Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/97E367AE8E6611EB8103A46CF8AEA228.roa
File:                     97E367AE8E6611EB8103A46CF8AEA228.roa (raw, json)
Hash identifier:          e2XQQBe/+KWcM7cIO5S9ibGFcKgcrbxG4dVNAASJpqI=
Subject key identifier:   23:85:6D:01:07:BB:6E:1E:56:D1:26:BF:81:84:01:4F:61:9B:2A:6B
Certificate issuer:       /CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Certificate serial:       025F
Authority key identifier: 86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
Authority info access:    rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/97E367AE8E6611EB8103A46CF8AEA228.roa
Signing time:             Fri 26 Mar 2021 19:08:05 +0000
ROA not before:           Fri 26 Mar 2021 19:08:01 +0000
ROA not after:            Mon 31 Mar 2031 19:08:01 +0000
asID:                     715
IP address blocks:        160.0.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
                          rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
        Validity
            Not Before: Mar 26 19:08:01 2021 GMT
            Not After : Mar 31 19:08:01 2031 GMT
        Subject: CN=605e3115-06a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:24:6c:6b:81:0d:e2:56:cc:14:af:45:25:38:
                    cc:d9:c1:13:eb:61:bd:7c:28:b4:79:f7:c1:ec:ea:
                    1b:14:0e:0c:5e:44:49:bb:53:6a:79:33:da:7c:e9:
                    b7:ae:75:f9:8d:e0:f1:3f:af:77:8a:a0:f5:5f:ac:
                    47:6c:ce:ea:6e:2b:61:3f:e4:d5:92:fe:f2:53:98:
                    fc:28:37:60:70:03:59:db:7f:72:71:74:04:58:c8:
                    32:03:dd:18:48:0a:2b:9f:ff:97:aa:99:76:1f:cf:
                    9f:1a:91:eb:4f:ef:ea:8c:2a:dc:d8:3d:1e:b3:3d:
                    4b:7f:31:74:6c:4e:7b:c6:ca:77:cf:01:b5:82:25:
                    94:16:3a:7a:61:34:cc:91:36:be:43:49:e0:e7:9d:
                    06:eb:ca:3b:af:4e:45:dc:ab:54:ac:5a:9d:dc:0b:
                    87:e4:4f:ca:d6:ac:66:d8:14:bd:52:06:31:02:f7:
                    85:d7:24:35:b7:6d:44:03:ec:b6:93:8b:d5:2e:e8:
                    e4:cb:b4:3a:1f:8b:7b:15:62:ec:99:d4:2a:d7:54:
                    49:c1:5b:35:a7:a4:8e:2a:bf:9c:71:9a:07:b8:13:
                    93:32:fb:5e:48:6a:4c:1e:7e:99:42:0e:c4:42:75:
                    4f:34:01:dc:0a:00:4b:a5:b0:33:0f:a4:bf:1c:e9:
                    c5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:85:6D:01:07:BB:6E:1E:56:D1:26:BF:81:84:01:4F:61:9B:2A:6B
            X509v3 Authority Key Identifier:
                keyid:86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/97E367AE8E6611EB8103A46CF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.0.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         44:30:31:bb:5a:34:af:bd:98:4f:d0:01:31:c7:fc:61:a5:d8:
         a2:b8:d1:87:ca:d2:04:0a:60:33:30:be:92:de:ef:bc:26:54:
         ab:50:22:b7:68:8a:c9:9d:68:25:1c:20:d8:86:9c:35:37:77:
         95:2f:dd:c6:2e:e0:76:a5:b8:f8:67:c2:67:c2:17:81:3e:6f:
         87:dc:1d:ac:cf:5e:8f:b7:60:1d:a7:a0:e4:dc:de:09:7a:da:
         27:82:92:5e:ea:28:cf:38:df:13:dc:21:79:8b:26:f8:de:3d:
         d4:f2:8f:84:22:9e:6e:9b:db:e4:9c:2d:79:db:34:09:ec:63:
         aa:2f:7c:25:bb:f0:80:d1:3d:38:c4:f6:d2:32:11:9d:2a:3a:
         86:0f:07:dd:e6:e0:59:e5:9b:d7:ef:02:44:83:f6:e9:3d:6c:
         f9:cd:f4:a9:23:3e:79:d1:31:bf:0d:99:71:d5:3c:98:f3:da:
         d1:27:24:9b:6e:2d:1f:18:88:f7:e9:ed:e3:d5:a7:4f:28:35:
         94:ca:20:e1:79:9e:fd:7a:1d:b1:0d:8e:06:56:20:e6:ca:cb:
         c5:e0:93:19:50:16:c4:a0:80:f3:29:f0:fc:58:d4:c7:7b:24:
         c3:fc:e2:aa:c7:e3:8b:97:a0:db:ff:9f:48:ab:fd:29:36:69:
         b0:ea:82:6e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODU4OEVBUjExMC8GA1UEBRMoODZFQUVDNDI5NERGQkE3MDQ1QTg4NjQyRTlERkM0
NTUxQjM0QzI1NTAeFw0yMTAzMjYxOTA4MDFaFw0zMTAzMzExOTA4MDFaMBgxFjAU
BgNVBAMTDTYwNWUzMTE1LTA2YTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYJGxrgQ3iVswUr0UlOMzZwRPrYb18KLR598Hs6hsUDgxeREm7U2p5M9p8
6beudfmN4PE/r3eKoPVfrEdszupuK2E/5NWS/vJTmPwoN2BwA1nbf3JxdARYyDID
3RhICiuf/5eqmXYfz58aketP7+qMKtzYPR6zPUt/MXRsTnvGynfPAbWCJZQWOnph
NMyRNr5DSeDnnQbryjuvTkXcq1SsWp3cC4fkT8rWrGbYFL1SBjEC94XXJDW3bUQD
7LaTi9Uu6OTLtDofi3sVYuyZ1CrXVEnBWzWnpI4qv5xxmge4E5My+15IakwefplC
DsRCdU80AdwKAEulsDMPpL8c6cXRAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUI4Vt
AQe7bh5W0Sa/gYQBT2GbKmswHwYDVR0jBBgwFoAUhursQpTfunBFqIZC6d/EVRs0
wlUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg1ODhFL0I1RjQyNTQwQ0IyRjExRTlBNjI5MjkyN0Y4QUVBMjI4L2h1cnNR
cFRmdW5CRnFJWkM2ZF9FVlJzMHdsVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2h1cnNRcFRmdW5CRnFJWkM2ZF9FVlJzMHdsVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjg1ODhFL0I1RjQyNTQwQ0IyRjExRTlBNjI5MjkyN0Y4QUVB
MjI4Lzk3RTM2N0FFOEU2NjExRUI4MTAzQTQ2Q0Y4QUVBMjI4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAegAAAwDQYJKoZIhvcNAQELBQAD
ggEBAEQwMbtaNK+9mE/QATHH/GGl2KK40YfK0gQKYDMwvpLe77wmVKtQIrdoismd
aCUcINiGnDU3d5Uv3cYu4HaluPhnwmfCF4E+b4fcHazPXo+3YB2noOTc3gl62ieC
kl7qKM843xPcIXmLJvjePdTyj4Qinm6b2+ScLXnbNAnsY6ovfCW78IDRPTjE9tIy
EZ0qOoYPB93m4Fnlm9fvAkSD9uk9bPnN9KkjPnnRMb8NmXHVPJjz2tEnJJtuLR8Y
iPfp7ePVp08oNZTKIOF5nv16HbENjgZWIObKy8XgkxlQFsSggPMp8PxY1Md7JMP8
4qrH44uXoNv/n0ir/Sk2abDqgm4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:47 2024 by rpki-client on console-ams.rpki-client.org