Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BC8A14CE25511EC9A35C0EAF1222468.roa
File:                     4BC8A14CE25511EC9A35C0EAF1222468.roa (download)
Hash identifier:          w2ZIeyJ2Qncr7OfrZV+x7GnsoET9wui6Zwx98SnwzZM=
Subject key identifier:   46:E0:0A:15:8B:F5:C0:2C:A9:F6:FF:F3:18:88:6E:A0:49:A6:6B:E7
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       143E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BC8A14CE25511EC9A35C0EAF1222468.roa
ROA valid until:          Jun 30 09:20:48 2023 GMT
asID:                     140224
IP address blocks:
    1: 45.194.16.0/21 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5182 (0x143e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun  2 09:20:48 2022 GMT
            Not After : Jun 30 09:20:48 2023 GMT
        Subject: CN=629880f3-84a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:0b:de:38:67:f7:63:99:bf:11:1f:52:53:
                    8f:12:0b:58:72:66:39:0b:a5:4d:df:58:da:05:3c:
                    17:cd:77:6b:1e:78:8d:fb:38:f6:79:27:90:c5:ed:
                    b4:59:a5:72:3b:23:84:ef:1f:b3:b8:74:28:8a:51:
                    c5:ed:71:73:14:d9:ce:77:74:c8:b8:ff:20:a8:cf:
                    27:ea:bb:f7:00:18:cb:06:97:1c:f5:c5:75:9c:45:
                    61:f3:fc:b1:a3:d9:64:b1:46:69:4d:69:a7:61:69:
                    4b:f5:75:9a:bf:10:2c:9f:9b:82:72:5f:51:96:da:
                    7a:a9:8f:2a:29:94:82:7f:fa:76:7c:b5:ce:c5:47:
                    6a:fa:8c:c8:ef:b9:70:be:7e:26:5b:b1:a9:fe:a6:
                    f3:77:85:80:1f:23:d2:16:58:7c:89:8d:b1:0d:a6:
                    30:f5:3d:c0:0e:b4:6c:fd:fb:89:a1:33:63:49:80:
                    f5:80:00:55:0f:ce:02:d2:e6:f7:68:ad:d4:3d:9d:
                    10:dd:36:fd:36:d2:ff:ce:97:ca:f9:d3:5f:e4:6e:
                    f4:eb:af:a5:89:d1:61:d4:66:db:78:4c:5e:80:72:
                    e0:d9:f8:4f:16:a5:9e:2a:52:ec:05:be:72:25:09:
                    25:d7:90:19:c1:ab:bc:a3:d8:b9:1f:13:7f:b9:34:
                    3d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                46:E0:0A:15:8B:F5:C0:2C:A9:F6:FF:F3:18:88:6E:A0:49:A6:6B:E7
            X509v3 Authority Key Identifier: 
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4BC8A14CE25511EC9A35C0EAF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:d0:64:5b:5b:ac:88:d8:d9:92:47:ba:9d:5a:82:5f:18:6f:
         e0:d5:ee:6e:e8:51:8c:09:52:a6:d7:51:25:51:69:6b:b3:d3:
         33:2b:54:22:0b:f7:4b:25:91:69:4e:a4:ea:f6:a1:e7:02:90:
         50:64:11:35:a9:8c:6b:45:29:6f:f4:ec:61:98:16:69:32:12:
         2b:06:9e:0a:69:43:0e:e7:e0:ce:c5:75:4d:3e:09:1d:dd:9a:
         06:b7:b1:29:13:37:da:12:83:80:04:e0:a9:c9:19:62:db:ee:
         7c:75:0f:6d:2c:24:22:12:de:ec:ae:10:1e:6c:49:2b:d0:2c:
         db:a2:45:a0:11:69:59:ad:da:ff:45:6a:d1:75:10:37:69:9c:
         fb:45:29:6a:9a:e9:fd:ab:a6:63:8b:8c:91:06:a9:6f:84:16:
         50:60:5b:90:11:7c:22:2e:73:7a:37:57:60:58:61:0a:d2:47:
         3c:50:71:ae:68:84:9e:f9:f1:ef:63:83:55:f4:62:ca:9d:5f:
         4f:12:88:30:09:25:58:83:e7:52:65:05:a8:7a:fa:e6:69:78:
         20:23:2b:51:6b:ff:6f:f3:5f:68:54:61:4b:7c:be:b9:1b:c6:
         92:bf:77:86:3e:19:62:de:d5:08:ce:63:e7:f4:f9:7f:ef:27:
         02:ac:e3:a0
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICFD4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA2MDIwOTIwNDhaFw0yMzA2MzAwOTIwNDhaMBgxFjAU
BgNVBAMMDTYyOTg4MGYzLTg0YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3EgveOGf3Y5m/ER9SU48SC1hyZjkLpU3fWNoFPBfNd2seeI37OPZ5J5DF
7bRZpXI7I4TvH7O4dCiKUcXtcXMU2c53dMi4/yCozyfqu/cAGMsGlxz1xXWcRWHz
/LGj2WSxRmlNaadhaUv1dZq/ECyfm4JyX1GW2nqpjyoplIJ/+nZ8tc7FR2r6jMjv
uXC+fiZbsan+pvN3hYAfI9IWWHyJjbENpjD1PcAOtGz9+4mhM2NJgPWAAFUPzgLS
5vdordQ9nRDdNv020v/Ol8r501/kbvTrr6WJ0WHUZtt4TF6AcuDZ+E8WpZ4qUuwF
vnIlCSXXkBnBq7yj2LkfE3+5ND3NAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQURuAK
FYv1wCyp9v/zGIhuoEmma+cwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzRCQzhBMTRDRTI1NTExRUM5QTM1QzBFQUYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMtwhAwDQYJKoZIhvcNAQELBQAD
ggEBADbQZFtbrIjY2ZJHup1agl8Yb+DV7m7oUYwJUqbXUSVRaWuz0zMrVCIL90sl
kWlOpOr2oecCkFBkETWpjGtFKW/07GGYFmkyEisGngppQw7n4M7FdU0+CR3dmga3
sSkTN9oSg4AE4KnJGWLb7nx1D20sJCIS3uyuEB5sSSvQLNuiRaARaVmt2v9FatF1
EDdpnPtFKWqa6f2rpmOLjJEGqW+EFlBgW5ARfCIuc3o3V2BYYQrSRzxQca5ohJ75
8e9jg1X0YsqdX08SiDAJJViD51JlBah6+uZpeCAjK1Fr/2/zX2hUYUt8vrkbxpK/
d4Y+GWLe1QjOY+f0+X/vJwKs46A=
-----END CERTIFICATE-----
Generated at Wed Dec 7 16:43:34 2022 by rpki-client.