Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10E06804F49611EDBC95A4624AD9E6FC.roa
File:                     10E06804F49611EDBC95A4624AD9E6FC.roa (raw, json)
Hash identifier:          rWQHFTnMk9RVCBiMzNQdD2nw4EnntF5Ksg389skG4Aw=
Subject key identifier:   55:9B:A2:54:61:05:20:FB:26:E6:5F:C8:53:3D:96:90:AE:73:8A:48
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       2536
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10E06804F49611EDBC95A4624AD9E6FC.roa
Signing time:             Wed 17 May 2023 09:34:48 +0000
ROA not before:           Wed 17 May 2023 09:34:45 +0000
ROA not after:            Sun 26 May 2024 09:34:45 +0000
asID:                     63199
IP address blocks:        45.196.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9526 (0x2536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 17 09:34:45 2023 GMT
            Not After : May 26 09:34:45 2024 GMT
        Subject: CN=64649fb8-8c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a8:89:e4:b4:6d:3a:ac:d1:26:b1:59:25:7b:
                    b1:fe:15:5b:f9:1a:40:ff:a9:c0:1f:1c:c6:7c:1d:
                    39:5f:9b:c8:29:8c:93:51:a7:88:aa:b8:bd:48:c1:
                    b4:a0:26:8e:76:81:80:72:f8:d7:80:db:c3:b1:5b:
                    0d:ce:22:11:f9:5c:b5:9c:4f:c2:e5:c9:59:60:48:
                    f1:e9:18:12:b3:c0:e7:5c:68:09:f6:82:fd:08:a1:
                    16:57:66:36:e0:59:67:e2:a6:7b:16:d9:93:d9:cc:
                    f4:e2:75:53:70:fa:ba:6f:af:dd:98:04:d4:74:eb:
                    02:fd:93:66:0e:ed:22:04:4c:0d:af:d1:19:86:fa:
                    c3:b6:42:70:b6:16:06:4f:d1:0f:4e:d3:40:b0:4a:
                    df:08:53:40:8f:df:13:3b:8a:76:56:e9:08:72:b2:
                    78:b9:f4:63:77:ee:ba:10:cf:ed:4e:27:fb:3d:59:
                    37:64:8e:fb:70:b5:8d:08:a1:e0:2d:ae:55:d7:f4:
                    21:88:4a:8f:73:be:bb:f1:ba:3e:ee:e0:f8:b1:13:
                    b1:9f:2a:d9:1a:a1:ea:44:7a:f4:d7:ec:3f:25:7e:
                    9a:e5:7c:d5:26:c1:45:6b:b9:fa:58:5b:51:69:47:
                    4b:45:8d:52:8d:56:92:f1:6d:d2:94:2a:92:84:ed:
                    0d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:9B:A2:54:61:05:20:FB:26:E6:5F:C8:53:3D:96:90:AE:73:8A:48
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/10E06804F49611EDBC95A4624AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:27:13:c9:b7:22:0d:d8:94:52:1e:b6:fa:af:cd:0a:cd:69:
         27:9b:18:0c:51:88:53:6d:a9:10:94:ed:b6:a0:3f:13:77:d8:
         be:e9:b8:f8:39:0f:08:20:a6:0d:1f:d4:a1:aa:b3:03:ca:51:
         0b:8b:a5:89:0a:f6:e5:04:c4:54:a8:1d:15:4f:dd:cf:3a:52:
         6c:5a:89:23:f0:09:25:ae:42:2e:a9:14:fd:a5:4f:16:34:e7:
         18:85:33:47:71:1a:d8:fb:4e:bc:5b:7e:9f:f4:9e:85:86:49:
         38:6f:8d:b5:74:a8:c0:e6:17:1a:0a:66:b6:21:90:10:60:92:
         d0:a4:11:2b:83:67:c3:8a:a2:32:e0:ff:0c:34:58:02:d2:4a:
         f9:54:81:48:8a:52:b1:4e:96:04:fd:19:fc:a0:43:38:e4:46:
         a4:45:69:7d:63:b2:6e:26:f5:16:8d:cb:35:40:c9:7d:f9:01:
         0b:e1:70:07:b9:b7:2f:00:c8:2b:23:6a:ca:6f:f9:c1:93:15:
         bc:0f:9c:b9:0e:a3:ff:b1:87:b2:cd:9e:43:9c:67:b3:6a:af:
         d1:be:7b:ea:ad:12:53:b8:08:0e:2f:c8:76:ca:3f:07:40:5d:
         7d:9c:a3:b0:48:a3:57:d3:ea:71:ca:40:95:55:11:fc:de:66:
         c5:a8:20:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:48 2024 by rpki-client on console-ams.rpki-client.org