File:                     4AF1A968506711EEBCD8EC1D4AD9E6FC.roa (raw, json)
Hash identifier:          mzJGI9ge7A+gZSamjtiCmLaZMfYeG4zedaQJEzQqvXU=
Subject key identifier:   7C:53:62:E0:2B:22:2F:60:E9:C1:67:EE:CC:19:28:B3:E7:0A:21:C4
Certificate issuer:       /CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
Certificate serial:       079E
Authority key identifier: 7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4AF1A968506711EEBCD8EC1D4AD9E6FC.roa
Signing time:             Mon 11 Sep 2023 05:51:46 +0000
ROA not before:           Mon 11 Sep 2023 05:51:43 +0000
ROA not after:            Tue 13 Sep 2033 05:51:43 +0000
asID:                     197555
IP address blocks:        192.142.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.mft
                          rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 04 Jun 2024 00:16:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1950 (0x79e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669D6BAR/serialNumber=7CA3542AF087A87BACAB1F866EE5FF5B156FA787
        Validity
            Not Before: Sep 11 05:51:43 2023 GMT
            Not After : Sep 13 05:51:43 2033 GMT
        Subject: CN=64feaaf2-9111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0f:cd:d6:41:8f:d7:e7:5e:73:eb:ca:35:86:
                    c0:f6:29:51:32:d6:33:59:48:f2:aa:50:31:4e:1d:
                    a4:e1:f8:c3:45:1a:35:d7:5c:71:01:12:c8:25:be:
                    d8:4f:66:9b:0e:52:66:6a:9a:72:e8:dd:11:df:cd:
                    8a:bf:93:c6:cc:b1:7f:49:55:81:d5:5d:07:e0:08:
                    ff:1f:82:a9:0c:8e:44:6e:c3:dc:35:60:cf:ff:cf:
                    a9:a3:74:41:91:e7:73:09:0c:e4:71:ef:83:1a:2c:
                    f6:04:e5:98:66:68:29:77:76:ff:5a:29:6b:a7:da:
                    42:f8:b8:b0:98:4e:16:b1:a2:43:f3:91:e0:f7:a7:
                    3e:f7:78:65:83:1d:e6:7f:98:4f:28:11:f3:2e:60:
                    f5:35:20:b6:0b:4a:51:4c:49:05:5b:94:8c:80:7b:
                    9f:c7:7c:44:09:bb:c9:cb:52:d6:6c:3a:5f:17:c7:
                    11:c3:12:c7:f4:eb:f5:67:5e:97:12:1f:88:48:f1:
                    57:c9:50:5b:15:28:55:66:9f:4b:ae:63:83:1b:fd:
                    cd:2e:db:80:f8:c3:b5:16:a1:17:52:d3:e1:75:f2:
                    bf:ee:cf:50:63:9b:be:a7:d4:64:b4:23:7e:b8:af:
                    5c:62:7a:ef:77:2e:e7:4a:0f:42:fd:e1:aa:f9:8a:
                    82:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:53:62:E0:2B:22:2F:60:E9:C1:67:EE:CC:19:28:B3:E7:0A:21:C4
            X509v3 Authority Key Identifier:
                keyid:7C:A3:54:2A:F0:87:A8:7B:AC:AB:1F:86:6E:E5:FF:5B:15:6F:A7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/fKNUKvCHqHusqx-GbuX_WxVvp4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fKNUKvCHqHusqx-GbuX_WxVvp4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669D6B/D24A27B8879A11E983704B51F8AEA228/4AF1A968506711EEBCD8EC1D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.142.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:5a:73:3b:47:94:ba:76:c5:7d:8b:73:2b:48:0e:28:af:73:
         f5:60:a6:e6:90:cb:a6:60:16:1e:06:06:34:1e:18:c4:64:c4:
         f0:c9:c8:e2:72:11:b4:24:d1:ae:b1:2e:89:5f:fa:b9:28:93:
         6d:e3:d0:79:67:74:f6:34:a4:f5:1a:00:a4:1b:94:76:d3:84:
         f9:ea:eb:06:2e:e8:f4:05:68:37:5e:24:22:3e:f0:78:61:39:
         3b:d3:68:9d:92:38:76:71:96:b9:07:04:46:7a:a8:15:30:93:
         93:d7:5d:ea:b2:8e:7f:77:08:3e:6b:6e:4e:33:65:52:c1:72:
         e8:ba:54:27:37:c6:93:df:0a:21:7a:4f:73:ca:72:1a:a5:96:
         ae:32:72:46:18:b7:c6:d2:97:53:75:7f:e9:ac:d6:cf:d9:79:
         97:d7:49:1f:de:5d:f6:4f:70:ef:8e:6f:0b:c0:21:64:e3:63:
         e3:18:c1:99:84:1a:d6:9d:e9:e3:a6:28:d5:55:21:6a:ad:30:
         fc:90:72:15:ac:18:1f:bc:ca:9e:82:f3:45:10:66:71:f4:dc:
         0d:45:c3:77:80:52:c5:45:82:96:17:bb:67:f5:24:86:06:6e:
         3a:94:42:7d:ac:88:41:37:dd:a8:70:1e:f2:2e:be:7c:91:9d:
         e7:71:14:85
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICB54wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
NjlENkJBUjExMC8GA1UEBRMoN0NBMzU0MkFGMDg3QTg3QkFDQUIxRjg2NkVFNUZG
NUIxNTZGQTc4NzAeFw0yMzA5MTEwNTUxNDNaFw0zMzA5MTMwNTUxNDNaMBgxFjAU
BgNVBAMTDTY0ZmVhYWYyLTkxMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnD83WQY/X515z68o1hsD2KVEy1jNZSPKqUDFOHaTh+MNFGjXXXHEBEsgl
vthPZpsOUmZqmnLo3RHfzYq/k8bMsX9JVYHVXQfgCP8fgqkMjkRuw9w1YM//z6mj
dEGR53MJDORx74MaLPYE5ZhmaCl3dv9aKWun2kL4uLCYThaxokPzkeD3pz73eGWD
HeZ/mE8oEfMuYPU1ILYLSlFMSQVblIyAe5/HfEQJu8nLUtZsOl8XxxHDEsf06/Vn
XpcSH4hI8VfJUFsVKFVmn0uuY4Mb/c0u24D4w7UWoRdS0+F18r/uz1Bjm76n1GS0
I364r1xieu93LudKD0L94ar5ioIVAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUfFNi
4CsiL2DpwWfuzBkos+cKIcQwHwYDVR0jBBgwFoAUfKNUKvCHqHusqx+GbuX/WxVv
p4cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVBMjI4L2ZLTlVL
dkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZLTlVLdkNIcUh1c3F4LUdidVhfV3hWdnA0Yy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjY5RDZCL0QyNEEyN0I4ODc5QTExRTk4MzcwNEI1MUY4QUVB
MjI4LzRBRjFBOTY4NTA2NzExRUVCQ0Q4RUMxRDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAjl0wDQYJKoZIhvcNAQELBQAD
ggEBABRacztHlLp2xX2LcytIDiivc/VgpuaQy6ZgFh4GBjQeGMRkxPDJyOJyEbQk
0a6xLolf+rkok23j0HlndPY0pPUaAKQblHbThPnq6wYu6PQFaDdeJCI+8HhhOTvT
aJ2SOHZxlrkHBEZ6qBUwk5PXXeqyjn93CD5rbk4zZVLBcui6VCc3xpPfCiF6T3PK
chqllq4yckYYt8bSl1N1f+ms1s/ZeZfXSR/eXfZPcO+ObwvAIWTjY+MYwZmEGtad
6eOmKNVVIWqtMPyQchWsGB+8yp6C80UQZnH03A1Fw3eAUsVFgpYXu2f1JIYGbjqU
Qn2siEE33ahwHvIuvnyRnedxFIU=
-----END CERTIFICATE-----
Generated at Sun Jun 2 03:39:40 2024 by rpki-client on console-ams.rpki-client.org