Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10639644007F11EFB5458C6D017001B1.roa
File:                     10639644007F11EFB5458C6D017001B1.roa (raw, json)
Hash identifier:          /OtCmjEHD5z4dFrpcwiiqGm00iLFofGDddvUKmu9oj4=
Subject key identifier:   A2:76:AC:7F:A6:F8:0F:97:80:90:0D:B4:14:AB:BE:BC:0E:B3:F1:6F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       83C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10639644007F11EFB5458C6D017001B1.roa
Signing time:             Mon 22 Apr 2024 08:05:21 +0000
ROA not before:           Mon 22 Apr 2024 08:05:17 +0000
ROA not after:            Mon 20 May 2024 08:05:17 +0000
asID:                     140869
IP address blocks:        156.225.94.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33733 (0x83c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 22 08:05:17 2024 GMT
            Not After : May 20 08:05:17 2024 GMT
        Subject: CN=66261a41-c3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7e:d4:af:cb:f8:40:85:92:a1:19:1c:da:ac:
                    14:39:16:ce:ad:79:71:73:c6:49:06:34:9c:16:4d:
                    fe:7b:14:87:30:b6:08:15:87:ca:a6:fb:d5:00:78:
                    40:24:45:c3:28:19:e4:89:cf:61:49:84:8a:e9:4e:
                    17:9b:ed:9f:0a:f3:33:e1:90:d6:d5:67:0c:a9:56:
                    a3:7b:85:6d:ba:f0:57:ac:09:64:4e:16:c2:70:96:
                    ba:af:20:5e:e0:63:59:22:de:41:9b:76:91:e3:b7:
                    5c:03:de:cf:9d:6a:b7:7f:a7:1e:22:96:48:2f:b2:
                    4c:a4:ba:c2:7e:5b:78:66:74:40:0d:84:0d:5a:d2:
                    72:b9:bd:d8:4b:1e:58:81:be:14:47:4b:73:41:09:
                    b1:f2:f1:7c:c9:84:14:40:d3:fb:e9:e0:7b:cf:03:
                    a1:ce:b2:39:4d:77:de:95:da:59:6c:ec:b8:1e:0f:
                    74:fa:5a:7e:42:cc:83:7a:1c:07:03:99:01:2c:e0:
                    e9:48:bb:f6:5c:86:bb:f5:e9:bf:6a:c2:a6:31:97:
                    08:43:c2:41:e9:35:1c:29:88:4a:52:37:7f:cb:70:
                    53:82:00:ea:e5:b1:cc:68:67:b4:7d:76:42:cf:87:
                    c7:a7:52:f0:8b:9d:9b:e2:8c:b1:1c:4a:44:28:66:
                    cb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:76:AC:7F:A6:F8:0F:97:80:90:0D:B4:14:AB:BE:BC:0E:B3:F1:6F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10639644007F11EFB5458C6D017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:53:7b:f4:a0:8c:15:68:4b:59:b8:25:5d:3e:1d:6d:85:90:
         33:51:35:42:ff:46:2f:c2:18:6d:66:86:1e:6f:fd:1e:9b:06:
         4a:d6:1e:e9:da:bf:dc:70:64:4b:12:a5:23:24:0b:0d:44:73:
         af:02:e1:fa:8e:a5:ca:5c:a1:15:44:84:e1:ce:a8:b9:d2:29:
         e3:42:46:e8:43:b5:53:d4:72:f6:a1:71:4d:76:dd:c5:fd:c3:
         45:93:ae:60:7d:33:35:e4:96:41:c0:5e:a0:ed:3a:cb:4e:95:
         5a:87:29:4d:b7:a1:0c:22:f2:1c:d4:fd:2f:f2:ee:96:70:2c:
         74:d9:04:ea:e7:49:58:2f:4e:77:8e:5c:56:72:a6:80:16:7d:
         aa:df:18:a8:32:56:8b:00:a0:26:84:b7:c1:91:2a:55:87:0c:
         3c:8c:07:d5:b3:0f:c3:a4:a1:a9:26:7e:2d:72:10:fc:49:54:
         88:bc:5d:18:6a:3a:b6:29:da:e6:e5:9c:21:4a:a0:70:0a:6b:
         8a:73:b2:b9:37:11:3b:00:43:e7:ca:d5:c3:c4:89:6f:bf:a7:
         05:e5:78:39:b7:27:27:b8:3d:9e:65:ff:6c:11:fd:ae:a6:95:
         ad:45:1d:6b:71:56:f8:37:28:c3:2d:b6:a8:87:44:b6:db:3f:
         b6:fa:03:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:48 2024 by rpki-client on console-ams.rpki-client.org