Route Origin Authorization

$ cd rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/

$ rpki-client -vvf 6535B65AC47E11EC9959A18DF1222468.roa
File:                     6535B65AC47E11EC9959A18DF1222468.roa (download)
Hash identifier:          13ZEMS7DhY0eLoMHRSgckmrENp7n0Vpm+wJPq+0cLq8=
Subject key identifier:   9E:18:0D:A8:E8:78:6A:F5:8F:D5:19:B6:78:41:F3:9C:04:41:FE:61
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1396
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6535B65AC47E11EC9959A18DF1222468.roa
ROA valid until:          Jan 30 09:59:25 2023 GMT
asID:                     139057
IP address blocks:
    1: 156.251.78.0/24 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5014 (0x1396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 25 09:59:25 2022 GMT
            Not After : Jan 30 09:59:25 2023 GMT
        Subject: CN=62667100-832c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:46:e7:fc:8a:b4:78:09:1d:33:8f:1d:57:65:
                    fd:07:64:d8:dc:5a:95:7b:4e:28:c1:0b:82:d9:7c:
                    16:5d:cb:87:7a:42:e6:af:6b:b5:f0:c2:ea:2a:f0:
                    ca:02:6f:d8:b6:77:e0:54:2b:f7:ee:e1:c2:6d:71:
                    73:d5:ac:81:d1:b7:69:03:d3:81:49:21:75:65:5c:
                    65:d5:53:89:4c:9b:b5:c8:90:ec:ab:6c:04:32:d0:
                    78:86:74:e1:ee:3f:66:85:13:49:3c:39:dd:1f:c5:
                    fb:b8:6d:7a:f3:d8:7a:c7:bd:7e:2e:03:98:8c:66:
                    bb:00:4f:a9:bf:ac:d4:4a:45:b4:d9:a0:73:68:59:
                    73:f4:d1:1b:d6:07:9a:b3:cd:39:c5:88:c0:7b:ad:
                    33:92:44:7c:16:ce:ef:d4:94:4d:77:5f:30:f9:be:
                    43:ca:db:8e:fc:d9:53:17:a9:08:ec:ba:b0:22:41:
                    ad:57:75:d3:90:83:41:5a:9e:ee:1d:c4:1a:03:2c:
                    14:ed:14:ed:e7:a2:dd:b0:c0:bb:ea:ab:2d:c3:43:
                    23:42:d7:7a:8c:ae:39:f1:6a:d3:c6:e1:b0:46:9a:
                    e1:ff:d2:f3:f1:42:d7:f1:d7:f2:35:71:55:fa:06:
                    2b:e8:c5:66:01:99:2b:d7:01:47:90:d7:70:f7:f8:
                    18:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                9E:18:0D:A8:E8:78:6A:F5:8F:D5:19:B6:78:41:F3:9C:04:41:FE:61
            X509v3 Authority Key Identifier: 
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6535B65AC47E11EC9959A18DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:34:79:38:10:12:16:b1:03:eb:14:25:0f:97:bb:49:32:3d:
         0d:c0:d5:78:b1:a3:23:af:72:d8:dd:32:89:98:0b:8c:51:87:
         f2:9a:fb:df:f4:22:91:59:f8:c1:24:06:1d:a8:d1:86:f9:a2:
         01:cf:dc:c9:31:d1:1d:f0:a5:63:c1:e0:f0:f1:44:78:e3:9b:
         d9:78:76:e9:23:a5:9f:0f:6d:76:8e:4e:01:e7:16:9b:92:e1:
         c4:13:d3:c4:6d:eb:42:06:38:4a:5b:41:4d:f3:18:49:03:0e:
         a1:92:b8:a5:cc:4c:4b:cd:49:3e:a9:e2:a1:55:57:0d:51:40:
         44:fb:88:81:71:ed:ff:15:07:d8:00:f7:0b:7d:e0:b0:8a:37:
         91:98:a3:38:74:36:8d:e6:a5:fb:61:29:02:db:85:3b:43:35:
         33:8e:52:9a:90:ac:d0:fa:57:2a:e1:2c:81:f6:f3:d2:ee:10:
         63:14:05:3e:f3:07:09:5f:e0:0e:f9:72:94:a2:08:45:c6:ac:
         25:95:8e:cd:3c:a7:06:1b:ec:78:65:c8:65:08:bc:f2:15:69:
         b7:10:e9:b6:c1:30:d5:5e:8e:e4:12:95:4c:e2:2d:2f:ea:b6:
         5a:d4:d9:b3:c4:63:5a:d4:b0:38:ea:91:0d:eb:7c:bb:93:10:
         5a:14:9d:e8
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICE5YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMjA0MjUwOTU5MjVaFw0yMzAxMzAwOTU5MjVaMBgxFjAU
BgNVBAMMDTYyNjY3MTAwLTgzMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC3Ruf8irR4CR0zjx1XZf0HZNjcWpV7TijBC4LZfBZdy4d6Quava7Xwwuoq
8MoCb9i2d+BUK/fu4cJtcXPVrIHRt2kD04FJIXVlXGXVU4lMm7XIkOyrbAQy0HiG
dOHuP2aFE0k8Od0fxfu4bXrz2HrHvX4uA5iMZrsAT6m/rNRKRbTZoHNoWXP00RvW
B5qzzTnFiMB7rTOSRHwWzu/UlE13XzD5vkPK24782VMXqQjsurAiQa1XddOQg0Fa
nu4dxBoDLBTtFO3not2wwLvqqy3DQyNC13qMrjnxatPG4bBGmuH/0vPxQtfx1/I1
cVX6BivoxWYBmSvXAUeQ13D3+BjbAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUnhgN
qOh4avWP1Rm2eEHznARB/mEwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzY1MzVCNjVBQzQ3RTExRUM5OTU5QTE4REYxMjIyNDY4LnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc+04wDQYJKoZIhvcNAQELBQAD
ggEBABs0eTgQEhaxA+sUJQ+Xu0kyPQ3A1XixoyOvctjdMomYC4xRh/Ka+9/0IpFZ
+MEkBh2o0Yb5ogHP3Mkx0R3wpWPB4PDxRHjjm9l4dukjpZ8PbXaOTgHnFpuS4cQT
08Rt60IGOEpbQU3zGEkDDqGSuKXMTEvNST6p4qFVVw1RQET7iIFx7f8VB9gA9wt9
4LCKN5GYozh0No3mpfthKQLbhTtDNTOOUpqQrND6VyrhLIH289LuEGMUBT7zBwlf
4A75cpSiCEXGrCWVjs08pwYb7HhlyGUIvPIVabcQ6bbBMNVejuQSlUziLS/qtlrU
2bPEY1rUsDjqkQ3rfLuTEFoUneg=
-----END CERTIFICATE-----
Generated at Sat Dec 3 17:57:12 2022 by rpki-client.