Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEC786507FED11EE860907374AD9E6FC.roa
File:                     FEC786507FED11EE860907374AD9E6FC.roa (raw, json)
Hash identifier:          5R7L2Xzhr9IPlxDiDszAPh6w9YGju4goOhWPENQPVlQ=
Subject key identifier:   A1:82:1F:20:D4:5A:19:BF:9E:77:43:B0:73:7A:E4:FC:AA:CF:7E:5A
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       4658
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEC786507FED11EE860907374AD9E6FC.roa
Signing time:             Fri 10 Nov 2023 17:24:25 +0000
ROA not before:           Fri 10 Nov 2023 17:24:22 +0000
ROA not after:            Tue 04 Jun 2024 17:24:22 +0000
asID:                     137577
IP address blocks:        45.195.39.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 24 May 2024 00:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18008 (0x4658)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 10 17:24:22 2023 GMT
            Not After : Jun  4 17:24:22 2024 GMT
        Subject: CN=654e6749-4866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f5:9d:eb:a2:1d:9d:d9:69:21:17:f6:e5:c9:
                    64:26:23:68:11:c6:59:4e:1d:1d:10:e9:20:13:00:
                    68:0f:3d:4b:7a:4e:00:b5:76:67:cf:ed:88:81:16:
                    42:d0:d4:da:30:29:bd:89:e5:82:4b:d4:15:ec:0a:
                    22:36:ec:db:51:57:d7:6d:90:db:0d:77:bb:1e:61:
                    55:55:5d:83:ed:eb:0f:fc:5e:19:0e:8a:c4:fd:d4:
                    7f:9b:ad:ff:12:3e:6c:8a:44:27:68:e9:dd:31:cc:
                    87:8b:61:c8:21:cf:13:bf:d2:c1:bf:ce:32:4a:0f:
                    b6:f0:ac:45:e4:e4:17:9a:cc:3d:ff:84:16:31:9f:
                    90:57:a6:20:cb:f8:fa:0a:e9:21:24:8d:22:99:ae:
                    ee:8e:1b:03:86:f9:30:d3:53:e3:c9:b3:5c:a1:cf:
                    4c:1a:96:44:e2:41:41:6e:36:05:a5:f1:f5:75:41:
                    9a:55:eb:c3:4f:13:60:a9:de:0f:de:36:eb:4c:4e:
                    b5:12:6e:c1:94:4c:34:80:ed:4c:e3:51:40:a7:4e:
                    14:25:62:2d:64:44:8a:20:be:d1:26:a6:c9:f1:70:
                    5c:0d:b3:ba:96:eb:fa:ea:13:3c:bd:6e:88:ee:02:
                    c3:2c:32:9a:ad:34:3c:fa:34:26:56:88:84:11:5e:
                    fd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:82:1F:20:D4:5A:19:BF:9E:77:43:B0:73:7A:E4:FC:AA:CF:7E:5A
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEC786507FED11EE860907374AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:27:a9:bd:bd:09:0b:48:e9:bd:6e:99:5d:f7:af:ab:9a:69:
         f7:61:bb:46:8b:87:b9:db:5e:bb:fd:03:eb:9d:47:ab:d1:b0:
         68:bf:83:6c:74:e2:69:9d:75:50:25:f0:b4:e3:c7:ff:97:35:
         b1:a1:35:65:83:f2:4b:86:0e:aa:03:21:86:19:bf:da:9e:9b:
         f0:71:15:91:26:bb:71:58:ac:17:52:4a:61:8e:a3:a6:8b:b2:
         7b:2a:eb:57:c6:0f:fa:71:46:4e:49:34:cf:3d:af:e6:e2:db:
         b8:c7:83:cd:5c:fa:75:84:0b:84:8c:10:ca:1d:2b:29:27:d4:
         b8:58:ea:e4:f3:28:50:bf:87:dc:8c:e7:4b:d9:c3:ea:99:ec:
         53:c3:90:ab:7f:f3:eb:9f:77:bd:9e:7f:14:f7:23:c2:87:89:
         ac:c1:06:ab:17:85:59:55:d4:65:b5:8c:a1:2e:fc:98:7e:72:
         40:09:b3:d0:1b:9f:68:e1:9e:58:83:98:71:2b:93:a1:fb:c5:
         df:5d:7c:77:3b:10:f1:dc:09:b2:23:02:12:3f:4b:a1:bb:99:
         3e:4e:6c:7f:f1:f6:95:26:f3:9d:75:fb:52:9c:23:fa:a1:4b:
         21:f7:88:a6:fc:28:32:07:74:45:00:5d:2d:bc:8e:0d:3e:5c:
         24:b5:ab:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 14:39:34 2024 by rpki-client on console-fra.rpki-client.org