Route Origin Authorization

$ cd rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/

$ rpki-client -vvf A4F0546EC47C11EC9158D487F1222468.roa
File:                     A4F0546EC47C11EC9158D487F1222468.roa (download)
Hash identifier:          mFtHVX3qGCo+Mc172Nh86yfd065g2M8aqaegh/1iRBs=
Subject key identifier:   BE:26:95:03:79:62:B9:A6:B8:47:01:ED:1E:CE:43:D1:7D:9C:A3:E2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1362
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4F0546EC47C11EC9158D487F1222468.roa
ROA valid until:          Jan 30 09:46:53 2023 GMT
asID:                     139057
IP address blocks:
    1: 156.251.64.0/23 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4962 (0x1362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 25 09:46:53 2022 GMT
            Not After : Jan 30 09:46:53 2023 GMT
        Subject: CN=62666e10-b4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a2:ac:ae:85:63:29:63:77:68:ab:e7:e5:ac:
                    94:8f:ab:82:0e:c8:4f:7d:bb:65:49:aa:65:b1:5c:
                    27:1a:c1:d9:3e:5d:92:40:75:00:b6:59:15:02:7e:
                    df:d0:c6:4e:ef:77:3e:e1:df:85:23:7d:6e:01:30:
                    52:e0:f8:ff:ba:07:84:5b:1e:63:3e:49:22:be:e5:
                    e8:d5:39:ed:40:ec:60:1a:10:29:8c:be:20:96:a2:
                    41:2d:d4:9a:3d:00:04:41:a0:b7:05:15:a2:11:0d:
                    66:ae:2d:fd:99:8e:02:14:2e:37:97:36:34:ed:b8:
                    93:e8:9e:e3:63:ff:c6:75:bc:17:b4:6e:f7:b0:0f:
                    93:3a:d7:f7:75:ac:e5:73:04:76:f3:d4:63:9e:6a:
                    e8:97:a0:01:83:a9:4f:53:84:ab:0d:a6:b7:8b:59:
                    5e:3f:f4:c0:24:a1:32:10:2e:27:22:aa:f5:a3:03:
                    cf:8f:17:6d:e8:d2:7b:44:6f:4b:64:8d:d2:33:0b:
                    9f:19:00:c5:8c:39:e8:25:91:af:82:b2:21:56:14:
                    d2:a7:c3:dd:16:d6:33:e4:86:98:f6:a0:1f:6e:c7:
                    50:20:bd:27:33:d1:7c:5a:5c:eb:02:0c:09:7d:72:
                    8c:fa:ec:89:9e:de:64:c3:91:c0:3e:23:8b:ab:f5:
                    24:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                BE:26:95:03:79:62:B9:A6:B8:47:01:ED:1E:CE:43:D1:7D:9C:A3:E2
            X509v3 Authority Key Identifier: 
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4F0546EC47C11EC9158D487F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.251.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:a2:d0:7b:ee:cd:e1:66:dd:af:ca:be:73:a8:a8:cd:4b:d9:
         c7:bb:a4:57:87:bc:30:00:0d:63:4a:26:5f:62:a0:55:c8:1c:
         3e:ff:fd:81:3e:70:0f:b3:14:eb:a5:21:5f:b1:61:df:80:8c:
         f4:89:f0:ad:5d:8d:86:1c:8a:ca:f8:1b:7b:e3:9d:e5:38:b2:
         bd:52:a2:6e:32:4d:26:a1:67:76:f6:51:94:8f:bf:86:40:c0:
         bd:d8:35:9d:37:82:59:01:7f:ce:38:1f:7e:d1:d3:7d:49:09:
         9e:10:cf:12:d5:52:73:5f:54:ef:37:54:0a:18:02:5b:cf:33:
         76:98:80:92:88:b2:0b:7c:d6:33:03:26:67:1b:b8:6b:4c:4a:
         da:85:49:51:5e:aa:0c:6a:3c:48:5e:36:f4:c1:a6:e1:d8:7b:
         67:7b:69:c1:d2:f0:22:9c:b5:45:a5:a6:ec:28:0d:a8:e3:d1:
         02:c7:a4:e9:fe:84:e1:44:71:39:f9:38:10:27:57:bb:8a:16:
         d1:1b:e1:ec:9a:2f:54:63:d6:52:48:ce:00:ab:4a:cc:2f:83:
         e5:8c:78:de:69:55:4a:3c:fa:9a:ec:39:e9:35:f3:0a:86:07:
         e0:dc:a3:48:37:d9:f9:49:a2:0f:6e:bd:3d:76:16:e7:85:5d:
         79:67:64:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 3 18:34:22 2022 by rpki-client.