Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16561F1447E111EF8E423E97762E951A.roa
File:                     16561F1447E111EF8E423E97762E951A.roa (raw, json)
Hash identifier:          0pOWEEktURFRo79dwXKE2FF1GWOLniiQO0oTzUEP0A4=
Subject key identifier:   5C:0A:EB:EA:3A:CE:3A:6B:10:95:8A:B2:F8:2F:AD:E1:23:68:DA:A0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       9E1D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16561F1447E111EF8E423E97762E951A.roa
Signing time:             Mon 22 Jul 2024 04:15:54 +0000
ROA not before:           Mon 22 Jul 2024 04:15:51 +0000
ROA not after:            Wed 06 Aug 2025 04:15:51 +0000
asID:                     60446
IP address blocks:        45.195.77.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Sep 2024 00:16:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40477 (0x9e1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 22 04:15:51 2024 GMT
            Not After : Aug  6 04:15:51 2025 GMT
        Subject: CN=669ddcfa-3f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f6:39:78:98:70:25:10:32:db:a6:82:f9:af:
                    c7:ea:fc:93:96:6f:58:97:9a:51:4d:bf:c0:a0:41:
                    44:70:4f:92:37:cc:8c:02:61:dd:b2:c0:90:dc:95:
                    22:62:dc:b9:f5:23:f6:07:2f:dd:80:53:02:2e:1c:
                    a2:9f:93:b7:83:5d:f2:20:1d:cb:5a:25:17:04:20:
                    d8:19:9a:2c:1d:2a:cc:b5:35:44:7d:1a:eb:42:be:
                    03:ef:b2:ab:b8:81:0b:3b:b5:e9:1f:74:4e:34:f2:
                    dc:8e:03:ac:e4:8a:9d:94:4e:a6:5c:4e:9a:d2:05:
                    ba:56:dc:54:e1:5f:53:ff:08:fd:40:c6:c5:9d:0d:
                    7e:e2:64:09:eb:e8:79:6d:4e:59:3a:45:49:b3:29:
                    ef:03:e1:2f:72:d6:24:5c:c7:bc:e5:13:6a:5d:23:
                    c7:f7:42:ac:ef:28:f8:16:52:ea:0d:45:82:cc:94:
                    4c:3d:42:ab:f1:e5:a6:e8:e5:01:4a:19:c0:e4:1f:
                    ab:f2:0e:9b:05:3b:3d:a9:37:e5:6c:46:37:41:2d:
                    a9:98:e0:41:06:66:05:bd:21:57:c0:aa:e9:27:de:
                    be:38:58:bd:bc:6b:c8:13:67:cc:fb:2d:3d:76:fe:
                    83:0d:55:93:2b:4f:06:b9:ef:20:90:e5:b2:3f:2c:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:0A:EB:EA:3A:CE:3A:6B:10:95:8A:B2:F8:2F:AD:E1:23:68:DA:A0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16561F1447E111EF8E423E97762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:0f:50:c4:13:3a:53:45:4e:0c:71:50:98:d3:73:f3:0d:dd:
         a5:a9:84:da:b3:b4:c8:ff:93:f8:2b:c0:7c:40:5e:01:74:81:
         5c:b8:8a:4b:dd:a1:21:d7:66:e5:27:a9:8b:c7:ce:65:8c:47:
         3a:0e:4a:a8:c9:1a:90:54:bd:ec:23:b1:f0:85:67:81:e3:c7:
         f9:1c:f6:b7:53:3c:07:0b:c9:6e:43:c2:65:1c:84:b7:61:78:
         8c:8b:e4:8d:18:9f:6d:4b:ee:22:bd:1e:8c:59:93:8e:98:79:
         3a:c6:76:20:7d:cf:7f:eb:3d:6b:67:d6:cf:16:d9:2d:25:d3:
         2a:d9:47:95:34:7a:ae:1c:10:31:59:1c:4d:67:7f:a0:bd:a5:
         58:71:5a:3e:b8:4e:82:07:e7:df:01:c3:12:03:26:90:4e:7c:
         d4:e3:b7:b7:41:62:06:81:b6:a3:0a:16:f0:8c:0f:e0:c6:29:
         63:df:10:8e:9c:df:90:cd:72:26:ae:5b:b7:82:3e:81:1c:23:
         31:bc:c0:d3:24:ec:da:bd:56:93:d3:dc:a0:e3:25:c5:8d:77:
         28:dd:96:30:15:dc:cc:7a:25:70:c2:f9:5d:a6:c1:7b:38:69:
         93:51:e0:10:e2:25:7b:1b:31:52:d5:99:05:e7:d3:9c:9a:68:
         ab:6b:26:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 11:11:55 2024 by rpki-client on console-ams.rpki-client.org