Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B206416038511EF9143C016017001B1.roa
File:                     4B206416038511EF9143C016017001B1.roa (raw, json)
Hash identifier:          JYtMw/bylv0qq1fOUJHew4nqq9CoSuAx6XDV+0Ah0UE=
Subject key identifier:   F6:A9:23:E2:0C:F6:EA:77:41:F8:4D:EF:0B:05:DD:5A:55:83:E7:62
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       859A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B206416038511EF9143C016017001B1.roa
Signing time:             Fri 26 Apr 2024 04:27:30 +0000
ROA not before:           Fri 26 Apr 2024 04:27:26 +0000
ROA not after:            Tue 03 Sep 2024 04:27:26 +0000
asID:                     138195
IP address blocks:        156.234.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34202 (0x859a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 26 04:27:26 2024 GMT
            Not After : Sep  3 04:27:26 2024 GMT
        Subject: CN=662b2d32-bbc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:00:f3:72:4b:d6:01:b3:85:7c:7f:41:6c:ff:
                    b4:5e:15:91:3d:48:59:1c:20:c8:1a:8f:94:45:45:
                    fb:6f:6e:37:cb:49:af:0c:db:c2:bd:8c:f3:ea:4c:
                    b6:99:4e:e2:a5:8a:85:ad:1e:78:48:ab:08:7e:fc:
                    9f:db:d4:75:8c:a6:56:01:96:76:51:48:05:c5:23:
                    11:a9:aa:d9:bc:67:23:f5:28:05:eb:e2:f6:98:4c:
                    32:70:8c:24:c7:7a:29:cb:85:fd:6d:82:d1:4f:56:
                    37:1b:62:f5:0e:59:08:7f:85:71:91:50:e4:45:8d:
                    68:93:ac:dd:a1:4c:e0:d6:33:2f:83:2d:19:4a:af:
                    70:d1:36:cb:62:b7:80:30:dd:8c:1d:12:ca:0b:ef:
                    56:36:63:17:76:58:bb:38:c9:b6:88:73:e6:d1:c0:
                    bd:d0:7a:41:1d:74:80:69:96:26:28:6c:c1:58:41:
                    9e:21:c0:44:c4:65:3b:b3:04:02:d2:99:83:a7:82:
                    7c:14:64:aa:5f:eb:c5:ba:e9:84:23:48:c0:b5:ee:
                    5a:22:45:c2:8f:72:a9:70:c4:52:1d:2c:e3:c5:2a:
                    36:a7:19:40:aa:11:de:79:d9:f5:4c:7e:a4:3e:c8:
                    a1:0a:09:c2:2a:d6:ef:02:be:e6:49:ad:47:1d:59:
                    2d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A9:23:E2:0C:F6:EA:77:41:F8:4D:EF:0B:05:DD:5A:55:83:E7:62
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B206416038511EF9143C016017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.234.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:6b:01:aa:48:91:78:1a:90:f6:71:08:36:3b:1d:ee:f7:af:
         72:60:41:e7:73:99:ac:6f:2f:9c:39:37:46:71:b6:06:49:ff:
         9f:40:0f:b1:19:04:1f:35:1c:0d:b4:bf:1c:ac:50:af:58:a2:
         d7:88:45:af:81:ec:40:44:0d:03:68:d6:60:a9:cf:94:08:56:
         93:31:50:d9:0d:40:8e:e9:0d:54:f5:70:ee:44:1b:73:13:97:
         21:f3:95:f3:17:25:28:f0:33:ca:5d:f2:8b:18:0e:80:c8:79:
         77:61:5f:b4:86:be:71:12:3f:9f:a6:04:b9:63:10:60:12:49:
         81:4f:c4:63:f6:4e:dd:62:6b:07:b7:35:8e:0a:1f:49:05:f9:
         54:fc:b1:0f:25:bf:d2:0e:6a:d3:44:7a:07:5a:49:41:17:fc:
         bb:e5:31:60:e7:33:d3:9b:27:20:68:99:f9:d5:5d:30:ba:d8:
         cb:9c:85:0a:fc:f6:14:9c:8d:35:15:90:0e:25:2b:40:7b:6d:
         38:a4:70:cf:74:49:25:11:04:23:5f:4b:d3:55:bd:e5:b6:48:
         d0:57:0b:28:30:db:eb:4b:ea:91:73:3a:42:25:73:9d:62:a2:
         ac:f9:bd:93:0b:31:c4:d6:a2:5d:dc:71:e7:44:4d:96:9b:4c:
         75:22:10:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:11:59 2024 by rpki-client on console-fra.rpki-client.org