Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2566489CF91011ED8402F3804AD9E6FC.roa
File:                     2566489CF91011ED8402F3804AD9E6FC.roa (raw, json)
Hash identifier:          +cshfz612df4bZRXNKyKA5sGw8CdpWB1pUnST/OLgls=
Subject key identifier:   3C:4E:F7:AB:2D:16:D3:A4:E7:A4:D5:79:38:1B:C5:A8:CB:2F:18:B7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       2672
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2566489CF91011ED8402F3804AD9E6FC.roa
Signing time:             Tue 23 May 2023 02:18:46 +0000
ROA not before:           Tue 23 May 2023 02:18:42 +0000
ROA not after:            Tue 25 Jun 2024 02:18:42 +0000
asID:                     135607
IP address blocks:        45.202.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9842 (0x2672)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 23 02:18:42 2023 GMT
            Not After : Jun 25 02:18:42 2024 GMT
        Subject: CN=646c2286-715b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:48:2e:13:db:d1:c2:e3:e6:4d:94:be:8c:7f:
                    e0:80:7e:e5:ef:f5:08:1c:85:08:db:72:8b:94:0c:
                    21:50:7b:fe:08:3c:b3:e8:a5:14:34:0e:ad:83:4b:
                    1a:83:dc:06:cb:51:d3:91:d2:aa:9b:25:9c:09:a3:
                    77:e1:15:8d:22:dd:58:86:a9:eb:c7:80:6f:64:4f:
                    54:e4:94:ab:82:5b:6c:cb:4d:dc:50:4a:f9:63:0a:
                    f2:62:ff:4a:19:01:a3:f6:49:2c:4c:ba:43:83:d9:
                    b2:e6:16:80:c5:b2:c7:b3:5f:83:0e:4f:f5:15:b6:
                    b7:02:db:09:e0:aa:b7:9c:9a:9b:e8:49:4d:80:98:
                    22:03:9f:11:1d:9f:b0:f8:04:a8:43:0e:7b:ae:12:
                    bc:46:58:bb:88:d4:82:87:34:cc:e8:2f:90:5b:0d:
                    6e:d1:89:f6:bc:64:ee:03:8c:88:58:5b:d0:48:c9:
                    b3:84:17:5b:f5:4f:c9:80:3c:b2:2e:7c:05:21:97:
                    5c:17:51:4c:63:57:fa:4e:89:aa:47:0f:00:84:83:
                    6b:fa:6d:57:11:4e:41:fb:3d:b0:a0:c4:b1:11:81:
                    98:b1:bd:5a:36:9a:2d:66:ee:b9:ad:4d:be:9b:82:
                    6b:0e:cb:47:96:23:66:65:d2:12:42:65:0d:63:2a:
                    78:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:4E:F7:AB:2D:16:D3:A4:E7:A4:D5:79:38:1B:C5:A8:CB:2F:18:B7
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2566489CF91011ED8402F3804AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:a9:f3:93:83:0b:08:7f:87:63:ce:d6:f9:1f:d1:de:4e:5e:
         fe:cb:ad:b8:56:b9:78:19:f2:85:19:92:7d:4e:cb:0d:53:0d:
         53:d8:30:b2:e4:b1:f5:b0:de:a7:e7:15:94:aa:e4:25:47:31:
         eb:9b:83:c1:0e:ab:1c:fa:51:21:83:21:58:dd:4b:ed:27:09:
         66:b0:ba:2b:bd:3e:5a:47:f0:9d:a0:cd:3f:60:e1:a6:4a:2f:
         ea:67:67:47:0c:fb:5f:1d:8d:d3:31:66:c3:3f:0d:91:29:3a:
         43:eb:c9:f9:27:b3:1e:4e:51:19:f7:84:da:ca:e8:96:bf:33:
         0d:8e:37:9e:73:8b:57:e1:11:39:4e:ec:bd:de:ce:40:c9:93:
         4f:db:bf:54:95:4b:dc:cd:c6:33:63:79:80:01:57:61:56:ce:
         aa:5e:dd:b5:b4:43:16:e3:07:51:67:60:f2:90:a2:b8:53:33:
         6e:a9:29:84:12:7a:15:83:38:16:bb:c4:a7:d8:7f:53:a3:42:
         fb:49:ab:d5:28:5a:8c:b6:44:a1:1f:35:7e:fe:be:68:93:48:
         2f:ea:20:58:12:f2:ba:38:fc:87:29:6a:ee:33:44:c3:36:35:
         2f:ae:19:f6:de:9e:f5:e6:3c:ba:27:c2:67:1b:55:ea:5b:cf:
         45:f8:32:5c
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICJnIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA1MjMwMjE4NDJaFw0yNDA2MjUwMjE4NDJaMBgxFjAU
BgNVBAMTDTY0NmMyMjg2LTcxNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDpSC4T29HC4+ZNlL6Mf+CAfuXv9QgchQjbcouUDCFQe/4IPLPopRQ0Dq2D
SxqD3AbLUdOR0qqbJZwJo3fhFY0i3ViGqevHgG9kT1TklKuCW2zLTdxQSvljCvJi
/0oZAaP2SSxMukOD2bLmFoDFssezX4MOT/UVtrcC2wngqrecmpvoSU2AmCIDnxEd
n7D4BKhDDnuuErxGWLuI1IKHNMzoL5BbDW7Rifa8ZO4DjIhYW9BIybOEF1v1T8mA
PLIufAUhl1wXUUxjV/pOiapHDwCEg2v6bVcRTkH7PbCgxLERgZixvVo2mi1m7rmt
Tb6bgmsOy0eWI2Zl0hJCZQ1jKnjhAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUPE73
qy0W06TnpNV5OBvFqMsvGLcwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzI1NjY0ODlDRjkxMDExRUQ4NDAyRjM4MDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtyhowDQYJKoZIhvcNAQELBQAD
ggEBAGCp85ODCwh/h2PO1vkf0d5OXv7LrbhWuXgZ8oUZkn1Oyw1TDVPYMLLksfWw
3qfnFZSq5CVHMeubg8EOqxz6USGDIVjdS+0nCWawuiu9PlpH8J2gzT9g4aZKL+pn
Z0cM+18djdMxZsM/DZEpOkPryfknsx5OURn3hNrK6Ja/Mw2ON55zi1fhETlO7L3e
zkDJk0/bv1SVS9zNxjNjeYABV2FWzqpe3bW0QxbjB1FnYPKQorhTM26pKYQSehWD
OBa7xKfYf1OjQvtJq9UoWoy2RKEfNX7+vmiTSC/qIFgS8ro4/Icpau4zRMM2NS+u
GfbenvXmPLonwmcbVepbz0X4Mlw=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:50 2024 by rpki-client on console-ams.rpki-client.org