Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A6008B2B80511EE857C7CA6775412E6.roa
File:                     0A6008B2B80511EE857C7CA6775412E6.roa (raw, json)
Hash identifier:          /Vsv5LcH/Ze4gr6+4okR5AewHPoQanO8lwzLLYzBy1w=
Subject key identifier:   7D:36:AA:B0:DA:82:9C:20:86:3A:B2:53:BF:E9:23:19:DD:40:97:EF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       6428
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A6008B2B80511EE857C7CA6775412E6.roa
Signing time:             Sun 21 Jan 2024 02:30:28 +0000
ROA not before:           Sun 21 Jan 2024 02:30:25 +0000
ROA not after:            Thu 08 Aug 2024 02:30:25 +0000
asID:                     133861
IP address blocks:        45.207.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25640 (0x6428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jan 21 02:30:25 2024 GMT
            Not After : Aug  8 02:30:25 2024 GMT
        Subject: CN=65ac81c4-50f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4b:b7:c1:56:d4:f0:6b:0d:6f:02:ac:bc:a2:
                    0b:ad:93:02:20:bd:68:32:8b:4d:8f:fd:a1:c8:b3:
                    fa:15:c7:7a:79:0d:4d:4a:88:c1:6c:fa:19:87:c5:
                    43:5d:82:1c:b2:cc:83:9b:18:86:55:7a:17:a8:83:
                    19:44:e8:39:8f:ae:b2:f4:1c:10:5b:a0:d4:97:23:
                    b1:7e:46:a1:3c:23:29:93:3e:89:80:9c:dd:ba:5b:
                    42:20:f2:89:84:21:b9:d2:ca:a0:87:8b:03:74:59:
                    5c:12:4f:ed:fa:22:32:bd:37:69:9f:68:d5:67:ba:
                    2d:f8:24:3b:46:93:c8:55:3c:c6:bb:e3:c7:ea:00:
                    cf:d8:ba:cf:61:e1:62:0d:8d:5a:e4:59:b6:8e:b4:
                    ad:f7:40:03:ae:23:43:09:53:4b:71:90:b0:2e:83:
                    e3:61:03:3b:80:80:03:2c:04:6d:29:57:bb:6e:24:
                    25:43:ce:37:02:27:38:f2:70:f5:9d:8a:09:de:32:
                    e5:78:7a:d2:bb:97:46:5e:b5:82:85:f4:53:27:cb:
                    3f:c6:55:66:b8:47:54:f2:f8:a8:43:96:87:ec:82:
                    bd:c4:2c:51:d2:6c:79:87:20:18:06:ec:29:8a:93:
                    9c:23:4d:ff:e7:ed:f1:f0:0c:fc:58:a4:47:1b:8f:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:36:AA:B0:DA:82:9C:20:86:3A:B2:53:BF:E9:23:19:DD:40:97:EF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A6008B2B80511EE857C7CA6775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:05:f6:20:1e:f2:88:68:e3:59:7a:f7:9d:10:fe:ac:4f:26:
         ca:3b:e8:e1:5e:f5:f8:36:c4:5c:cc:98:ec:3c:d1:85:27:d9:
         b1:bd:c8:be:8e:01:bf:37:b8:9d:e0:1c:8e:75:8e:36:e9:fe:
         b4:62:f2:76:3e:c9:6b:7c:a8:04:fd:40:86:d0:30:ff:a6:46:
         40:80:dc:6b:a5:03:06:30:0d:1d:7d:4d:09:a6:59:f2:9f:00:
         39:b0:43:3b:c6:01:36:06:88:27:2e:59:54:01:dc:76:87:41:
         71:cb:ad:db:84:3d:aa:fa:2e:06:78:8d:de:ce:60:f0:09:48:
         4d:8d:c9:37:6b:e8:95:93:69:b0:11:3c:5b:8f:d9:cd:43:4e:
         e3:a0:5e:ea:94:6d:d6:3a:39:0a:64:77:3a:da:48:15:28:0a:
         5f:dc:e6:4d:95:8e:61:8f:7b:cd:95:a4:52:10:0e:bf:4b:5a:
         18:18:bf:bd:d7:5c:94:5b:78:03:d8:99:78:00:8b:b6:55:97:
         3f:f0:c2:ae:a9:d3:5b:fe:fc:24:be:2c:ff:a8:02:1b:e5:3c:
         3b:1b:e8:9f:5b:ac:e7:6d:f7:21:a7:eb:00:70:b2:e7:46:73:
         80:7c:f2:c3:29:ef:46:6d:89:48:40:67:17:7d:ae:1c:97:eb:
         d6:73:7d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:04 2024 by rpki-client on console-fra.rpki-client.org