Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C928517EEBD611EDA1941C2D4AD9E6FC.roa
File:                     C928517EEBD611EDA1941C2D4AD9E6FC.roa (raw, json)
Hash identifier:          VHN9J1Pu0mv3X3tOmHEJtZ/HSBT51hk9/g0iAkgwTPo=
Subject key identifier:   7A:B7:82:31:B7:1C:3B:D5:E3:3B:31:4F:5E:5A:E3:9E:BC:7C:07:13
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       1FED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C928517EEBD611EDA1941C2D4AD9E6FC.roa
Signing time:             Sat 06 May 2023 06:25:25 +0000
ROA not before:           Sat 06 May 2023 06:25:21 +0000
ROA not after:            Fri 10 May 2024 06:25:21 +0000
asID:                     211695
IP address blocks:        156.250.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8173 (0x1fed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May  6 06:25:21 2023 GMT
            Not After : May 10 06:25:21 2024 GMT
        Subject: CN=6455f2d5-02ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9e:c8:db:89:5a:19:6d:b5:fd:57:ab:fd:a8:
                    eb:d8:c4:2b:0b:8d:a1:ea:f5:5a:a4:71:e2:80:30:
                    13:0d:12:53:b3:85:ee:b5:6b:65:c7:b1:04:3d:b6:
                    09:9d:2b:e1:89:f1:a8:90:e4:ba:f9:89:60:e6:8e:
                    a2:9c:cc:1c:4f:ff:c2:fe:b2:73:f9:cb:43:6a:d1:
                    df:e4:88:7c:8f:24:1f:44:f0:30:d8:fa:da:7f:78:
                    59:f7:31:c4:90:03:f6:48:93:79:01:a1:7e:58:ef:
                    c3:dd:08:30:21:22:57:6e:73:9d:74:bc:0e:cb:7a:
                    39:c2:b8:e7:8b:3c:af:ed:9d:8f:c9:10:3a:79:fc:
                    e2:f5:22:90:73:d5:84:6e:9c:9a:7b:d5:70:26:ee:
                    e2:33:44:0c:07:53:6f:cc:24:7f:57:8f:a2:15:be:
                    19:f1:6a:76:68:db:74:19:a9:87:b0:c3:db:5e:d2:
                    32:c9:9b:c9:3d:49:aa:5a:89:e4:41:c4:b2:f4:8b:
                    5d:2c:5a:4c:95:95:06:53:f1:04:22:66:1a:12:7c:
                    63:8c:55:9d:6d:40:35:79:88:00:0b:75:f1:53:19:
                    0e:9a:b8:26:38:eb:47:b1:50:af:27:4f:7a:f2:10:
                    0f:3c:b1:e9:bf:23:5d:d2:16:0d:00:e8:40:45:5a:
                    1e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B7:82:31:B7:1C:3B:D5:E3:3B:31:4F:5E:5A:E3:9E:BC:7C:07:13
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C928517EEBD611EDA1941C2D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.250.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:cc:f9:51:ee:1c:71:43:8b:cd:da:fd:06:2a:82:1d:cc:5a:
         bb:a5:8e:37:9d:5b:4f:86:c2:ed:5c:ab:ac:f6:fb:e1:e4:26:
         69:ee:9d:34:42:86:f5:0a:ea:c6:c2:79:bb:4c:01:f9:6a:27:
         3a:6e:80:4d:2f:05:7b:bf:b8:a3:f0:a0:5e:f4:d4:09:6a:13:
         75:53:b9:2d:2d:81:05:cd:30:bc:af:cc:7e:52:5b:74:df:b2:
         85:7b:42:11:56:22:95:b2:a3:16:87:83:03:15:19:79:93:bd:
         5b:03:e9:b0:48:e6:60:67:34:04:d8:c9:4c:a8:92:8b:f6:0b:
         f5:c8:5e:3e:96:a1:11:2d:1d:ed:78:16:59:5c:c5:90:aa:89:
         9e:1e:ff:50:72:d3:8e:3e:dc:12:dc:ba:d6:83:7b:df:5a:e9:
         ec:a8:53:09:a1:e9:e5:6c:b0:9b:93:6d:e5:11:37:b9:6b:9a:
         39:68:85:f6:8e:ef:a4:32:32:60:4d:8a:3b:86:e7:8a:8e:aa:
         91:c4:50:46:28:07:e5:8c:8b:c6:7f:32:24:f3:24:d5:1b:5a:
         9c:6a:64:44:bc:44:6c:7a:9c:f1:e3:b7:db:d4:48:2f:cc:37:
         c2:60:bc:05:63:ab:8e:92:a4:e2:af:61:af:13:dc:81:98:48:
         94:09:40:17
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICH+0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA1MDYwNjI1MjFaFw0yNDA1MTAwNjI1MjFaMBgxFjAU
BgNVBAMTDTY0NTVmMmQ1LTAyZWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKnsjbiVoZbbX9V6v9qOvYxCsLjaHq9VqkceKAMBMNElOzhe61a2XHsQQ9
tgmdK+GJ8aiQ5Lr5iWDmjqKczBxP/8L+snP5y0Nq0d/kiHyPJB9E8DDY+tp/eFn3
McSQA/ZIk3kBoX5Y78PdCDAhIlduc510vA7LejnCuOeLPK/tnY/JEDp5/OL1IpBz
1YRunJp71XAm7uIzRAwHU2/MJH9Xj6IVvhnxanZo23QZqYeww9te0jLJm8k9Sapa
ieRBxLL0i10sWkyVlQZT8QQiZhoSfGOMVZ1tQDV5iAALdfFTGQ6auCY460exUK8n
T3ryEA88sem/I13SFg0A6EBFWh6JAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUereC
MbccO9XjOzFPXlrjnrx8BxMwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0M5Mjg1MTdFRUJENjExRURBMTk0MUMyRDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc+gAwDQYJKoZIhvcNAQELBQAD
ggEBAAfM+VHuHHFDi83a/QYqgh3MWruljjedW0+Gwu1cq6z2++HkJmnunTRChvUK
6sbCebtMAflqJzpugE0vBXu/uKPwoF701AlqE3VTuS0tgQXNMLyvzH5SW3TfsoV7
QhFWIpWyoxaHgwMVGXmTvVsD6bBI5mBnNATYyUyokov2C/XIXj6WoREtHe14Fllc
xZCqiZ4e/1By044+3BLcutaDe99a6eyoUwmh6eVssJuTbeURN7lrmjlohfaO76Qy
MmBNijuG54qOqpHEUEYoB+WMi8Z/MiTzJNUbWpxqZES8RGx6nPHjt9vUSC/MN8Jg
vAVjq46SpOKvYa8T3IGYSJQJQBc=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:17 2024 by rpki-client on console-fra.rpki-client.org