Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FBA95FA68C411EE9E7AE93D4AD9E6FC.roa
File:                     1FBA95FA68C411EE9E7AE93D4AD9E6FC.roa (raw, json)
Hash identifier:          mjISsLm01q3Gm6+z1bM4J+nYnXQ5kG4PWLTLfDtJqlw=
Subject key identifier:   BC:1E:F6:77:50:69:50:18:DB:3A:70:0F:7A:DA:F9:DF:39:F0:69:44
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       3E51
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FBA95FA68C411EE9E7AE93D4AD9E6FC.roa
Signing time:             Thu 12 Oct 2023 05:56:45 +0000
ROA not before:           Thu 12 Oct 2023 05:56:42 +0000
ROA not after:            Tue 27 Aug 2024 05:56:42 +0000
asID:                     138995
IP address blocks:        156.245.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15953 (0x3e51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 12 05:56:42 2023 GMT
            Not After : Aug 27 05:56:42 2024 GMT
        Subject: CN=65278a9d-617f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:81:f5:af:5f:f1:8f:85:ab:ed:96:01:6b:b4:
                    df:7b:99:d2:bb:57:62:96:cb:6b:75:b9:8e:d1:46:
                    34:0a:d5:06:d0:54:f6:41:33:24:e0:ce:fc:c5:08:
                    1b:7d:e0:29:63:95:25:79:6f:92:27:8f:74:fc:58:
                    65:06:e3:02:f9:87:2b:84:9a:ab:29:2f:ba:ea:8d:
                    bf:c3:a9:63:e2:35:40:38:5e:91:e2:9f:be:88:c5:
                    37:e9:cd:3a:d4:d2:45:9d:b9:ba:dc:e7:92:5b:3c:
                    da:ac:1d:96:37:e0:f3:cb:4c:b2:df:65:fc:30:56:
                    25:c2:17:b1:cb:59:0f:64:ca:c6:64:0e:2b:c4:6e:
                    e8:48:7e:40:af:57:19:37:c0:df:be:ac:63:b5:ef:
                    35:08:e3:8b:b9:e9:53:fe:4f:0d:9d:22:2f:a2:9a:
                    25:22:50:f9:97:3f:7c:4b:bc:9a:5e:84:3e:57:91:
                    2b:56:5e:f6:3d:fa:e8:eb:2b:e3:37:d5:77:f9:f8:
                    64:c8:33:fd:a3:b5:5f:68:48:9e:dc:4b:e2:bb:39:
                    46:7b:3b:95:d0:ae:f1:89:fc:86:a9:ac:fd:6a:ce:
                    09:c0:71:ac:60:d1:81:57:2f:39:b6:5b:78:2c:08:
                    eb:63:40:91:61:14:e2:51:5d:24:b7:47:13:f7:db:
                    24:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1E:F6:77:50:69:50:18:DB:3A:70:0F:7A:DA:F9:DF:39:F0:69:44
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FBA95FA68C411EE9E7AE93D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:a2:8f:5a:27:a6:63:8f:8f:3d:0b:02:49:6b:c7:c1:f4:ac:
         e0:df:b3:54:e1:f8:5d:da:2d:f4:e3:2f:3f:32:72:67:5e:ac:
         7e:08:63:9b:28:98:aa:1e:d7:02:2e:57:9e:bf:39:64:87:fd:
         ca:28:8c:dd:13:51:b6:a6:5a:b3:b4:06:8b:7c:04:5e:2b:09:
         3b:92:c4:09:10:3f:37:c3:45:0e:a7:20:81:b3:d6:5b:38:ad:
         8c:f6:21:d8:a4:7b:f3:b4:d0:3d:09:5d:94:39:f9:93:65:d1:
         07:1e:45:33:aa:2a:fe:d9:75:c5:d6:f7:42:ca:02:13:e6:df:
         6d:38:2b:59:27:98:e5:47:52:ea:75:92:c0:e7:c6:47:36:81:
         c5:bb:bb:13:53:eb:52:19:81:fd:fd:82:b7:42:50:c9:87:5d:
         f7:43:8c:66:84:82:26:3c:83:8e:55:63:36:3d:d6:bb:f4:13:
         95:c4:2a:78:73:7d:82:dc:af:70:8f:2f:62:8b:ab:88:21:af:
         94:d4:17:49:ed:9e:df:cd:e5:dc:80:7e:06:c1:9e:47:6f:f9:
         41:2a:bc:63:23:d9:ff:c1:91:b5:66:52:0f:3a:31:5b:e3:2e:
         6f:a1:4c:f0:37:20:55:2d:32:65:ab:47:32:dd:54:d8:ec:6e:
         5e:27:21:dd
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICPlEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzEwMTIwNTU2NDJaFw0yNDA4MjcwNTU2NDJaMBgxFjAU
BgNVBAMTDTY1Mjc4YTlkLTYxN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC1gfWvX/GPhavtlgFrtN97mdK7V2KWy2t1uY7RRjQK1QbQVPZBMyTgzvzF
CBt94CljlSV5b5Inj3T8WGUG4wL5hyuEmqspL7rqjb/DqWPiNUA4XpHin76IxTfp
zTrU0kWdubrc55JbPNqsHZY34PPLTLLfZfwwViXCF7HLWQ9kysZkDivEbuhIfkCv
Vxk3wN++rGO17zUI44u56VP+Tw2dIi+imiUiUPmXP3xLvJpehD5XkStWXvY9+ujr
K+M31Xf5+GTIM/2jtV9oSJ7cS+K7OUZ7O5XQrvGJ/IaprP1qzgnAcaxg0YFXLzm2
W3gsCOtjQJFhFOJRXSS3RxP32ySrAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUvB72
d1BpUBjbOnAPetr53znwaUQwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzFGQkE5NUZBNjhDNDExRUU5RTdBRTkzRDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc9Q8wDQYJKoZIhvcNAQELBQAD
ggEBAFCij1onpmOPjz0LAklrx8H0rODfs1Th+F3aLfTjLz8ycmderH4IY5somKoe
1wIuV56/OWSH/coojN0TUbamWrO0Bot8BF4rCTuSxAkQPzfDRQ6nIIGz1ls4rYz2
Idike/O00D0JXZQ5+ZNl0QceRTOqKv7ZdcXW90LKAhPm3204K1knmOVHUup1ksDn
xkc2gcW7uxNT61IZgf39grdCUMmHXfdDjGaEgiY8g45VYzY91rv0E5XEKnhzfYLc
r3CPL2KLq4ghr5TUF0ntnt/N5dyAfgbBnkdv+UEqvGMj2f/BkbVmUg86MVvjLm+h
TPA3IFUtMmWrRzLdVNjsbl4nId0=
-----END CERTIFICATE-----
Generated at Mon May 6 05:56:28 2024 by rpki-client on console-ams.rpki-client.org