Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D75AC2784AD511EEA85638604AD9E6FC.roa
File:                     D75AC2784AD511EEA85638604AD9E6FC.roa (raw, json)
Hash identifier:          9CpSl3/PQldrIQLlqS1MCUlwkNATBAJSokR0pcJ9rBY=
Subject key identifier:   05:43:56:37:9C:E1:75:F7:B9:D5:5D:D0:80:6C:51:B3:BD:17:00:57
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       37DC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D75AC2784AD511EEA85638604AD9E6FC.roa
Signing time:             Mon 04 Sep 2023 03:48:00 +0000
ROA not before:           Mon 04 Sep 2023 03:47:56 +0000
ROA not after:            Thu 08 Aug 2024 03:47:56 +0000
asID:                     133199
IP address blocks:        156.224.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14300 (0x37dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  4 03:47:56 2023 GMT
            Not After : Aug  8 03:47:56 2024 GMT
        Subject: CN=64f55370-bd83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:74:a9:8b:e9:34:6a:42:0c:16:b0:94:39:18:
                    e7:a5:e2:dd:01:77:9b:15:56:56:39:42:79:07:53:
                    a2:5c:3d:c6:c7:85:b6:51:e9:c5:c3:d7:fc:e0:bc:
                    ab:c2:0e:cc:11:4a:01:87:01:2a:2b:1d:dc:60:90:
                    4f:34:00:86:90:3c:50:51:9c:98:10:f7:e6:91:24:
                    2b:89:f4:d1:77:a3:4e:1b:b7:e0:a3:6c:b2:7a:d8:
                    50:96:b5:c8:bb:ae:3a:73:0d:35:c7:7c:23:fe:7f:
                    b0:1d:54:04:6e:94:0e:9b:fa:d2:07:ba:e7:7c:96:
                    ef:23:11:44:62:c0:d0:d7:3c:7d:a7:de:2f:66:cf:
                    81:5e:f2:f8:12:7f:d3:d3:12:5e:b2:03:b8:ee:56:
                    2d:e6:d9:ca:fa:be:f6:25:23:84:75:54:f5:51:82:
                    9f:56:d5:62:0a:62:8e:69:d2:c9:09:57:e4:2c:09:
                    42:22:2b:86:b3:6f:38:63:93:fc:64:91:69:69:72:
                    56:56:1b:26:2b:59:f3:02:c9:6b:9a:5d:90:d7:64:
                    2c:8f:ae:99:11:24:f3:0c:17:d0:9f:2b:23:3f:95:
                    db:7c:e8:8e:93:8c:9a:e7:3c:dd:ae:09:3e:f8:62:
                    15:94:81:0e:81:cf:19:b8:1c:b6:16:5c:41:62:72:
                    e0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:43:56:37:9C:E1:75:F7:B9:D5:5D:D0:80:6C:51:B3:BD:17:00:57
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D75AC2784AD511EEA85638604AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.224.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:72:b9:f1:fd:0e:3f:65:2f:46:dd:a1:f3:bd:8e:e6:64:cf:
         63:fa:87:cf:71:5b:4e:43:18:d4:52:04:16:fb:aa:63:c8:77:
         d3:60:9b:a5:3c:71:62:16:cc:03:1d:d9:f1:aa:ce:2e:30:95:
         6f:9a:a9:29:6b:f2:57:98:8e:3c:4a:72:31:7f:6a:d2:1f:f9:
         20:2f:66:3d:53:08:9f:c0:a8:16:3e:b5:7c:c8:e7:9f:fb:ff:
         16:34:7f:a0:2c:fe:2b:17:fa:de:f6:b4:d2:47:b3:3d:a6:57:
         51:bf:e3:fc:06:81:ec:56:5f:2f:32:4c:d4:47:f0:2e:fe:30:
         a9:fa:e4:2f:d8:4f:ea:29:5b:3a:0a:13:28:9f:df:f9:39:6d:
         9b:c6:5f:5f:4e:a8:42:7f:68:2b:26:46:f2:5b:75:7b:42:f1:
         c0:1b:33:fb:71:d7:4e:38:91:f8:83:e8:76:2d:a2:36:af:a9:
         75:26:13:80:5d:99:d9:4c:c7:a0:b6:ad:dc:02:51:96:e8:97:
         a8:c1:b2:25:81:a3:14:09:8c:b7:85:96:f2:66:23:60:0f:aa:
         ed:bc:e4:c2:f7:c7:da:dd:59:4a:10:18:fb:8c:f0:38:33:50:
         6e:ef:18:64:17:03:e3:2d:08:bf:7c:36:68:64:b5:82:6b:3b:
         f7:f4:96:d7
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICN9wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA5MDQwMzQ3NTZaFw0yNDA4MDgwMzQ3NTZaMBgxFjAU
BgNVBAMTDTY0ZjU1MzcwLWJkODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDidKmL6TRqQgwWsJQ5GOel4t0Bd5sVVlY5QnkHU6JcPcbHhbZR6cXD1/zg
vKvCDswRSgGHASorHdxgkE80AIaQPFBRnJgQ9+aRJCuJ9NF3o04bt+CjbLJ62FCW
tci7rjpzDTXHfCP+f7AdVARulA6b+tIHuud8lu8jEURiwNDXPH2n3i9mz4Fe8vgS
f9PTEl6yA7juVi3m2cr6vvYlI4R1VPVRgp9W1WIKYo5p0skJV+QsCUIiK4azbzhj
k/xkkWlpclZWGyYrWfMCyWuaXZDXZCyPrpkRJPMMF9CfKyM/ldt86I6TjJrnPN2u
CT74YhWUgQ6Bzxm4HLYWXEFicuALAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUBUNW
N5zhdfe51V3QgGxRs70XAFcwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0Q3NUFDMjc4NEFENTExRUVBODU2Mzg2MDRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc4AMwDQYJKoZIhvcNAQELBQAD
ggEBAHtyufH9Dj9lL0bdofO9juZkz2P6h89xW05DGNRSBBb7qmPId9Ngm6U8cWIW
zAMd2fGqzi4wlW+aqSlr8leYjjxKcjF/atIf+SAvZj1TCJ/AqBY+tXzI55/7/xY0
f6As/isX+t72tNJHsz2mV1G/4/wGgexWXy8yTNRH8C7+MKn65C/YT+opWzoKEyif
3/k5bZvGX19OqEJ/aCsmRvJbdXtC8cAbM/tx1044kfiD6HYtojavqXUmE4BdmdlM
x6C2rdwCUZbol6jBsiWBoxQJjLeFlvJmI2APqu285ML3x9rdWUoQGPuM8DgzUG7v
GGQXA+MtCL98NmhktYJrO/f0ltc=
-----END CERTIFICATE-----
Generated at Tue May 7 03:12:08 2024 by rpki-client on console-fra.rpki-client.org