Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA6C4D7284F311EEB6911C474AD9E6FC.roa
File:                     CA6C4D7284F311EEB6911C474AD9E6FC.roa (raw, json)
Hash identifier:          dibjMKXgnBU8Ht0RcvQvYZmSwsBEzF8JE8facpsSjfg=
Subject key identifier:   F9:75:42:F6:D7:0A:5B:AD:18:0E:18:62:B0:74:C1:F9:7F:9C:53:B8
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       4955
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA6C4D7284F311EEB6911C474AD9E6FC.roa
Signing time:             Fri 17 Nov 2023 02:48:30 +0000
ROA not before:           Fri 17 Nov 2023 02:48:27 +0000
ROA not after:            Tue 12 Nov 2024 02:48:27 +0000
asID:                     397630
IP address blocks:        156.227.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18773 (0x4955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 17 02:48:27 2023 GMT
            Not After : Nov 12 02:48:27 2024 GMT
        Subject: CN=6556d47e-264d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:d1:70:a8:d7:bf:eb:ae:dc:ac:a1:3f:ca:
                    49:3f:09:fc:5b:71:a0:a4:ec:59:f7:fb:d0:ee:af:
                    34:e7:2f:b8:ae:70:78:ed:2e:6a:79:54:22:2f:95:
                    f0:05:b3:43:40:fa:20:ac:78:f7:e0:a5:ba:8a:a9:
                    51:19:da:c5:2b:79:db:fd:8c:6f:51:26:b6:e2:e2:
                    f9:10:77:85:0b:19:4b:4a:67:00:ef:b2:00:f7:40:
                    20:b5:93:56:c9:cb:40:55:b8:05:a5:57:a6:47:ad:
                    da:18:7a:63:b4:3c:68:d1:a8:1f:f4:a0:26:78:e7:
                    72:96:89:ce:a7:b2:93:31:43:d1:9d:a9:d2:8c:91:
                    f1:f0:b2:6a:3a:f9:ed:fb:e1:fd:a1:53:4a:5d:5d:
                    ee:98:56:77:b4:cb:68:c3:3a:9c:2a:fa:fe:4a:79:
                    3d:db:2e:c1:d1:b0:29:b9:e3:5c:6d:cc:b5:1c:6f:
                    0f:2e:bb:41:46:a2:21:cb:bd:04:68:56:1b:59:81:
                    11:75:34:b7:84:bf:68:50:c9:a8:97:20:1a:04:a8:
                    39:13:84:94:71:7a:42:71:52:19:2e:a1:2e:d7:04:
                    28:56:a6:5a:6c:8f:00:4a:17:74:b8:14:33:fd:54:
                    3a:4e:dd:eb:1d:28:63:59:ef:22:bf:6d:e3:47:36:
                    7b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:75:42:F6:D7:0A:5B:AD:18:0E:18:62:B0:74:C1:F9:7F:9C:53:B8
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA6C4D7284F311EEB6911C474AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.227.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:0c:fa:c5:68:61:80:12:8c:20:61:9e:86:3f:5a:c8:b9:06:
         96:c8:aa:21:54:db:a8:32:23:be:4a:57:ef:fb:7f:f0:b2:d1:
         96:2a:ac:5c:89:77:56:f4:d1:ab:6d:51:54:57:d7:91:48:62:
         9f:73:22:c3:95:c7:b2:23:40:23:99:7a:1e:c4:0a:db:02:37:
         45:72:cd:29:79:21:f8:e8:36:9c:a4:84:4a:00:38:92:29:d0:
         dd:c3:3b:2e:1b:5c:41:6d:ba:e6:72:1c:ec:d5:b5:f6:f9:64:
         6a:44:59:d2:c1:28:d3:a7:3d:ce:dc:a2:3b:c2:aa:68:dc:42:
         16:43:51:f6:2b:a9:02:ff:34:8f:15:4d:9f:4e:95:96:ce:98:
         83:cb:da:fd:89:71:0b:0d:bb:37:6e:3a:5e:0f:11:f7:35:32:
         c4:4f:ef:6e:65:ff:b8:f4:5d:77:fe:d2:e1:8a:29:d2:22:29:
         2c:dd:eb:6c:04:b0:f6:2a:f3:25:ab:49:54:33:62:e8:4e:2e:
         8b:19:90:a5:8c:c5:b8:ef:01:f9:85:6a:a8:ea:ac:30:08:2d:
         c3:e5:d2:fa:23:ac:aa:8a:5e:36:a4:71:93:d8:12:81:57:fd:
         0c:d9:dd:b8:c9:8e:c5:d5:07:9e:cd:ee:0f:fb:11:eb:20:91:
         4c:20:d8:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:17 2024 by rpki-client on console-fra.rpki-client.org