Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6279D7DC212211EEAFAF871C4AD9E6FC.roa
File:                     6279D7DC212211EEAFAF871C4AD9E6FC.roa (raw, json)
Hash identifier:          T4YbDQgeqdZObWTYcgpMAw87n84Nw4rlC0ICrv0262k=
Subject key identifier:   78:6F:B7:2D:B9:A7:DC:D0:9C:21:F9:EA:28:DA:FE:1C:B3:AE:B8:51
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       2FBE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6279D7DC212211EEAFAF871C4AD9E6FC.roa
Signing time:             Thu 13 Jul 2023 02:10:06 +0000
ROA not before:           Thu 13 Jul 2023 02:10:02 +0000
ROA not after:            Wed 03 Jul 2024 02:10:02 +0000
asID:                     132471
IP address blocks:        156.229.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12222 (0x2fbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 13 02:10:02 2023 GMT
            Not After : Jul  3 02:10:02 2024 GMT
        Subject: CN=64af5cfe-d8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:2b:53:62:66:42:0e:f9:48:05:b4:d3:14:
                    ca:aa:de:ea:b8:8f:4e:db:78:72:93:2f:c2:88:04:
                    db:f7:af:37:16:9a:a8:51:da:4a:0d:b8:08:44:41:
                    ed:0c:73:a6:8e:1e:e4:7a:17:76:23:53:84:17:3c:
                    cd:ca:fe:c6:42:60:8b:5e:f0:3d:6c:21:92:23:42:
                    d0:32:51:20:5f:78:59:fb:87:10:34:51:02:1f:67:
                    7f:20:56:d5:31:e7:3c:79:28:85:66:e9:db:f6:10:
                    b7:46:d3:55:a8:86:14:3d:2c:89:9b:86:45:be:ff:
                    2a:09:fa:e4:79:be:70:4a:90:99:3d:91:10:53:21:
                    9a:bb:7c:b9:3a:4d:7e:ab:c9:cc:e5:85:34:8a:d9:
                    26:06:2d:f9:ed:53:62:7e:26:16:9b:c4:17:6f:eb:
                    22:4e:e9:52:0f:5d:5c:46:a5:e7:61:5d:b6:83:89:
                    c9:f2:25:9b:56:b5:a6:ef:60:f1:5c:f5:c1:d5:f2:
                    83:5b:f0:ef:88:ad:61:af:55:38:5e:24:ce:64:52:
                    e0:28:e3:fd:cc:01:dd:7c:c2:06:2a:4c:7e:99:b9:
                    1d:e1:31:4d:81:b4:66:c4:ce:fb:92:50:d2:2c:a4:
                    a5:54:ce:55:d5:28:b9:37:af:a2:5f:6f:7b:3f:f2:
                    7d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6F:B7:2D:B9:A7:DC:D0:9C:21:F9:EA:28:DA:FE:1C:B3:AE:B8:51
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6279D7DC212211EEAFAF871C4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:3a:69:0c:2c:dd:59:71:c1:8a:e8:25:99:78:83:02:74:48:
         50:c6:10:08:eb:fb:48:29:d4:5e:dc:b1:ec:3a:db:eb:b6:fe:
         8f:b1:0b:fc:82:f8:e2:28:67:93:45:ce:3c:4e:2a:73:3e:74:
         0a:fc:2b:b7:99:af:dd:f1:89:cd:d6:a8:a3:fb:9e:2d:ed:b6:
         68:6b:94:7e:99:cf:85:49:fe:95:ef:d8:ff:c9:4c:ef:cd:7d:
         ed:0b:68:55:ad:01:a9:6d:02:7d:ee:5f:af:59:33:43:48:d9:
         9a:70:6d:84:54:4e:9a:c5:73:b2:f0:fe:b4:56:ec:9a:4f:53:
         4b:af:7f:78:64:b3:46:f9:bb:d6:f9:3f:4e:6b:c5:be:fd:57:
         c7:2f:1a:82:4f:c6:42:d3:28:59:3a:91:d7:65:13:85:32:9f:
         2c:50:d5:71:c1:11:50:c6:5e:f8:81:93:67:a5:c0:85:fb:a9:
         02:80:1c:0e:81:6e:5e:09:21:02:59:36:07:70:42:5d:43:ee:
         99:41:78:f6:54:ab:0c:c0:b3:e6:99:24:b8:55:af:1a:3e:2b:
         ce:10:d3:6e:56:0b:d5:a3:05:9f:66:90:ff:e6:2c:32:11:f3:
         f5:ea:16:c8:99:22:91:ff:41:d5:56:0d:b6:c5:2a:06:1a:f7:
         0f:ff:29:fd
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICL74wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA3MTMwMjEwMDJaFw0yNDA3MDMwMjEwMDJaMBgxFjAU
BgNVBAMTDTY0YWY1Y2ZlLWQ4YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuJCtTYmZCDvlIBbTTFMqq3uq4j07beHKTL8KIBNv3rzcWmqhR2koNuAhE
Qe0Mc6aOHuR6F3YjU4QXPM3K/sZCYIte8D1sIZIjQtAyUSBfeFn7hxA0UQIfZ38g
VtUx5zx5KIVm6dv2ELdG01WohhQ9LImbhkW+/yoJ+uR5vnBKkJk9kRBTIZq7fLk6
TX6ryczlhTSK2SYGLfntU2J+JhabxBdv6yJO6VIPXVxGpedhXbaDicnyJZtWtabv
YPFc9cHV8oNb8O+IrWGvVTheJM5kUuAo4/3MAd18wgYqTH6ZuR3hMU2BtGbEzvuS
UNIspKVUzlXVKLk3r6Jfb3s/8n1lAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUeG+3
Lbmn3NCcIfnqKNr+HLOuuFEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzYyNzlEN0RDMjEyMjExRUVBRkFGODcxQzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc5SQwDQYJKoZIhvcNAQELBQAD
ggEBAE86aQws3VlxwYroJZl4gwJ0SFDGEAjr+0gp1F7csew62+u2/o+xC/yC+OIo
Z5NFzjxOKnM+dAr8K7eZr93xic3WqKP7ni3ttmhrlH6Zz4VJ/pXv2P/JTO/Nfe0L
aFWtAaltAn3uX69ZM0NI2ZpwbYRUTprFc7Lw/rRW7JpPU0uvf3hks0b5u9b5P05r
xb79V8cvGoJPxkLTKFk6kddlE4UynyxQ1XHBEVDGXviBk2elwIX7qQKAHA6Bbl4J
IQJZNgdwQl1D7plBePZUqwzAs+aZJLhVrxo+K84Q025WC9WjBZ9mkP/mLDIR8/Xq
FsiZIpH/QdVWDbbFKgYa9w//Kf0=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:10 2024 by rpki-client on console-fra.rpki-client.org