Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/168E62EEA38F11EEABD9B713D25BE465.roa
File:                     168E62EEA38F11EEABD9B713D25BE465.roa (raw, json)
Hash identifier:          wsOsdd3q2vewVorxGLhzpz9gRQWucFf6u60rsiVYt58=
Subject key identifier:   09:01:FC:E2:6F:CF:03:92:B9:06:6A:7A:FA:51:A6:FA:66:EA:11:72
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       5929
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/168E62EEA38F11EEABD9B713D25BE465.roa
Signing time:             Tue 26 Dec 2023 01:35:45 +0000
ROA not before:           Tue 26 Dec 2023 01:35:41 +0000
ROA not after:            Wed 02 Oct 2024 01:35:41 +0000
asID:                     393294
IP address blocks:        45.199.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22825 (0x5929)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 26 01:35:41 2023 GMT
            Not After : Oct  2 01:35:41 2024 GMT
        Subject: CN=658a2df1-cccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9f:67:36:49:06:d3:73:6a:d2:32:c2:79:1d:
                    92:e2:7c:1f:6a:a0:73:d9:40:5b:78:b8:66:6b:36:
                    a3:63:0e:cf:98:c3:89:24:8d:a5:a8:d5:46:0c:d5:
                    9e:88:b2:a3:df:ee:2e:49:dc:e5:e6:e8:3b:8c:0a:
                    d8:31:88:ec:aa:cc:b1:54:6d:41:0a:c8:dd:95:d6:
                    af:8d:f5:a8:35:45:4f:17:63:22:4d:43:24:f0:87:
                    48:07:42:30:d1:e0:b1:5b:28:14:59:45:48:24:18:
                    aa:ea:ce:a7:3d:25:21:5b:71:ce:f3:11:ab:b4:3f:
                    47:b5:45:c3:3d:01:8f:8f:d9:34:a2:7e:e3:04:96:
                    a0:88:50:a1:9a:60:1e:43:ea:95:91:45:4b:7f:3a:
                    9c:49:f3:f4:ac:96:8d:cc:6c:9a:3a:02:28:6a:a4:
                    26:fd:19:8f:93:93:28:57:43:3d:3e:ac:53:a7:14:
                    05:2e:85:57:ef:1e:09:ad:3f:1e:ca:a5:0d:fc:23:
                    5f:fc:7d:38:39:20:64:8e:01:94:92:0a:46:76:49:
                    4f:6c:7b:d3:27:fe:f0:86:54:ca:6f:f2:92:c8:7d:
                    46:a6:6c:8d:08:da:cf:f3:79:ec:df:30:42:09:b0:
                    6f:6a:68:3a:ff:5e:af:6f:f3:ad:29:d4:a6:43:db:
                    2c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:01:FC:E2:6F:CF:03:92:B9:06:6A:7A:FA:51:A6:FA:66:EA:11:72
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/168E62EEA38F11EEABD9B713D25BE465.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:20:1a:d4:46:94:f1:ed:90:71:8b:f2:18:a1:d7:2e:89:c9:
         8b:7a:26:1e:d9:4b:56:b4:60:b5:73:9b:45:17:68:68:08:0f:
         ad:8f:71:16:95:ed:a0:ec:52:8f:fe:d9:45:38:37:dc:f2:82:
         43:be:08:c1:52:7c:6f:c2:b4:53:e7:33:d6:54:4d:7a:67:27:
         ff:4f:1a:63:68:c5:c7:c8:13:55:dd:c3:03:56:6a:25:bf:99:
         44:18:ee:f6:8d:21:5d:b8:dd:37:fc:5e:f1:51:e7:3c:4d:3d:
         cb:2b:88:da:55:d9:b8:fc:eb:ef:c4:31:43:28:42:13:3c:c8:
         f4:04:76:95:30:85:41:f6:aa:6f:0f:01:ae:6e:db:93:07:27:
         a3:79:ff:62:93:4c:73:44:bb:3b:ac:98:7b:28:d3:cd:ef:de:
         28:fe:6c:57:6f:12:dd:5d:8b:1f:9a:bb:db:15:f5:58:ab:49:
         78:45:48:88:6f:d8:42:78:5f:e5:80:6d:ee:73:34:6c:23:13:
         9e:bf:30:e4:9d:63:0b:8b:f3:04:5c:92:ed:9c:23:f1:c8:15:
         e4:46:11:78:0f:c8:44:16:73:d7:42:d2:6e:84:d2:65:cf:99:
         ac:7e:36:71:db:40:bf:a8:b2:46:c3:a1:0a:49:9a:aa:76:c7:
         09:84:b2:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:05 2024 by rpki-client on console-fra.rpki-client.org