Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92114544F82511EF822F3B73762E951A.roa
File:                     92114544F82511EF822F3B73762E951A.roa (raw, json)
Hash identifier:          XiG1sGyFh9axB4AMoLKF6h8ySvdGspya/LxyquL3r/4=
Subject key identifier:   28:DE:B3:4C:13:CD:51:0C:15:8F:4F:29:47:E0:DD:7F:74:EE:23:4E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01416C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92114544F82511EF822F3B73762E951A.roa
Signing time:             Mon 03 Mar 2025 11:49:32 +0000
ROA not before:           Mon 03 Mar 2025 11:49:28 +0000
ROA not after:            Mon 17 Mar 2025 11:49:28 +0000
asID:                     4766
IP address blocks:        156.239.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 15 Mar 2025 00:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82284 (0x1416c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Mar  3 11:49:28 2025 GMT
            Not After : Mar 17 11:49:28 2025 GMT
        Subject: CN=67c5974c-787e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c4:06:84:58:54:20:63:30:1f:2a:99:fd:18:
                    80:41:b4:b7:40:3e:00:e5:70:89:5c:3d:f8:ec:61:
                    80:7b:c7:a3:9f:c5:ed:30:f4:4a:a2:b9:eb:7d:54:
                    02:3e:13:9b:55:2a:1f:09:8e:37:f2:c1:a7:ad:8a:
                    f9:7a:29:aa:86:50:f7:78:dd:7a:03:f4:96:bd:6c:
                    fd:2d:86:5d:59:94:dc:31:67:cd:3e:76:d1:a9:90:
                    a0:26:d2:6b:6b:56:1f:47:60:fe:ee:e6:06:b9:96:
                    2a:82:f3:2b:0d:37:92:4b:58:59:fd:d0:35:2a:b4:
                    08:c6:f5:35:47:f0:f3:56:03:7f:f6:80:dd:81:02:
                    eb:90:46:87:b0:6d:ba:7f:e4:e5:94:8c:3e:ce:98:
                    ff:0c:23:fe:ba:1c:a0:b1:a9:df:36:a8:c4:d4:6a:
                    cc:40:98:64:81:9e:4d:ab:c1:63:c6:32:ee:ab:ae:
                    86:91:88:2c:f3:08:90:51:74:3f:e2:5f:52:f5:7c:
                    69:24:3b:1a:94:92:53:2f:5e:b5:c7:72:2b:e3:07:
                    16:ae:a8:1f:4e:1d:09:21:3c:24:1d:58:66:eb:ab:
                    85:9f:c4:39:d2:9a:71:f1:67:c2:ed:b3:34:18:ee:
                    d0:f9:58:d8:f8:7b:8f:7e:23:19:43:5e:e4:59:ca:
                    4f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DE:B3:4C:13:CD:51:0C:15:8F:4F:29:47:E0:DD:7F:74:EE:23:4E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92114544F82511EF822F3B73762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:1a:b4:b7:a1:6f:55:c2:ba:e1:04:5f:ad:ea:71:1e:f5:c8:
         ae:4e:14:c6:51:78:76:07:0d:e6:92:ac:5d:8a:09:eb:96:01:
         25:74:ed:8e:13:b8:1f:32:c5:1d:c1:9a:1c:4b:50:9b:55:e5:
         f0:9e:b4:a6:16:54:dc:8d:53:36:98:80:fb:82:96:15:1e:75:
         43:47:b2:51:56:9b:4a:17:5a:32:d6:9c:f6:b2:54:13:80:a6:
         56:05:e4:5c:62:d9:b3:87:0f:42:99:8d:bd:59:1c:aa:4e:71:
         87:39:9f:3b:39:b9:79:8f:8f:23:5f:71:35:b6:f3:3a:7b:ad:
         f0:3d:d2:23:8b:45:a5:78:3a:93:30:78:cf:e4:83:95:42:5b:
         b1:a6:00:ef:00:d6:0e:14:48:7b:87:f9:57:29:8b:db:0e:26:
         c5:bd:1d:a5:4c:72:fe:24:a7:55:7d:b4:e6:e4:7e:2c:f0:94:
         53:ef:c6:c8:85:3f:6e:6c:b6:3a:26:75:da:62:c6:10:e0:a6:
         08:17:54:6e:15:1c:99:86:d1:8f:b7:3f:15:45:1d:8f:42:99:
         ee:84:8e:16:a8:51:55:06:d8:72:6d:c6:72:e5:7b:09:6d:d2:
         6c:c8:fc:12:a5:0a:13:27:d3:8c:77:e1:5f:0a:fc:7b:24:b1:
         33:11:08:35
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUFsMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwMzAzMTE0OTI4WhcNMjUwMzE3MTE0OTI4WjAYMRYw
FAYDVQQDEw02N2M1OTc0Yy03ODdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw8QGhFhUIGMwHyqZ/RiAQbS3QD4A5XCJXD347GGAe8ejn8XtMPRKornr
fVQCPhObVSofCY438sGnrYr5eimqhlD3eN16A/SWvWz9LYZdWZTcMWfNPnbRqZCg
JtJra1YfR2D+7uYGuZYqgvMrDTeSS1hZ/dA1KrQIxvU1R/DzVgN/9oDdgQLrkEaH
sG26f+TllIw+zpj/DCP+uhygsanfNqjE1GrMQJhkgZ5Nq8FjxjLuq66GkYgs8wiQ
UXQ/4l9S9XxpJDsalJJTL161x3Ir4wcWrqgfTh0JITwkHVhm66uFn8Q50ppx8WfC
7bM0GO7Q+VjY+HuPfiMZQ17kWcpPhQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCje
s0wTzVEMFY9PKUfg3X907iNOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85MjExNDU0NEY4MjUxMUVGODIyRjNCNzM3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnO8TMA0GCSqGSIb3DQEBCwUA
A4IBAQArGrS3oW9VwrrhBF+t6nEe9ciuThTGUXh2Bw3mkqxdignrlgEldO2OE7gf
MsUdwZocS1CbVeXwnrSmFlTcjVM2mID7gpYVHnVDR7JRVptKF1oy1pz2slQTgKZW
BeRcYtmzhw9CmY29WRyqTnGHOZ87Obl5j48jX3E1tvM6e63wPdIji0WleDqTMHjP
5IOVQluxpgDvANYOFEh7h/lXKYvbDibFvR2lTHL+JKdVfbTm5H4s8JRT78bIhT9u
bLY6JnXaYsYQ4KYIF1RuFRyZhtGPtz8VRR2PQpnuhI4WqFFVBthybcZy5XsJbdJs
yPwSpQoTJ9OMd+FfCvx7JLEzEQg1
-----END CERTIFICATE-----
Generated at Thu Mar 13 07:00:52 2025 by rpki-client