Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CFB0B217C711ED97493EBEF1222468.roa
File:                     B3CFB0B217C711ED97493EBEF1222468.roa (download)
Hash identifier:          fph1/o+2ZSqSq2jNsK0M6oEGFhqCZjI9xPiWe1FPJYs=
Subject key identifier:   F4:76:E1:F1:D4:F5:07:37:02:50:16:63:8C:4C:B0:DA:96:60:B0:4D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       16B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CFB0B217C711ED97493EBEF1222468.roa
ROA valid until:          Jun 25 09:43:17 2023 GMT
asID:                     1239
IP address blocks:
    1: 156.224.4.0/22 maxlen: 24

Validation: OK

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5813 (0x16b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  9 09:43:17 2022 GMT
            Not After : Jun 25 09:43:17 2023 GMT
        Subject: CN=62f22c38-bb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a1:16:85:ec:ca:df:9e:ff:63:3e:ce:f5:d6:
                    65:12:85:30:02:75:89:be:ed:0b:a5:5a:0f:be:ca:
                    c4:9c:3e:4f:9a:0e:8b:d9:92:39:95:61:a1:34:e3:
                    d8:89:ec:b6:2a:f8:7f:ed:91:74:00:f5:70:37:f7:
                    ff:b0:38:6d:ea:48:f6:3e:fd:a7:95:dc:cb:db:78:
                    b9:87:87:c0:f9:74:f2:69:c8:b2:74:7a:57:b9:f9:
                    ca:b9:75:9d:6c:d6:ca:d2:20:63:f7:e0:07:4d:4e:
                    4d:30:0d:a7:fb:cd:9b:77:d5:de:76:ce:a5:1f:f8:
                    cc:30:23:03:b2:59:3b:eb:98:2b:55:81:e1:5f:2a:
                    99:1d:03:e9:49:38:e8:c9:a1:a9:25:65:37:86:4a:
                    01:62:68:88:a9:60:0b:33:28:ba:7e:cc:26:04:b6:
                    42:89:a7:95:d7:fa:e8:6f:1c:d3:1a:4b:2e:00:f0:
                    cc:ed:4e:1c:4d:fa:7b:fb:e2:03:9d:7f:16:28:57:
                    ff:aa:74:10:18:f0:d1:67:3a:4e:bd:9b:7e:44:43:
                    8e:61:db:d6:2e:cb:97:45:85:f4:45:19:c3:90:9a:
                    8a:95:15:2c:66:c2:94:85:0d:73:ac:41:6f:26:c1:
                    f3:a3:f9:5e:81:a2:5f:81:3d:36:fa:d7:fa:61:e2:
                    33:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F4:76:E1:F1:D4:F5:07:37:02:50:16:63:8C:4C:B0:DA:96:60:B0:4D
            X509v3 Authority Key Identifier: 
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B3CFB0B217C711ED97493EBEF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:6d:5b:cf:89:35:cb:c9:19:52:0e:64:9a:1f:f0:38:a1:ee:
         95:07:e1:7e:20:d2:77:00:4b:80:09:08:3c:55:d1:e6:f6:b4:
         6a:de:5f:df:79:5f:28:82:a3:7c:82:be:b9:b3:df:cb:63:2b:
         a6:8f:b3:d7:fd:f5:30:0e:15:e8:d3:c9:00:d5:93:d5:36:02:
         5d:58:5a:ee:ee:bf:26:78:e2:43:7e:eb:55:51:cf:f3:87:1d:
         55:6f:92:de:cf:a9:24:10:a5:9d:e2:3e:c5:d8:09:12:3e:d0:
         1c:16:c3:9e:e2:db:04:68:1b:5a:d9:a3:18:3d:33:55:b3:ab:
         23:89:17:9e:23:2b:ca:b8:a4:33:12:63:ad:d3:a7:2f:37:ba:
         d9:5a:f1:31:27:c8:e5:78:23:0a:35:70:92:67:0a:f9:22:ba:
         b6:a0:f1:09:2d:42:7a:58:a4:19:f8:4d:88:25:25:e4:7d:7e:
         22:cc:ba:20:11:a7:b0:fc:5e:47:56:19:15:c2:67:39:73:b7:
         be:45:a8:dd:79:4a:cf:33:a0:ba:7d:d0:ea:dd:df:f0:c1:e7:
         69:d9:66:4f:12:00:23:16:35:df:12:20:1e:5a:4b:5f:c8:21:
         88:4f:11:21:57:18:df:69:f1:d8:ae:5d:fc:55:4f:40:73:20:
         2c:09:03:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 8 08:31:03 2022 by rpki-client.