Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D63319107EB311EE81035B494AD9E6FC.roa
File:                     D63319107EB311EE81035B494AD9E6FC.roa (raw, json)
Hash identifier:          7WOUf0gN03neFn/fkZrMCoua79OoK+9nG+QNTPHAtxo=
Subject key identifier:   B7:AB:77:FA:1D:C1:54:D6:46:6F:DA:74:BA:14:1C:81:77:62:D3:00
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       44BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D63319107EB311EE81035B494AD9E6FC.roa
Signing time:             Thu 09 Nov 2023 03:55:35 +0000
ROA not before:           Thu 09 Nov 2023 03:55:32 +0000
ROA not after:            Thu 08 Aug 2024 03:55:32 +0000
asID:                     133861
IP address blocks:        156.245.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17595 (0x44bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov  9 03:55:32 2023 GMT
            Not After : Aug  8 03:55:32 2024 GMT
        Subject: CN=654c5837-4db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fd:61:e1:08:57:82:b4:1f:d6:43:46:45:2a:
                    bd:b2:11:5e:58:ab:42:f1:c2:10:33:88:8f:ff:a4:
                    bb:8d:76:4b:12:d4:7b:ad:e9:95:f2:42:b3:b1:98:
                    19:f9:4f:85:a0:49:66:40:16:e0:02:46:6d:42:af:
                    0b:69:5c:e9:88:d4:9a:09:20:4c:80:69:f9:14:d1:
                    a0:5c:b4:38:58:4d:bc:6c:c1:15:64:04:60:2c:1f:
                    12:4d:e4:df:b8:ae:a7:05:cb:ea:2d:fd:75:d4:d7:
                    20:00:c3:d6:7d:c1:cc:45:66:86:6a:a7:27:fe:9f:
                    7b:78:bc:55:e8:b7:ce:14:69:a7:7e:6a:97:6f:2d:
                    21:95:d4:47:ce:bb:2d:73:96:63:a3:84:e5:01:f1:
                    34:67:c0:ad:24:74:81:51:d5:e8:8a:7f:b3:b3:32:
                    50:44:de:2e:a8:be:6c:b2:ac:f4:39:70:32:ac:fa:
                    91:9e:36:cc:4b:e2:5c:03:44:f5:95:ee:e2:04:94:
                    04:77:b2:17:fa:23:ca:74:b6:b0:b6:be:31:2a:5d:
                    a9:51:b9:f4:fc:c7:af:8c:c2:4a:df:ef:7b:81:11:
                    c2:db:61:19:e7:c1:43:de:04:0f:9f:89:ab:81:e8:
                    05:33:f5:d5:5a:cf:60:f3:23:df:39:1b:66:6f:2f:
                    66:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:AB:77:FA:1D:C1:54:D6:46:6F:DA:74:BA:14:1C:81:77:62:D3:00
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D63319107EB311EE81035B494AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:91:91:c5:54:c1:32:1f:26:e3:20:20:c9:c2:5f:49:14:44:
         be:ff:0b:82:1a:65:7f:b4:31:f8:d6:85:c8:60:96:c4:80:8e:
         97:a8:28:34:42:9f:7e:04:c2:58:f9:35:bc:db:23:48:a5:0f:
         99:ae:11:27:72:07:70:bc:9f:76:b5:00:8d:db:5f:e3:dd:67:
         ab:45:52:40:57:3b:35:15:57:a9:b4:f7:b2:8d:94:ee:19:16:
         c5:df:dd:d7:df:d2:02:5d:26:da:db:ee:e1:e8:39:8d:4f:c9:
         f3:63:97:53:56:17:ba:28:c3:39:ea:c5:79:ea:49:db:5e:d3:
         22:9e:ee:2b:31:bd:b2:50:b9:06:51:97:68:f3:7a:16:3d:0e:
         46:93:cf:92:09:e0:ce:55:eb:66:e5:eb:f7:ca:04:5d:15:16:
         17:8e:fa:fe:c4:90:a7:3b:14:c9:c2:ed:af:3e:fa:91:70:6d:
         ec:b3:b0:83:6c:77:06:a7:8b:a8:98:80:47:fa:33:87:f4:49:
         af:92:ee:6a:ad:0d:3b:b9:ef:04:19:63:fe:20:d1:ec:91:85:
         2f:fc:74:6a:b4:81:72:fa:2d:4e:94:b4:86:41:07:ff:29:76:
         92:08:d6:45:85:b0:04:84:d8:97:62:45:21:c0:27:0e:58:8d:
         30:7d:c3:35
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICRLswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzExMDkwMzU1MzJaFw0yNDA4MDgwMzU1MzJaMBgxFjAU
BgNVBAMTDTY1NGM1ODM3LTRkYjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDi/WHhCFeCtB/WQ0ZFKr2yEV5Yq0LxwhAziI//pLuNdksS1Hut6ZXyQrOx
mBn5T4WgSWZAFuACRm1CrwtpXOmI1JoJIEyAafkU0aBctDhYTbxswRVkBGAsHxJN
5N+4rqcFy+ot/XXU1yAAw9Z9wcxFZoZqpyf+n3t4vFXot84Uaad+apdvLSGV1EfO
uy1zlmOjhOUB8TRnwK0kdIFR1eiKf7OzMlBE3i6ovmyyrPQ5cDKs+pGeNsxL4lwD
RPWV7uIElAR3shf6I8p0trC2vjEqXalRufT8x6+Mwkrf73uBEcLbYRnnwUPeBA+f
iauB6AUz9dVaz2DzI985G2ZvL2aLAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUt6t3
+h3BVNZGb9p0uhQcgXdi0wAwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0Q2MzMxOTEwN0VCMzExRUU4MTAzNUI0OTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc9R8wDQYJKoZIhvcNAQELBQAD
ggEBACSRkcVUwTIfJuMgIMnCX0kURL7/C4IaZX+0MfjWhchglsSAjpeoKDRCn34E
wlj5NbzbI0ilD5muESdyB3C8n3a1AI3bX+PdZ6tFUkBXOzUVV6m097KNlO4ZFsXf
3dff0gJdJtrb7uHoOY1PyfNjl1NWF7oowznqxXnqSdte0yKe7isxvbJQuQZRl2jz
ehY9DkaTz5IJ4M5V62bl6/fKBF0VFheO+v7EkKc7FMnC7a8++pFwbeyzsINsdwan
i6iYgEf6M4f0Sa+S7mqtDTu57wQZY/4g0eyRhS/8dGq0gXL6LU6UtIZBB/8pdpII
1kWFsASE2JdiRSHAJw5YjTB9wzU=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:59 2024 by rpki-client on console-ams.rpki-client.org