Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72F316F63B2511EEAAE264304AD9E6FC.roa
File:                     72F316F63B2511EEAAE264304AD9E6FC.roa (raw, json)
Hash identifier:          o/rVUAwLu46lof7v6FMRjjJzuHOQFBJhY7mxdTnVfLU=
Subject key identifier:   BF:FD:0D:77:9D:DD:B0:14:D7:07:71:EB:9A:08:93:9D:39:D3:24:CE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       358B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72F316F63B2511EEAAE264304AD9E6FC.roa
Signing time:             Tue 15 Aug 2023 04:37:32 +0000
ROA not before:           Tue 15 Aug 2023 04:37:29 +0000
ROA not after:            Mon 27 May 2024 04:37:29 +0000
asID:                     140627
IP address blocks:        156.247.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13707 (0x358b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 15 04:37:29 2023 GMT
            Not After : May 27 04:37:29 2024 GMT
        Subject: CN=64db010c-1b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3b:0e:8c:e9:13:54:eb:61:ba:3d:60:9a:12:
                    b8:93:26:bd:1f:5a:5e:ad:3d:9c:0f:08:74:5b:cc:
                    45:0e:1f:89:ef:5d:c0:f2:21:de:b8:94:8c:ee:f6:
                    a1:c2:5c:28:36:6a:12:4b:d1:68:97:96:36:38:ed:
                    d6:64:9a:e3:77:4a:e9:b6:d6:71:4e:d8:16:66:a7:
                    80:d8:dc:ab:1a:d1:39:a3:6a:61:e2:b1:6c:82:0f:
                    b9:7d:18:e3:f9:a8:e4:1f:2f:70:56:8e:09:91:26:
                    56:a1:55:9b:5e:cf:7e:30:e6:77:29:a4:b9:8f:c1:
                    4f:d3:cd:55:20:6c:b1:b7:c1:43:9d:4c:f6:5d:c4:
                    f1:39:94:0b:58:01:43:23:86:ab:5d:6e:6f:cb:79:
                    13:55:4a:af:b4:30:96:7b:22:80:e7:8c:47:02:1c:
                    f1:ad:1b:51:c7:cc:5d:c7:9f:c0:c2:7a:2d:31:16:
                    cc:3d:e1:e6:a9:5a:94:65:96:8a:56:7a:50:84:31:
                    84:54:80:ae:f7:48:20:c9:84:ae:9e:9d:e0:11:2a:
                    b2:27:98:24:64:16:01:8f:d9:d7:86:fb:99:0f:e4:
                    af:eb:d0:21:41:b2:74:a1:0e:09:ed:d7:8f:a0:18:
                    2a:6d:ea:1d:da:44:00:3f:c9:64:52:13:d6:34:a7:
                    4e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FD:0D:77:9D:DD:B0:14:D7:07:71:EB:9A:08:93:9D:39:D3:24:CE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/72F316F63B2511EEAAE264304AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:f1:c6:0f:13:80:a4:2f:97:6d:84:f3:10:98:63:63:28:60:
         e8:89:5b:f7:0c:7a:ad:c5:00:c6:b9:e1:34:59:07:f0:7a:f6:
         19:c4:48:aa:2d:7b:36:b6:4a:95:f9:61:a2:71:83:b1:95:25:
         ce:b6:78:1f:5a:b4:49:53:79:6b:7a:d5:ae:53:d3:b5:05:1f:
         73:a4:85:20:5a:f9:76:92:12:40:c7:96:2a:c0:3a:6d:8c:48:
         fd:6f:f1:7d:8a:48:dd:82:00:c4:d7:9d:87:28:e2:40:02:c1:
         36:fe:b6:b2:41:e8:e7:50:0a:3b:8b:75:60:07:c9:3e:c6:2d:
         fd:18:26:81:24:4f:81:04:41:56:ee:b8:f6:af:2d:31:33:96:
         f3:79:be:16:29:01:ea:50:e7:3a:dc:bc:a0:52:95:63:91:5f:
         5a:48:ce:a3:02:30:06:ef:c8:94:73:94:b7:72:d1:dc:fe:e4:
         51:42:ee:c2:7a:ad:b5:db:e1:58:cd:a7:31:04:1f:bc:82:c6:
         43:3c:0d:55:24:f1:bc:01:f0:73:fa:ea:64:c3:f6:e1:50:fc:
         f5:9e:df:fe:af:bb:4d:a0:34:26:c8:e0:df:1b:dc:e2:79:6a:
         ef:f2:dd:9a:5a:cd:01:3e:f2:35:88:35:28:79:f7:c7:26:c1:
         dd:a6:c1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:11 2024 by rpki-client on console-fra.rpki-client.org