Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13BB46FA33A411EE8490E6734AD9E6FC.roa
File:                     13BB46FA33A411EE8490E6734AD9E6FC.roa (raw, json)
Hash identifier:          1I8vtmBIzCPYjnuZWdFwOMnE8YQaJhJpPAwa3CYqGcE=
Subject key identifier:   6D:A9:A7:73:F2:CE:DD:53:8B:28:50:14:B1:B3:53:F9:EB:58:F7:1C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       3363
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13BB46FA33A411EE8490E6734AD9E6FC.roa
Signing time:             Sat 05 Aug 2023 15:23:50 +0000
ROA not before:           Sat 05 Aug 2023 15:23:46 +0000
ROA not after:            Fri 24 May 2024 15:23:46 +0000
asID:                     38901
IP address blocks:        45.201.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13155 (0x3363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  5 15:23:46 2023 GMT
            Not After : May 24 15:23:46 2024 GMT
        Subject: CN=64ce6985-b179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:eb:67:37:cd:88:a9:81:66:85:2d:b6:74:
                    69:67:e3:3e:db:6c:fd:7c:f6:ad:46:f2:75:5a:be:
                    9d:34:78:08:28:31:46:54:46:52:1b:f4:f1:70:f2:
                    29:13:19:b1:aa:fb:d2:98:ad:f7:e9:1f:f0:7b:ea:
                    4d:f4:4b:19:9e:55:e9:90:a5:27:23:f2:09:04:70:
                    73:80:3b:70:d8:d7:26:4e:47:6b:fc:89:4c:14:3c:
                    d1:ea:49:86:d6:52:d5:eb:33:81:75:12:5b:92:7b:
                    56:98:a6:6c:8e:0a:42:5e:30:65:02:2e:86:94:e9:
                    17:11:14:6c:da:54:73:80:7e:3e:59:0b:04:bc:93:
                    d6:d2:99:98:22:05:a8:a7:82:e8:7c:8a:ed:e4:b5:
                    10:22:7a:2e:0f:77:90:31:b5:c3:e9:1c:60:25:cf:
                    d3:9f:50:e7:07:e2:ff:93:a2:d4:28:61:e8:8c:7a:
                    0d:d4:77:a1:b3:f2:d8:dc:d8:9c:20:d1:d6:02:ae:
                    ae:f7:07:ed:8a:78:d6:36:5e:c1:74:ae:47:41:8e:
                    4f:74:24:d6:c2:d2:76:f9:b9:d8:ae:6e:38:9b:ed:
                    6e:f5:49:d7:10:9d:b1:b0:dd:cf:0c:9e:5a:ea:0b:
                    0e:3e:b7:1c:7b:4b:5c:5b:f8:85:92:77:73:2a:fc:
                    43:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A9:A7:73:F2:CE:DD:53:8B:28:50:14:B1:B3:53:F9:EB:58:F7:1C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/13BB46FA33A411EE8490E6734AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:6d:c5:4f:91:b5:cc:fd:00:6e:7e:b7:77:97:e3:2b:6c:e9:
         59:16:50:93:14:9e:50:d7:93:44:f6:ae:b7:7a:67:a9:1f:af:
         39:d1:e3:67:9d:85:29:5f:97:ae:99:ff:1c:80:7f:b8:55:b0:
         d9:e9:04:df:85:d4:73:97:5f:8e:fe:25:43:0a:c5:23:d5:85:
         16:0c:c6:99:4d:52:ec:23:a5:09:c6:e6:51:8f:97:4a:67:75:
         87:3b:77:60:02:f1:9b:d1:f0:10:90:ab:54:3a:14:97:a1:a5:
         b5:65:52:b2:3d:18:8b:73:ab:fa:9f:26:33:a8:01:d3:af:68:
         67:fa:92:0b:85:11:db:07:68:f0:40:8c:3b:98:83:a4:25:be:
         05:97:1e:81:49:ae:15:f2:38:16:47:28:62:3e:63:7c:28:f4:
         7d:49:18:85:b2:ef:9f:71:cc:f5:9f:2f:35:a3:f2:1e:51:8d:
         28:88:dd:0c:8a:0b:e1:d5:e6:6e:33:d0:15:1a:b4:cf:8a:f7:
         59:98:d6:e0:08:c5:f2:bc:4c:b0:3f:6b:1e:59:3d:ed:cf:52:
         9b:5c:c4:5d:9e:09:69:28:c6:99:2f:2e:9d:71:07:e4:81:16:
         4c:3c:1c:66:77:5d:71:1a:66:ee:74:ab:a2:9c:b7:5e:54:62:
         5d:c6:ca:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:05 2024 by rpki-client on console-fra.rpki-client.org