Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00D963645B9E11EFB859ED5D762E951A.roa
File:                     00D963645B9E11EFB859ED5D762E951A.roa (raw, json)
Hash identifier:          efiJCyD2G+66h8DVpgEDnV8Ge4QXEGtZoIHntbYzc18=
Subject key identifier:   C6:1A:F8:E2:69:69:3B:27:0F:16:C6:89:9D:97:B8:67:07:88:D1:D6
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       A7C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00D963645B9E11EFB859ED5D762E951A.roa
Signing time:             Fri 16 Aug 2024 07:06:05 +0000
ROA not before:           Fri 16 Aug 2024 07:06:02 +0000
ROA not after:            Fri 21 Aug 2026 07:06:02 +0000
asID:                     133012
IP address blocks:        45.199.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42952 (0xa7c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 16 07:06:02 2024 GMT
            Not After : Aug 21 07:06:02 2026 GMT
        Subject: CN=66befa5d-63b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ef:5e:f1:33:aa:37:9b:4f:7f:a2:fc:f8:d1:
                    ef:c5:28:5a:cd:cc:b8:28:c4:45:e1:90:0a:08:eb:
                    ee:ef:f5:02:dd:84:0a:c3:62:5e:34:72:8e:3b:39:
                    6c:5b:ed:7f:0e:26:45:81:7f:c5:9f:b7:ba:2b:24:
                    9e:90:56:2d:f9:b1:b3:69:f4:3e:41:fd:9b:ea:92:
                    f1:fd:1d:8e:19:7f:72:19:f7:1f:a4:43:95:28:2e:
                    c3:fc:de:62:45:be:f2:44:4c:0d:73:3c:3e:f7:5c:
                    af:65:67:52:e5:ad:e0:63:66:23:cf:50:85:66:3d:
                    29:f0:e6:29:eb:4d:d4:b8:80:81:cf:7e:b8:1c:10:
                    3b:6b:31:47:f2:92:1e:52:23:25:39:89:64:65:11:
                    3d:6f:32:46:e8:15:c2:10:28:29:7f:c1:fc:68:7a:
                    17:a8:37:59:43:3b:f9:1d:bb:6d:34:b7:33:a3:cc:
                    26:65:d3:61:6a:d8:ea:7c:da:12:8a:63:ce:1a:56:
                    3b:9a:e3:f0:3d:ab:85:31:5f:fb:1e:0d:e6:39:fe:
                    e3:57:44:51:ac:ff:8a:41:0b:eb:19:27:5a:61:ff:
                    73:42:f1:53:58:f2:50:dc:c6:c0:de:81:49:73:71:
                    ea:8f:63:a2:81:ed:e2:41:56:8e:0f:66:05:0c:9d:
                    e3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1A:F8:E2:69:69:3B:27:0F:16:C6:89:9D:97:B8:67:07:88:D1:D6
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00D963645B9E11EFB859ED5D762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:2b:fa:07:bf:26:69:d8:41:ad:db:9b:10:6e:b3:13:59:70:
         d4:66:85:30:96:38:7a:0f:f9:7c:82:32:f8:e8:fd:08:e0:5a:
         89:48:23:1c:cd:e3:46:52:93:75:10:58:79:7e:8a:95:e5:74:
         d1:29:f8:b9:53:fb:a4:46:74:9b:48:36:fb:c8:90:c7:1c:70:
         6d:3a:50:06:31:e7:97:54:3a:2b:11:44:2e:40:79:e5:46:57:
         f1:ed:c6:71:1d:16:eb:c2:51:26:39:ec:ab:95:14:c8:4c:47:
         0a:80:87:e3:bf:35:47:c4:1d:49:ee:36:bd:83:15:0e:74:9c:
         04:f0:0a:2e:63:0a:da:1f:d4:79:94:63:17:ac:37:d8:5b:7c:
         7c:2c:fc:24:f9:3d:63:7d:73:41:f0:25:ad:30:8d:40:bb:88:
         1b:23:4d:6e:4a:53:81:c7:ef:20:48:c9:88:92:26:7b:8f:f7:
         5a:a9:6c:17:2e:50:59:58:a5:7f:ae:f8:19:e8:01:de:0b:50:
         1a:90:74:a1:5f:43:2f:71:51:27:7e:a4:cf:ee:a8:9c:db:dc:
         85:fe:65:c6:f9:c6:15:5d:f1:31:f8:83:45:7e:62:32:74:bd:
         0f:5c:39:92:9a:36:8e:15:09:d2:c5:39:cd:9e:2f:5b:f0:e9:
         25:9b:85:3c
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAKfIMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjQwODE2MDcwNjAyWhcNMjYwODIxMDcwNjAyWjAYMRYw
FAYDVQQDEw02NmJlZmE1ZC02M2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAr+9e8TOqN5tPf6L8+NHvxShazcy4KMRF4ZAKCOvu7/UC3YQKw2JeNHKO
OzlsW+1/DiZFgX/Fn7e6KySekFYt+bGzafQ+Qf2b6pLx/R2OGX9yGfcfpEOVKC7D
/N5iRb7yREwNczw+91yvZWdS5a3gY2Yjz1CFZj0p8OYp603UuICBz364HBA7azFH
8pIeUiMlOYlkZRE9bzJG6BXCECgpf8H8aHoXqDdZQzv5HbttNLczo8wmZdNhatjq
fNoSimPOGlY7muPwPauFMV/7Hg3mOf7jV0RRrP+KQQvrGSdaYf9zQvFTWPJQ3MbA
3oFJc3Hqj2Oige3iQVaOD2YFDJ3jVwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMYa
+OJpaTsnDxbGiZ2XuGcHiNHWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMEQ5NjM2NDVCOUUxMUVGQjg1OUVENUQ3NjJFOTUxQS5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALce2MA0GCSqGSIb3DQEBCwUA
A4IBAQCJK/oHvyZp2EGt25sQbrMTWXDUZoUwljh6D/l8gjL46P0I4FqJSCMczeNG
UpN1EFh5foqV5XTRKfi5U/ukRnSbSDb7yJDHHHBtOlAGMeeXVDorEUQuQHnlRlfx
7cZxHRbrwlEmOeyrlRTITEcKgIfjvzVHxB1J7ja9gxUOdJwE8AouYwraH9R5lGMX
rDfYW3x8LPwk+T1jfXNB8CWtMI1Au4gbI01uSlOBx+8gSMmIkiZ7j/daqWwXLlBZ
WKV/rvgZ6AHeC1AakHShX0MvcVEnfqTP7qic29yF/mXG+cYVXfEx+INFfmIydL0P
XDmSmjaOFQnSxTnNni9b8Oklm4U8
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:10:17 2024 by rpki-client on console-ams.rpki-client.org