Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80405862FE2211EEA300D931017001B1.roa
File:                     80405862FE2211EEA300D931017001B1.roa (raw, json)
Hash identifier:          /7t6KwpK+ZOIwfwday9hA92Vjg3jXXeKmBz1pNLIYRI=
Subject key identifier:   B7:1F:8B:08:36:EE:7A:FF:F0:BB:6E:0A:74:3B:99:B6:BA:54:3F:AB
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       8388
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80405862FE2211EEA300D931017001B1.roa
Signing time:             Fri 19 Apr 2024 07:57:43 +0000
ROA not before:           Fri 19 Apr 2024 07:57:39 +0000
ROA not after:            Mon 29 Apr 2024 07:57:39 +0000
asID:                     5065
IP address blocks:        156.255.64.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Apr 2024 07:57:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33672 (0x8388)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 19 07:57:39 2024 GMT
            Not After : Apr 29 07:57:39 2024 GMT
        Subject: CN=662223f7-eca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:03:47:74:58:ac:04:1a:f9:b1:86:b0:4d:
                    a1:63:09:8f:6c:cc:1a:b2:d8:6a:eb:37:51:19:a3:
                    e4:ff:98:b8:57:15:42:1b:63:77:5c:b3:ef:f5:6e:
                    c2:89:6c:1e:15:57:66:21:60:1c:98:38:72:13:2a:
                    1e:99:38:b7:e2:fb:c8:51:62:b2:5e:ca:70:ed:91:
                    25:12:fc:b2:d1:d8:1e:46:ba:78:c0:d7:5e:7f:17:
                    38:ac:4d:1c:00:8b:6f:30:2e:ee:5d:9f:10:da:2b:
                    5c:d3:b9:e0:4a:0a:d1:3a:b0:be:97:3c:d2:24:c6:
                    1e:22:65:34:32:d5:2d:34:bb:f8:8e:a7:3b:f7:8c:
                    6b:f1:21:53:a5:c2:12:42:46:8c:86:bb:51:67:30:
                    75:cb:00:74:ea:2e:33:b6:7f:5b:1e:9b:2c:c1:a3:
                    38:6b:0d:38:44:ad:88:b1:f0:6a:89:cf:48:27:0f:
                    69:3c:af:66:e7:3b:42:22:15:29:b3:96:34:5d:51:
                    5c:2c:6d:05:4f:ed:4d:d1:90:e3:21:6d:42:9c:d9:
                    e8:9f:2a:ab:51:51:06:6e:c4:3d:7d:bf:89:36:8d:
                    47:e5:a9:03:69:9a:af:c5:ef:d1:10:70:42:0f:7b:
                    04:0b:7a:ae:ff:29:b7:2f:be:d9:71:91:51:ea:12:
                    0d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1F:8B:08:36:EE:7A:FF:F0:BB:6E:0A:74:3B:99:B6:BA:54:3F:AB
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/80405862FE2211EEA300D931017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         67:ac:b8:8b:67:47:78:56:6f:5d:50:0b:e7:c3:ad:c4:a0:fc:
         06:34:d2:76:56:ee:f9:13:ec:14:71:f6:4d:d9:da:c2:03:0f:
         66:cb:fc:9a:5d:95:5e:75:37:b0:1c:d1:14:98:71:7c:b7:75:
         ca:93:81:9d:78:c3:f7:5b:eb:f8:51:f1:35:6b:a3:55:9d:d8:
         db:54:30:79:4c:ae:58:6e:43:b9:bc:85:0e:e6:eb:79:ce:e0:
         fa:0d:8a:2a:e9:5c:9d:53:ea:66:49:43:71:e4:98:1e:10:d6:
         20:54:f4:b5:2d:69:b7:8b:db:f5:7b:98:25:67:16:a9:ca:ed:
         cd:0b:c9:fc:29:66:3b:53:cf:0f:93:88:a9:10:81:b1:b8:b3:
         2b:a6:c4:29:52:dd:9d:45:7b:84:51:90:8f:25:db:f7:1b:19:
         56:8d:49:71:8d:bb:56:ca:fb:d7:a3:b4:f5:5f:05:f1:14:ee:
         72:37:41:17:2f:a7:e9:98:42:4a:0a:fb:ee:c2:a5:65:03:f1:
         a0:36:bb:76:6d:49:5c:a1:3d:f8:22:83:25:f5:b5:ce:b9:87:
         c9:4e:28:ed:29:7a:38:18:f8:a9:8c:cc:46:ac:83:46:af:ee:
         33:0d:1e:59:c6:e2:87:93:66:35:18:fe:41:40:cd:3c:6d:86:
         32:64:80:ac
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAIOIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwNDE5MDc1NzM5WhcNMjQwNDI5MDc1NzM5WjAYMRYw
FAYDVQQDEw02NjIyMjNmNy1lY2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtvIDR3RYrAQa+bGGsE2hYwmPbMwasthq6zdRGaPk/5i4VxVCG2N3XLPv
9W7CiWweFVdmIWAcmDhyEyoemTi34vvIUWKyXspw7ZElEvyy0dgeRrp4wNdefxc4
rE0cAItvMC7uXZ8Q2itc07ngSgrROrC+lzzSJMYeImU0MtUtNLv4jqc794xr8SFT
pcISQkaMhrtRZzB1ywB06i4ztn9bHpsswaM4aw04RK2IsfBqic9IJw9pPK9m5ztC
IhUps5Y0XVFcLG0FT+1N0ZDjIW1CnNnonyqrUVEGbsQ9fb+JNo1H5akDaZqvxe/R
EHBCD3sEC3qu/ym3L77ZcZFR6hINAwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFLcf
iwg27nr/8LtuCnQ7mba6VD+rMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84MDQwNTg2MkZFMjIxMUVFQTMwMEQ5MzEwMTcwMDFCMS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnP9AMA0GCSqGSIb3DQEBCwUA
A4IBAQBnrLiLZ0d4Vm9dUAvnw63EoPwGNNJ2Vu75E+wUcfZN2drCAw9my/yaXZVe
dTewHNEUmHF8t3XKk4GdeMP3W+v4UfE1a6NVndjbVDB5TK5YbkO5vIUO5ut5zuD6
DYoq6VydU+pmSUNx5JgeENYgVPS1LWm3i9v1e5glZxapyu3NC8n8KWY7U88Pk4ip
EIGxuLMrpsQpUt2dRXuEUZCPJdv3GxlWjUlxjbtWyvvXo7T1XwXxFO5yN0EXL6fp
mEJKCvvuwqVlA/GgNrt2bUlcoT34IoMl9bXOuYfJTijtKXo4GPipjMxGrINGr+4z
DR5ZxuKHk2Y1GP5BQM08bYYyZICs
-----END CERTIFICATE-----
Generated at Mon Apr 29 07:56:21 2024 by rpki-client on console-ams.rpki-client.org