Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13B93D2EA2EE11EE918AD376D25BE465.roa
File:                     13B93D2EA2EE11EE918AD376D25BE465.roa (raw, json)
Hash identifier:          RAMFFQt7d3PGYR6QAaNYCVh6H/hIYB+vJ4E6bhJUeDo=
Subject key identifier:   20:A6:E7:E7:26:D6:27:60:06:0A:05:82:8D:D3:C0:02:CB:B0:1D:35
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       5920
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13B93D2EA2EE11EE918AD376D25BE465.roa
Signing time:             Mon 25 Dec 2023 06:23:11 +0000
ROA not before:           Mon 25 Dec 2023 06:23:08 +0000
ROA not after:            Wed 02 Oct 2024 06:23:08 +0000
asID:                     393294
IP address blocks:        45.199.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22816 (0x5920)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 25 06:23:08 2023 GMT
            Not After : Oct  2 06:23:08 2024 GMT
        Subject: CN=65891fcf-b7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1a:4a:5e:97:27:6c:74:e6:ea:24:1e:54:65:
                    1d:21:04:8e:bf:e5:8f:ac:c5:2c:cd:9b:12:fc:88:
                    5c:ff:a3:1c:3e:ef:fe:ad:89:c8:3f:18:e7:04:62:
                    7b:ce:be:a7:c3:47:a9:43:59:a9:73:3b:bf:51:85:
                    b7:29:f4:a5:21:05:6c:90:61:53:ce:0e:ef:06:0c:
                    71:7d:13:38:48:5d:de:b3:8f:22:f3:17:b0:fe:6f:
                    51:92:94:09:81:dc:a3:8e:d8:05:f6:93:ce:bc:41:
                    74:cc:5d:cf:b6:a8:cf:7d:1a:75:02:e6:d1:bc:21:
                    82:d1:e1:3b:7b:b9:da:9b:57:fb:a4:08:fe:a8:17:
                    63:22:8f:fd:90:1b:0b:46:f4:38:b6:c0:c8:88:d8:
                    12:e5:ea:37:9c:53:81:71:b3:cd:ff:82:60:bc:d5:
                    5b:9f:57:50:45:f6:f0:70:8a:df:02:07:77:d3:db:
                    d4:54:63:7a:c1:20:b3:40:3c:ed:66:ad:66:a9:24:
                    01:b9:39:ea:af:b8:2d:cd:f9:3a:8f:7d:e5:13:0b:
                    46:73:60:20:9e:fb:dd:c6:93:87:db:6e:c9:f1:c0:
                    b5:3a:66:0f:92:85:4d:81:05:40:3a:45:83:54:49:
                    d3:3c:67:fb:11:a3:b5:f4:27:72:ac:38:c3:fc:e6:
                    43:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:A6:E7:E7:26:D6:27:60:06:0A:05:82:8D:D3:C0:02:CB:B0:1D:35
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13B93D2EA2EE11EE918AD376D25BE465.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:9a:de:dc:d3:11:d1:cc:29:4f:41:44:aa:a8:f3:54:b8:b5:
         4e:d2:48:8e:a3:22:70:79:17:e4:60:95:08:6b:13:9f:78:9f:
         e4:88:17:a5:4d:45:2c:2c:21:b6:94:6d:37:e9:98:10:33:32:
         ba:30:35:af:ed:8a:09:8f:8e:87:1d:27:a8:d2:f3:a0:3a:17:
         5b:25:f8:c3:52:31:c1:b4:d5:99:20:24:7b:f0:d4:28:ba:a3:
         44:48:f2:06:37:b2:32:43:2b:30:96:4c:62:ce:19:86:96:d7:
         da:8b:a0:35:16:29:64:15:7a:7e:b0:d8:db:cc:db:6f:11:95:
         3a:fc:67:44:9c:b9:25:fb:7f:3d:c4:54:d2:10:6e:93:4f:29:
         92:22:5c:38:f5:25:20:ca:02:a2:c1:e8:41:c8:87:50:da:19:
         51:22:47:0c:ef:38:a0:e8:be:b5:07:d5:28:4a:68:c3:17:b7:
         97:d3:99:4c:1b:a5:3d:51:e0:32:25:93:1f:62:f5:fc:9a:c2:
         38:c4:6b:ea:00:1e:43:a7:57:dd:d0:52:02:65:28:33:2e:80:
         7d:66:51:7a:49:a3:1b:44:94:c3:21:5a:1d:f0:d1:0b:47:b2:
         e5:87:5d:0d:83:25:c1:8e:13:bc:5e:4b:a5:52:d3:be:9a:42:
         38:06:84:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:49 2024 by rpki-client on console-ams.rpki-client.org