Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9FEC850FDC911ED95B5785B4AD9E6FC.roa
File:                     F9FEC850FDC911ED95B5785B4AD9E6FC.roa (raw, json)
Hash identifier:          RSalyWfqoV9hz12fZGUYZZcKDBOxTp414zq9MVbCdJ4=
Subject key identifier:   F4:C1:ED:2D:E0:67:77:FC:88:E8:3D:50:7E:F3:F7:00:09:54:38:2C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       27FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9FEC850FDC911ED95B5785B4AD9E6FC.roa
Signing time:             Mon 29 May 2023 02:39:04 +0000
ROA not before:           Mon 29 May 2023 02:39:01 +0000
ROA not after:            Wed 15 May 2024 02:39:01 +0000
asID:                     63888
IP address blocks:        156.255.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10234 (0x27fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 29 02:39:01 2023 GMT
            Not After : May 15 02:39:01 2024 GMT
        Subject: CN=64741048-7c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:46:76:4f:bc:3b:0e:5d:69:c6:ba:84:75:a3:
                    36:fc:11:a3:59:1f:d9:0f:57:a4:0f:f6:6c:d5:34:
                    8b:0d:44:fe:88:c2:57:8e:d6:71:81:ab:69:a6:67:
                    71:f1:79:0d:15:17:ec:1c:e6:8b:d8:1b:45:d5:de:
                    f2:e1:31:75:69:27:e3:9a:b3:eb:73:26:e6:3d:b9:
                    3b:f9:48:3b:02:b2:96:9d:5d:8f:23:2d:a4:e8:f5:
                    f2:a1:7e:20:3a:7c:3d:16:e6:bb:90:cb:c7:61:f2:
                    e9:e5:05:90:fc:a6:b3:43:e9:d0:d5:51:4a:79:7c:
                    f7:2e:46:6a:b7:54:8e:b7:48:f3:c0:90:14:30:ef:
                    19:4f:ab:a9:65:4a:cf:60:14:96:1b:f8:db:42:42:
                    fd:f8:7a:a0:b4:94:21:42:e6:86:7b:30:9d:5a:bd:
                    df:3f:5c:8c:09:e5:58:27:cb:f5:32:01:b1:d3:04:
                    e7:26:c8:45:a5:c7:a4:c1:96:83:17:22:f3:1b:d4:
                    86:81:a7:69:6f:14:31:46:f2:26:ce:03:e9:55:85:
                    b7:09:da:67:04:ce:19:9f:94:81:63:c0:39:75:1f:
                    68:ef:d1:8b:0d:b5:3c:00:fe:49:78:6f:9b:ff:9c:
                    40:67:fe:3a:4f:e2:6d:de:c3:a2:b6:7b:eb:af:11:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C1:ED:2D:E0:67:77:FC:88:E8:3D:50:7E:F3:F7:00:09:54:38:2C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F9FEC850FDC911ED95B5785B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.255.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:b5:a5:5f:c1:4c:f3:da:5c:c0:45:14:e3:08:29:86:3d:2f:
         7f:4e:a4:f1:b0:2b:8c:32:67:dc:a7:94:6f:e1:4f:b2:80:24:
         b6:2e:b9:b8:c8:6c:ca:e5:1f:b4:f8:df:0f:d0:7f:66:ed:6b:
         f8:7a:47:af:a8:98:36:5e:2e:a8:83:5b:71:7b:27:0b:8d:f2:
         be:17:2e:b9:5d:ed:bf:28:55:da:cb:59:66:bb:ce:58:3e:6c:
         90:76:85:6e:d5:28:fd:71:f4:e2:ca:f8:7e:d0:47:3d:a7:cf:
         16:bf:c7:90:2b:be:5e:3c:1d:26:93:0c:9a:20:4e:87:5b:75:
         77:6c:25:ce:ee:d5:4e:00:92:ad:6a:04:62:ea:8a:cc:8f:b2:
         f1:bf:f4:20:3b:dc:69:0e:25:2c:a3:3f:2e:58:a5:2b:37:64:
         98:06:6f:51:c5:2f:4c:c3:be:c1:1a:39:a5:61:78:97:c9:a0:
         8f:80:cd:bd:e4:dc:08:7d:38:6c:ee:6f:8b:c0:be:f3:34:04:
         fa:37:cd:95:e0:a6:59:8a:8d:ef:6c:87:ff:d0:23:95:dd:e4:
         83:a6:fc:1f:6d:7d:8b:de:92:d0:d4:ba:9b:4b:fe:32:4c:01:
         97:d3:9c:f3:8b:f1:58:b7:25:f4:8b:a4:5f:25:d7:93:a4:dc:
         98:f4:59:78
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICJ/owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA1MjkwMjM5MDFaFw0yNDA1MTUwMjM5MDFaMBgxFjAU
BgNVBAMTDTY0NzQxMDQ4LTdjMjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNRnZPvDsOXWnGuoR1ozb8EaNZH9kPV6QP9mzVNIsNRP6IwleO1nGBq2mm
Z3HxeQ0VF+wc5ovYG0XV3vLhMXVpJ+Oas+tzJuY9uTv5SDsCspadXY8jLaTo9fKh
fiA6fD0W5ruQy8dh8unlBZD8prND6dDVUUp5fPcuRmq3VI63SPPAkBQw7xlPq6ll
Ss9gFJYb+NtCQv34eqC0lCFC5oZ7MJ1avd8/XIwJ5Vgny/UyAbHTBOcmyEWlx6TB
loMXIvMb1IaBp2lvFDFG8ibOA+lVhbcJ2mcEzhmflIFjwDl1H2jv0YsNtTwA/kl4
b5v/nEBn/jpP4m3ew6K2e+uvEdrVAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU9MHt
LeBnd/yI6D1QfvP3AAlUOCwwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4L0Y5RkVDODUwRkRDOTExRUQ5NUI1Nzg1QjRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACc/18wDQYJKoZIhvcNAQELBQAD
ggEBAG21pV/BTPPaXMBFFOMIKYY9L39OpPGwK4wyZ9ynlG/hT7KAJLYuubjIbMrl
H7T43w/Qf2bta/h6R6+omDZeLqiDW3F7JwuN8r4XLrld7b8oVdrLWWa7zlg+bJB2
hW7VKP1x9OLK+H7QRz2nzxa/x5Arvl48HSaTDJogTodbdXdsJc7u1U4Akq1qBGLq
isyPsvG/9CA73GkOJSyjPy5YpSs3ZJgGb1HFL0zDvsEaOaVheJfJoI+Azb3k3Ah9
OGzub4vAvvM0BPo3zZXgplmKje9sh//QI5Xd5IOm/B9tfYvektDUuptL/jJMAZfT
nPOL8Vi3JfSLpF8l15Ok3Jj0WXg=
-----END CERTIFICATE-----
Generated at Tue May 7 01:58:07 2024 by rpki-client on console-fra.rpki-client.org