Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15D5A048736311EFB73062AB762E951A.roa
File:                     15D5A048736311EFB73062AB762E951A.roa (raw, json)
Hash identifier:          hYzUAIfKobLooRmtW/GP8vZ58P6XWs26gS5t4hpLXpQ=
Subject key identifier:   57:0C:6F:66:2F:CA:17:F4:13:E7:E4:83:B1:86:C0:40:52:04:C7:0B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       B692
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15D5A048736311EFB73062AB762E951A.roa
Signing time:             Sun 15 Sep 2024 13:04:48 +0000
ROA not before:           Sun 15 Sep 2024 13:04:44 +0000
ROA not after:            Mon 15 Sep 2025 13:04:44 +0000
asID:                     142629
IP address blocks:        45.202.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 20 Sep 2024 00:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46738 (0xb692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 15 13:04:44 2024 GMT
            Not After : Sep 15 13:04:44 2025 GMT
        Subject: CN=66e6db70-6191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:bc:9e:d0:19:3b:d9:5c:dd:37:7d:da:e1:
                    87:05:ad:a4:6a:3e:fb:d5:b3:4e:a5:b3:80:c4:d3:
                    8d:e2:e8:d8:50:98:47:e0:35:a6:0d:d8:98:f6:eb:
                    d9:8a:8a:88:7b:79:e1:32:dc:5c:54:41:9c:c4:60:
                    b9:7e:5c:c9:ae:3b:c3:67:fd:88:de:a9:1f:ee:c0:
                    4a:17:b6:09:1f:5a:74:67:ba:7c:12:4c:bc:41:4c:
                    13:c1:13:df:31:cc:f4:13:42:92:1f:b5:04:37:0f:
                    20:a6:e6:44:6f:af:36:37:02:3c:c5:c1:20:89:32:
                    c8:ff:0d:af:d5:c1:4d:f9:7d:71:eb:0b:ea:2e:68:
                    5f:02:45:28:d0:04:a4:09:e4:16:c1:ac:78:28:1a:
                    c0:18:9b:81:d7:e5:13:df:8c:c9:28:01:8b:b4:74:
                    0a:1f:2d:d2:c3:3e:9c:52:99:c4:42:03:d1:43:f5:
                    ae:e2:85:5c:35:41:50:b6:cd:74:15:d8:08:96:7e:
                    6c:43:bf:a3:37:17:8d:0a:11:9a:bd:88:40:80:86:
                    99:4f:71:0a:5a:cc:b6:6e:11:49:70:c2:6e:e9:14:
                    65:9a:3b:9e:89:30:48:b1:d5:82:75:2e:d3:11:28:
                    c6:e2:a1:ca:aa:e9:ed:b9:36:6c:a9:be:80:09:6c:
                    bb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:0C:6F:66:2F:CA:17:F4:13:E7:E4:83:B1:86:C0:40:52:04:C7:0B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/15D5A048736311EFB73062AB762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:fb:4d:34:18:6b:6b:ac:bd:e0:69:74:64:ff:6a:96:25:c6:
         7e:8d:8a:10:79:a9:91:2a:61:cd:31:54:d3:d1:92:73:18:12:
         d2:22:7a:1f:30:1c:15:de:f2:3e:b5:8c:a8:ca:c7:8b:d6:6b:
         05:42:43:a8:db:9c:69:aa:74:6c:fb:38:ce:d2:13:f9:e5:81:
         b5:33:84:9e:a8:a5:e0:47:d4:cc:a1:54:6f:66:49:59:e0:23:
         af:f5:a7:c1:16:7f:d0:cf:93:c2:c6:f4:6e:7b:ed:93:02:2d:
         83:19:49:cd:b3:b8:0e:89:76:f9:05:02:ba:ec:cb:05:6c:3e:
         97:a8:f7:6c:c8:a6:92:e4:86:36:1d:99:de:21:8e:a3:df:26:
         20:10:de:11:2d:ac:d5:2d:11:d9:6e:88:cc:09:c5:43:16:f8:
         b8:6a:9d:02:7f:0f:25:74:c0:29:a8:67:24:4e:c1:aa:3f:61:
         04:0d:98:1a:c5:c3:b7:dc:1a:69:92:cc:cc:19:e2:d0:a0:b3:
         62:f9:32:84:fd:e5:1c:77:6b:ec:dc:a7:42:3f:a8:c7:b4:8f:
         50:e2:4b:db:dc:57:52:f1:d5:dc:63:e4:84:bc:6e:94:8a:17:
         6a:f3:c3:50:4e:0b:a2:10:f3:b8:c6:30:f3:10:40:4a:bc:2a:
         a0:2e:a4:14
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDALaSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwOTE1MTMwNDQ0WhcNMjUwOTE1MTMwNDQ0WjAYMRYw
FAYDVQQDEw02NmU2ZGI3MC02MTkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAp6G8ntAZO9lc3Td92uGHBa2kaj771bNOpbOAxNON4ujYUJhH4DWmDdiY
9uvZioqIe3nhMtxcVEGcxGC5flzJrjvDZ/2I3qkf7sBKF7YJH1p0Z7p8Eky8QUwT
wRPfMcz0E0KSH7UENw8gpuZEb682NwI8xcEgiTLI/w2v1cFN+X1x6wvqLmhfAkUo
0ASkCeQWwax4KBrAGJuB1+UT34zJKAGLtHQKHy3Swz6cUpnEQgPRQ/Wu4oVcNUFQ
ts10FdgIln5sQ7+jNxeNChGavYhAgIaZT3EKWsy2bhFJcMJu6RRlmjueiTBIsdWC
dS7TESjG4qHKquntuTZsqb6ACWy79QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFcM
b2Yvyhf0E+fkg7GGwEBSBMcLMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNUQ1QTA0ODczNjMxMUVGQjczMDYyQUI3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcpHMA0GCSqGSIb3DQEBCwUA
A4IBAQA6+000GGtrrL3gaXRk/2qWJcZ+jYoQeamRKmHNMVTT0ZJzGBLSInofMBwV
3vI+tYyoyseL1msFQkOo25xpqnRs+zjO0hP55YG1M4SeqKXgR9TMoVRvZklZ4COv
9afBFn/Qz5PCxvRue+2TAi2DGUnNs7gOiXb5BQK67MsFbD6XqPdsyKaS5IY2HZne
IY6j3yYgEN4RLazVLRHZbojMCcVDFvi4ap0Cfw8ldMApqGckTsGqP2EEDZgaxcO3
3BppkszMGeLQoLNi+TKE/eUcd2vs3KdCP6jHtI9Q4kvb3FdS8dXcY+SEvG6Uihdq
88NQTguiEPO4xjDzEEBKvCqgLqQU
-----END CERTIFICATE-----
Generated at Wed Sep 18 08:47:02 2024 by rpki-client on console-fra.rpki-client.org