Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CEA44265B6D11EEB60AE0424AD9E6FC.roa
File:                     4CEA44265B6D11EEB60AE0424AD9E6FC.roa (raw, json)
Hash identifier:          KAVVwSQOqtl6jOHQ02in0tKS2MCD9X1rX5nOFwlKGhw=
Subject key identifier:   AE:73:CD:10:28:36:50:C9:5C:BC:D9:3A:27:E1:3D:7D:92:81:D6:23
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       3B20
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CEA44265B6D11EEB60AE0424AD9E6FC.roa
Signing time:             Mon 25 Sep 2023 06:32:30 +0000
ROA not before:           Mon 25 Sep 2023 06:32:26 +0000
ROA not after:            Fri 27 Sep 2024 06:32:26 +0000
asID:                     55355
IP address blocks:        156.225.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15136 (0x3b20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 25 06:32:26 2023 GMT
            Not After : Sep 27 06:32:26 2024 GMT
        Subject: CN=6511297d-bbe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:85:d2:e6:7f:ed:01:a3:6e:b4:33:a1:23:3a:
                    e8:a3:a7:30:c4:64:aa:b9:23:63:0a:d0:5d:dd:12:
                    e7:26:97:0a:f7:c0:fd:5c:6d:53:b7:c0:dd:43:9f:
                    4c:0e:b1:8d:c6:f8:1e:53:ef:b7:09:32:61:c0:99:
                    53:0e:12:7a:44:f0:03:e0:9e:86:5a:fe:96:65:c4:
                    21:41:21:64:87:9e:91:5b:53:60:4d:a9:30:20:5f:
                    78:ff:d4:5c:5c:56:ff:ba:3f:22:43:98:55:00:df:
                    40:06:7b:0b:07:ae:95:d1:3b:e1:66:f6:5c:c9:1d:
                    8a:66:88:60:7b:bf:7e:24:ec:20:9e:07:33:be:e7:
                    71:b9:ef:5b:94:0e:2b:fa:9c:52:63:89:17:48:14:
                    c8:ea:51:d9:53:c9:57:b6:91:06:45:30:9c:12:6b:
                    66:9a:03:eb:97:1b:bd:ec:c0:2e:81:ec:1d:e7:1b:
                    f7:8a:9f:da:8e:6d:d5:6e:f9:49:a9:62:ae:e4:d0:
                    c1:a4:33:62:5f:36:64:bc:84:fb:ad:b6:4c:fb:3e:
                    84:04:ad:d0:1d:33:93:9f:6a:48:c0:4b:d3:74:26:
                    18:d7:06:b9:fb:04:49:7d:d5:44:b1:d9:59:22:39:
                    95:34:b2:98:9a:b3:5e:8a:e0:1c:73:0b:97:57:76:
                    41:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:73:CD:10:28:36:50:C9:5C:BC:D9:3A:27:E1:3D:7D:92:81:D6:23
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CEA44265B6D11EEB60AE0424AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.225.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:df:aa:39:d3:9d:32:d8:5b:b0:4c:35:e6:bd:ea:cc:b8:02:
         0a:cc:a4:64:67:1a:36:43:db:e7:bd:64:36:ed:04:29:62:01:
         af:34:9b:9c:60:bc:f1:95:4b:96:cf:42:02:b4:bf:b9:2f:20:
         a2:8a:ce:b2:2b:f4:f2:80:47:a1:47:c5:3b:00:1c:f2:73:ee:
         a0:e4:4f:28:37:36:33:78:74:e5:0f:67:33:0e:ef:68:2f:21:
         07:f6:f1:03:07:14:bd:3f:f5:26:58:1d:45:6e:22:32:ce:91:
         86:e6:6f:c3:1a:3f:db:f4:03:f8:23:0d:ee:fd:b5:d5:92:1f:
         e0:3a:f9:23:98:45:74:79:c2:57:f6:4a:27:2e:0f:92:6c:55:
         32:60:90:8a:83:02:24:2b:b9:94:0e:2b:db:ca:e6:67:83:33:
         f0:c6:94:af:b8:59:e9:7e:f4:f4:2e:4a:90:d9:f5:24:43:bb:
         ed:a3:c0:0d:3f:76:df:d1:e6:5e:6f:bd:27:41:1e:56:87:e2:
         f3:f2:84:2e:77:b7:b5:67:5a:e9:a8:77:07:26:e8:99:03:f4:
         fa:eb:d2:8f:e0:a2:b4:47:5f:d6:eb:ee:e2:ae:1c:15:a7:18:
         44:11:e7:96:6f:2e:32:99:90:87:1a:e8:9a:f8:33:a3:3c:f2:
         11:e7:fe:37
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICOyAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA5MjUwNjMyMjZaFw0yNDA5MjcwNjMyMjZaMBgxFjAU
BgNVBAMTDTY1MTEyOTdkLWJiZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCihdLmf+0Bo260M6EjOuijpzDEZKq5I2MK0F3dEucmlwr3wP1cbVO3wN1D
n0wOsY3G+B5T77cJMmHAmVMOEnpE8APgnoZa/pZlxCFBIWSHnpFbU2BNqTAgX3j/
1FxcVv+6PyJDmFUA30AGewsHrpXRO+Fm9lzJHYpmiGB7v34k7CCeBzO+53G571uU
Div6nFJjiRdIFMjqUdlTyVe2kQZFMJwSa2aaA+uXG73swC6B7B3nG/eKn9qObdVu
+UmpYq7k0MGkM2JfNmS8hPuttkz7PoQErdAdM5OfakjAS9N0JhjXBrn7BEl91USx
2VkiOZU0spias16K4BxzC5dXdkHxAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUrnPN
ECg2UMlcvNk6J+E9fZKB1iMwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzRDRUE0NDI2NUI2RDExRUVCNjBBRTA0MjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc4QcwDQYJKoZIhvcNAQELBQAD
ggEBACrfqjnTnTLYW7BMNea96sy4AgrMpGRnGjZD2+e9ZDbtBCliAa80m5xgvPGV
S5bPQgK0v7kvIKKKzrIr9PKAR6FHxTsAHPJz7qDkTyg3NjN4dOUPZzMO72gvIQf2
8QMHFL0/9SZYHUVuIjLOkYbmb8MaP9v0A/gjDe79tdWSH+A6+SOYRXR5wlf2Sicu
D5JsVTJgkIqDAiQruZQOK9vK5meDM/DGlK+4Wel+9PQuSpDZ9SRDu+2jwA0/dt/R
5l5vvSdBHlaH4vPyhC53t7VnWumodwcm6JkD9Prr0o/gorRHX9br7uKuHBWnGEQR
55ZvLjKZkIca6Jr4M6M88hHn/jc=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:52 2024 by rpki-client on console-ams.rpki-client.org