Route Origin Authorization

$ cd rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/

$ rpki-client -vvf 097389D8EC7311ECADF85F8DF1222468.roa
File:                     097389D8EC7311ECADF85F8DF1222468.roa (download)
Hash identifier:          5Mg3mBGGrVHLrdxlCAwtauplY62UCnlBDEGKYkGIFn0=
Subject key identifier:   3B:27:47:55:F9:CC:6D:20:74:BB:69:69:FA:70:FD:F5:95:C4:CD:E0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       14DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/097389D8EC7311ECADF85F8DF1222468.roa
ROA valid until:          Feb 28 06:18:51 2023 GMT
asID:                     139057
IP address blocks:
    1: 156.251.73.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5340 (0x14dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 15 06:18:51 2022 GMT
            Not After : Feb 28 06:18:51 2023 GMT
        Subject: CN=62a979d1-1335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:20:6a:a1:9d:5e:51:64:49:08:05:f5:4f:4b:
                    e7:e1:ff:ea:87:b3:2a:72:43:fc:be:8b:36:da:d9:
                    d8:d7:16:4e:7b:8d:50:c5:30:5a:73:51:ec:d2:ea:
                    40:b9:f4:05:03:87:d4:a6:b5:0e:f7:43:ed:42:49:
                    b9:d3:12:19:b9:c8:bb:65:80:59:3d:8e:e7:c6:22:
                    a5:bd:c5:0e:49:ab:e6:11:b6:50:4f:d1:5a:81:c7:
                    bb:52:f7:ef:f2:c9:57:be:0f:f8:39:80:0d:d3:c8:
                    82:13:85:4a:da:84:a5:97:ec:f2:ba:01:d5:97:16:
                    d0:dd:25:9a:ec:ed:4c:f6:7a:78:61:6c:88:70:e3:
                    17:a1:b4:c9:02:84:67:16:b1:61:3c:ca:6a:15:d9:
                    50:5a:b1:a2:4c:62:dc:a3:65:93:df:09:77:fb:00:
                    11:7b:22:f2:1d:f2:74:dc:31:92:67:a4:db:ce:5e:
                    12:aa:bb:a6:f2:44:13:16:e1:36:9d:28:31:65:10:
                    84:0c:ae:ee:7a:8c:ad:dd:09:c8:47:05:3e:8c:12:
                    e9:a9:fc:a3:43:fd:1e:0c:b9:38:b8:53:53:6a:1f:
                    fa:ce:e6:25:b0:3d:57:a1:23:0b:6c:3d:f8:9d:88:
                    9f:80:78:04:ca:4f:f0:e4:8f:a1:19:03:86:95:18:
                    58:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                3B:27:47:55:F9:CC:6D:20:74:BB:69:69:FA:70:FD:F5:95:C4:CD:E0
            X509v3 Authority Key Identifier: 
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/097389D8EC7311ECADF85F8DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:cd:3b:90:f1:e9:36:ef:2d:f8:5f:a9:43:1f:c7:5a:fd:df:
         dc:c7:00:3f:ab:68:4e:07:c0:31:f2:3c:72:ce:36:8b:90:28:
         f1:6c:06:99:fb:97:38:db:03:92:05:b0:36:8f:ff:10:ab:64:
         5a:8c:be:4c:2c:2d:98:fa:bb:b4:48:19:9e:5c:fa:d8:80:85:
         b5:3e:7c:82:40:f8:0c:45:12:62:c5:ae:15:6b:56:10:6e:66:
         6f:9d:9d:e7:7d:32:e5:46:5f:18:42:db:07:3f:62:e5:fa:6f:
         cc:52:70:ae:84:e5:b9:83:3e:4c:8b:88:57:12:e9:33:8c:96:
         51:e9:38:3e:0c:4b:b5:a4:ea:25:a0:5a:fe:46:b1:b7:43:59:
         d6:a5:fa:8b:98:a2:54:06:a1:34:d8:b4:6c:f2:10:35:3a:60:
         79:20:22:5a:9c:61:c0:cb:37:e1:8d:92:f1:d0:2e:57:3c:41:
         a1:e2:cd:b3:74:5f:7b:d2:0d:f2:51:86:9b:96:88:38:b5:34:
         9b:7e:d2:ae:d8:21:70:69:95:e1:26:f4:91:d6:8f:57:a0:45:
         c5:f4:56:ff:e9:c1:c9:e3:3d:63:68:68:56:4d:7c:ee:b9:cf:
         b7:5a:55:c5:36:2c:73:d0:91:c4:02:6f:46:94:a5:63:ac:f3:
         db:13:ca:5a
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFNwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA2MTUwNjE4NTFaFw0yMzAyMjgwNjE4NTFaMBgxFjAU
BgNVBAMMDTYyYTk3OWQxLTEzMzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCWIGqhnV5RZEkIBfVPS+fh/+qHsypyQ/y+izba2djXFk57jVDFMFpzUezS
6kC59AUDh9SmtQ73Q+1CSbnTEhm5yLtlgFk9jufGIqW9xQ5Jq+YRtlBP0VqBx7tS
9+/yyVe+D/g5gA3TyIIThUrahKWX7PK6AdWXFtDdJZrs7Uz2enhhbIhw4xehtMkC
hGcWsWE8ymoV2VBasaJMYtyjZZPfCXf7ABF7IvId8nTcMZJnpNvOXhKqu6byRBMW
4TadKDFlEIQMru56jK3dCchHBT6MEump/KND/R4MuTi4U1NqH/rO5iWwPVehIwts
PfidiJ+AeATKT/Dkj6EZA4aVGFhtAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUOydH
VfnMbSB0u2lp+nD99ZXEzeAwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzA5NzM4OUQ4RUM3MzExRUNBREY4NUY4REYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc+0kwDQYJKoZIhvcNAQELBQAD
ggEBAF7NO5Dx6TbvLfhfqUMfx1r939zHAD+raE4HwDHyPHLONouQKPFsBpn7lzjb
A5IFsDaP/xCrZFqMvkwsLZj6u7RIGZ5c+tiAhbU+fIJA+AxFEmLFrhVrVhBuZm+d
ned9MuVGXxhC2wc/YuX6b8xScK6E5bmDPkyLiFcS6TOMllHpOD4MS7Wk6iWgWv5G
sbdDWdal+ouYolQGoTTYtGzyEDU6YHkgIlqcYcDLN+GNkvHQLlc8QaHizbN0X3vS
DfJRhpuWiDi1NJt+0q7YIXBpleEm9JHWj1egRcX0Vv/pwcnjPWNoaFZNfO65z7da
VcU2LHPQkcQCb0aUpWOs89sTylo=
-----END CERTIFICATE-----
Generated at Sat Dec 3 19:48:34 2022 by rpki-client.