Route Origin Authorization

$ cd rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/

$ rpki-client -vvf 454BDDBAC47E11ECA2A63A8DF1222468.roa
File:                     454BDDBAC47E11ECA2A63A8DF1222468.roa (download)
Hash identifier:          0xHPxkoaZwm0PIsdEfRkDWu7ea0NqAA7va/bFchU7+U=
Subject key identifier:   9C:DB:D4:1F:99:EC:4E:64:F2:E8:5F:F7:97:76:95:C6:24:03:DA:18
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1390
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/454BDDBAC47E11ECA2A63A8DF1222468.roa
ROA valid until:          Jan 30 09:58:31 2023 GMT
asID:                     139057
IP address blocks:
    1: 156.251.79.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5008 (0x1390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 25 09:58:31 2022 GMT
            Not After : Jan 30 09:58:31 2023 GMT
        Subject: CN=626670cb-cbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9e:3f:1d:35:ab:9e:c9:9f:48:ed:6b:ab:7d:
                    09:75:fe:ba:42:b4:40:d8:7d:fa:e1:95:0c:09:34:
                    23:b3:62:57:10:50:4c:54:82:45:20:4a:78:07:d9:
                    43:5d:4d:69:87:28:8d:32:ba:29:aa:71:d7:cb:e3:
                    77:d3:27:ec:71:13:1f:f9:ba:c9:90:36:49:2d:7f:
                    01:ba:81:da:38:30:f5:8c:cf:bb:db:c3:1c:78:45:
                    ae:7b:dd:cc:38:b3:b5:56:5d:4e:0f:94:88:46:0b:
                    16:e2:14:e5:df:10:d3:6c:f1:b5:05:4b:f4:62:ef:
                    5b:9f:20:a5:fa:16:2d:8d:34:4f:a9:4c:d6:6e:4e:
                    c9:1c:14:40:2d:2a:40:df:da:b0:3c:5b:80:4e:a0:
                    47:41:45:1b:f9:9d:06:cc:ae:c4:84:cb:96:09:ec:
                    9c:a3:0a:47:e6:59:20:40:b7:c5:81:70:b5:9b:a9:
                    7e:ac:b2:56:b4:a6:8c:e3:e3:db:fd:3b:db:a8:11:
                    d4:22:f1:47:21:8f:ce:4b:0a:56:e4:48:a9:89:ac:
                    44:be:f5:11:6d:4c:aa:ad:22:c2:24:40:c9:01:36:
                    30:91:74:7d:1d:fb:58:79:ea:a8:e3:64:bf:53:97:
                    f8:9d:f3:ef:80:66:6e:33:0e:31:df:af:63:cd:5d:
                    1a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9C:DB:D4:1F:99:EC:4E:64:F2:E8:5F:F7:97:76:95:C6:24:03:DA:18
            X509v3 Authority Key Identifier: 
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/454BDDBAC47E11ECA2A63A8DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:24:cf:1b:7a:09:62:01:3d:5d:ef:50:cd:a2:4d:0e:be:18:
         b6:01:40:5e:d1:82:34:19:67:62:d5:65:09:b3:22:33:e3:e5:
         a7:2d:22:f5:4b:c6:40:0f:b2:c9:e6:ad:97:4a:e3:e8:5a:26:
         28:df:73:12:04:b0:d5:3d:bd:fe:4f:ef:a0:74:c8:91:60:ab:
         2a:59:24:9b:e6:35:88:85:4c:20:81:1d:64:70:d8:04:e6:22:
         9b:4c:0c:84:c3:73:11:47:92:28:2c:26:d2:76:49:6b:be:b5:
         de:1d:bf:25:ae:c4:00:ba:79:d6:41:5c:95:17:f1:f0:c1:90:
         26:c2:65:dc:15:67:ea:ec:bd:0c:9f:91:3b:14:c5:ac:f6:79:
         e0:18:8c:6f:04:fd:73:58:f3:df:73:62:e8:99:90:2f:af:67:
         46:d8:d2:4b:7f:15:ef:0c:f4:aa:f9:e6:7d:82:53:9e:ee:09:
         6a:1e:a0:48:1a:58:ba:b6:14:5d:37:ad:ab:fc:5c:6a:3f:51:
         89:e1:79:18:3e:2a:a7:08:e8:25:d9:b9:1a:34:16:18:65:c5:
         71:6a:d2:d0:d7:f8:08:4a:b4:da:78:09:ae:c2:e8:be:72:7e:
         c0:1e:92:84:e8:ce:d5:a8:e6:8e:c5:fe:07:fc:9d:cd:f6:05:
         4b:c1:ab:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 19:48:34 2022 by rpki-client.