Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A4FFACA595C11EEA5465A284AD9E6FC.roa
File:                     4A4FFACA595C11EEA5465A284AD9E6FC.roa (raw, json)
Hash identifier:          91cwph2ta05PkLJ4ZaCh+gWKmi+yZekAm5JDF9AxUX4=
Subject key identifier:   E2:2C:EF:D8:45:7A:24:D4:8B:A1:EE:D7:0D:39:E1:73:93:1F:79:8A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       3B09
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A4FFACA595C11EEA5465A284AD9E6FC.roa
Signing time:             Fri 22 Sep 2023 15:25:41 +0000
ROA not before:           Fri 22 Sep 2023 15:25:38 +0000
ROA not after:            Thu 25 Jul 2024 15:25:38 +0000
asID:                     140570
IP address blocks:        156.230.6.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15113 (0x3b09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 22 15:25:38 2023 GMT
            Not After : Jul 25 15:25:38 2024 GMT
        Subject: CN=650db1f5-67d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e6:28:b3:2b:89:8b:3a:92:f8:03:5d:5b:28:
                    68:09:dc:f0:70:33:9a:cd:58:e9:4a:a3:b8:7c:52:
                    3f:4d:dd:59:3b:f3:57:26:50:d5:19:67:16:d0:a7:
                    b4:c1:48:36:86:6c:a1:98:b1:16:82:c0:18:77:3d:
                    8f:43:d5:de:65:2d:bb:5c:7a:6d:96:17:e8:7d:7f:
                    90:85:c8:0e:a3:0b:1e:68:e7:fa:5d:71:9b:60:5b:
                    aa:2f:27:03:1f:cd:57:e4:73:18:df:cb:e8:68:b2:
                    c9:68:fe:a5:81:7b:c8:22:3a:5b:7e:d1:74:85:a4:
                    b7:a1:44:bf:08:df:50:ba:dc:92:9f:a8:2d:2a:aa:
                    2f:10:1a:52:5f:cf:dc:f2:23:75:33:c9:22:6e:1f:
                    24:13:0d:ea:54:53:e4:5d:f5:c9:94:ee:ca:32:92:
                    1c:7f:e0:d7:d8:bd:6c:26:16:14:70:7d:07:34:58:
                    e3:69:1b:8d:44:f0:40:e5:de:41:63:24:49:72:02:
                    8a:11:3c:91:3a:7d:4d:30:8c:64:4c:59:bb:b7:a1:
                    9e:ef:dc:cf:00:37:c0:3a:76:99:df:f7:ed:c6:af:
                    04:45:ea:96:73:a8:49:c9:26:be:6c:59:89:da:69:
                    0c:ba:df:e6:f9:c8:84:4b:3f:06:a2:8d:98:23:3b:
                    d2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2C:EF:D8:45:7A:24:D4:8B:A1:EE:D7:0D:39:E1:73:93:1F:79:8A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4A4FFACA595C11EEA5465A284AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.230.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:75:8b:72:41:62:67:32:57:59:cc:bd:b7:2c:82:19:a0:55:
         99:29:f4:9b:19:fe:c9:3a:1a:e3:58:66:72:78:ba:b3:3d:dd:
         d5:da:3a:98:e7:dc:3e:c8:20:45:ca:d9:82:aa:29:87:fe:1c:
         a4:69:b6:5a:d8:9b:b8:06:da:71:70:a4:30:de:1e:ed:71:d0:
         05:9c:eb:c4:ca:5c:1d:98:af:19:93:e0:a2:35:7b:d1:94:ad:
         1b:62:a1:1b:4a:28:6d:40:50:59:c5:f3:ce:b3:a3:83:18:38:
         8c:87:16:a9:9c:7c:57:85:80:37:b0:76:b6:be:30:4b:f2:0d:
         5d:ca:76:18:84:28:86:6f:26:9c:a5:38:00:ab:e7:cd:5f:e6:
         56:af:d1:e9:c6:e3:c9:9c:38:51:40:6d:4d:ee:04:5b:3c:67:
         7f:11:87:08:3f:97:1c:d9:d3:37:4c:8b:88:78:38:0e:c7:dc:
         1e:2f:cc:c0:6d:09:af:aa:2f:00:82:54:38:c7:45:59:f4:4a:
         eb:6d:01:ac:06:cb:c9:30:0d:76:a4:c1:a6:1f:25:99:97:c7:
         b4:b0:8a:16:0e:92:9b:20:39:5e:7d:8d:53:cd:33:93:b6:14:
         1e:a2:b0:6c:f6:7e:3f:40:ae:41:fb:22:fc:37:dd:a3:d0:12:
         da:32:22:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:08 2024 by rpki-client on console-fra.rpki-client.org