Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06A12F305E1911EE9D05DF4B4AD9E6FC.roa
File:                     06A12F305E1911EE9D05DF4B4AD9E6FC.roa (raw, json)
Hash identifier:          u/z54Hi07/eELH/6fvm60hv4W35Ttcu5sHDJz7+dOWY=
Subject key identifier:   EE:8F:FE:AB:56:39:5F:FB:E8:BF:88:03:7D:11:0A:93:89:64:34:A9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       3D23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06A12F305E1911EE9D05DF4B4AD9E6FC.roa
Signing time:             Thu 28 Sep 2023 16:06:47 +0000
ROA not before:           Thu 28 Sep 2023 16:06:44 +0000
ROA not after:            Thu 25 Jul 2024 16:06:44 +0000
asID:                     140570
IP address blocks:        156.230.6.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15651 (0x3d23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 28 16:06:44 2023 GMT
            Not After : Jul 25 16:06:44 2024 GMT
        Subject: CN=6515a497-cfbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:eb:8f:90:39:63:e1:2d:b3:b0:b6:88:ec:b5:
                    c3:23:62:be:af:bd:09:dd:04:eb:d7:cb:9d:35:a5:
                    db:72:3a:37:4c:fd:6e:13:95:de:85:e8:13:f3:d5:
                    37:60:32:2e:bb:e9:83:73:c3:24:9c:60:5d:8d:79:
                    b5:0b:e0:a6:ed:ad:1b:93:f8:78:29:65:b0:9d:9c:
                    f0:97:fd:5a:04:c5:c3:8e:04:21:da:40:bd:43:79:
                    d5:ff:af:e0:f7:2f:5f:b5:82:98:df:ea:e2:bd:73:
                    a1:4a:46:88:c9:1f:39:26:08:cc:73:81:ec:89:13:
                    7f:62:43:42:f1:97:44:8f:eb:48:28:a7:4b:64:54:
                    bc:ab:7a:00:20:ab:ab:d0:b1:94:66:f5:85:f1:26:
                    fa:a0:03:b5:07:94:15:a8:a6:56:64:b2:89:e8:ac:
                    09:1e:49:e0:26:ca:5f:bd:65:d4:45:82:06:c7:ed:
                    31:8f:a3:cd:97:e2:9e:62:87:dc:6e:46:43:3f:00:
                    e6:46:11:0e:00:04:3b:28:c5:65:5a:38:4a:d8:74:
                    f4:a2:14:1a:31:56:18:74:79:04:82:96:f0:7a:af:
                    c2:c0:54:d7:92:70:14:09:a0:f2:20:3f:ff:03:16:
                    dd:56:e9:63:72:f3:75:c0:c3:99:ba:7f:2f:08:c8:
                    9a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8F:FE:AB:56:39:5F:FB:E8:BF:88:03:7D:11:0A:93:89:64:34:A9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06A12F305E1911EE9D05DF4B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:3c:89:50:a2:1c:b8:7b:41:ba:1e:1b:a8:71:52:23:7f:f1:
         a0:27:9b:f5:c0:57:48:7d:4d:31:dd:45:4f:1e:96:e2:c8:3d:
         16:8d:e8:cb:8b:62:39:55:07:57:35:14:f3:32:5c:b8:97:b5:
         36:a8:e2:15:f3:60:1f:30:fa:af:68:55:87:2e:ee:ee:1a:cd:
         89:09:8c:7f:22:eb:6d:00:eb:bf:bf:c5:8e:9f:18:65:64:fa:
         e3:6f:7d:f2:1c:7e:5a:50:31:b0:0d:5b:67:ab:b0:09:f5:d7:
         b8:bf:7e:80:88:e3:12:da:0e:fa:b8:14:cf:73:5f:f9:00:23:
         18:d4:f8:76:b8:75:62:3c:f4:ae:99:7a:8b:a6:7f:26:49:7d:
         5b:68:3b:16:7c:82:22:f8:7c:13:54:91:98:d1:fb:a3:ea:44:
         ca:fb:fd:a6:78:8d:b3:6a:69:d3:d5:1a:f2:45:f4:8e:98:25:
         09:93:0d:4d:9c:0b:c2:a5:64:8f:58:44:fb:6e:3b:78:d3:36:
         64:2e:ac:ee:d7:44:74:b9:47:e4:8e:52:c3:72:0a:a1:ec:2f:
         a0:11:24:37:77:d4:1e:0a:ba:3d:a4:e0:03:7d:a9:e7:1c:58:
         a2:8a:19:1c:96:b4:0e:1e:07:f2:f2:d8:ec:c9:11:5f:72:1b:
         ce:6d:db:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:48 2024 by rpki-client on console-ams.rpki-client.org