Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE050A46A62D11EEB75A389C775412E6.roa
File:                     BE050A46A62D11EEB75A389C775412E6.roa (raw, json)
Hash identifier:          4TO3XQpcFillezo47LGDsyGpfl23VeRiTuKwP8tqi3I=
Subject key identifier:   0C:3D:AE:0C:CB:2D:47:D3:10:32:DB:AB:3F:57:AF:07:17:87:C1:5B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       5953
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE050A46A62D11EEB75A389C775412E6.roa
Signing time:             Fri 29 Dec 2023 09:36:29 +0000
ROA not before:           Fri 29 Dec 2023 09:36:25 +0000
ROA not after:            Mon 04 Nov 2024 09:36:25 +0000
asID:                     5065
IP address blocks:        156.229.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22867 (0x5953)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 29 09:36:25 2023 GMT
            Not After : Nov  4 09:36:25 2024 GMT
        Subject: CN=658e931d-2ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cd:08:99:cb:ec:dc:54:c3:35:26:c0:1f:cc:
                    32:48:7b:10:34:64:e0:55:2c:d2:c6:a1:d8:9c:71:
                    42:81:08:3e:d3:f9:fd:bf:e1:27:d2:ce:10:65:e7:
                    e8:64:38:a3:d0:0a:dc:96:d8:eb:b8:ef:a9:bd:36:
                    cb:85:b9:aa:78:38:7d:65:62:f9:04:80:16:ed:60:
                    8a:59:f2:db:a7:18:d7:62:9d:e1:fa:99:12:92:7c:
                    c4:cf:59:75:29:ae:1e:a9:6b:56:1e:29:39:44:72:
                    b4:e1:a4:38:34:26:b4:19:e4:3b:90:ff:5c:da:ab:
                    ec:0e:64:86:6b:bc:82:c5:01:de:25:12:27:59:60:
                    57:68:b4:45:5a:f2:bb:59:fc:ab:77:31:4d:e5:69:
                    d1:5b:07:35:08:c9:0c:b8:7d:60:73:09:cd:b3:7a:
                    56:72:aa:51:27:71:b9:ae:64:61:50:70:db:d8:36:
                    2d:03:65:5b:ff:82:53:f8:3d:cb:a5:80:39:a0:5d:
                    fe:7a:ee:dd:7d:bb:4b:6b:63:f9:b4:a1:2d:f0:9e:
                    df:b2:bb:0d:69:b0:8f:d3:70:59:f1:d2:af:71:e3:
                    44:54:81:6f:85:0a:bc:b4:ea:d2:20:1f:75:9f:ac:
                    35:d6:a5:1f:1f:07:cf:7e:3b:0b:aa:96:e8:7d:d5:
                    7d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:3D:AE:0C:CB:2D:47:D3:10:32:DB:AB:3F:57:AF:07:17:87:C1:5B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE050A46A62D11EEB75A389C775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.229.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:5d:81:d2:ba:54:1c:ed:a1:38:ec:8d:60:07:7e:77:1e:6c:
         58:25:9d:56:6c:cb:65:43:77:a2:4d:c6:97:85:40:a8:89:00:
         88:de:b5:ff:44:c5:de:e5:6f:e6:3a:66:e4:68:48:b3:99:e8:
         2c:dd:a3:1d:6f:69:e8:b7:1d:51:4c:a6:36:dd:12:f7:5a:f7:
         77:38:dd:e9:7d:77:46:2e:91:97:1a:4f:c7:7c:a3:f1:c4:b6:
         5c:89:e0:6e:1e:c0:9e:ba:db:dd:c8:ee:d9:b6:d4:ab:3e:40:
         18:08:02:91:d3:12:7c:c7:f3:bd:93:98:69:85:6a:49:2b:72:
         6c:2b:f1:3a:d2:cc:65:bb:10:6e:b2:21:29:ad:bb:94:23:d9:
         83:94:e7:06:3a:f3:4e:a1:f6:7c:fa:94:53:3b:13:d2:f1:1f:
         ff:94:e1:ee:1a:3d:83:51:bd:4c:2e:48:90:cb:38:f4:c6:9b:
         a5:52:4e:06:aa:52:ec:0d:3b:28:da:4e:d2:ee:77:ef:93:e5:
         20:b1:44:41:55:61:4c:12:c3:2a:43:9e:6c:04:b8:84:97:c3:
         5d:c1:e9:dd:c4:ff:c7:63:cc:66:99:0c:7e:ca:cf:ad:02:17:
         95:04:06:e1:c9:a6:f3:a5:f2:e1:01:c7:50:77:c1:80:84:7e:
         d2:94:e1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:33:23 2024 by rpki-client on console-fra.rpki-client.org