Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17CC844C08F311EE8FE2FB204AD9E6FC.roa
File:                     17CC844C08F311EE8FE2FB204AD9E6FC.roa (raw, json)
Hash identifier:          RDBOiJQ+YxWgSVnOntggeV/YQvGjhxPnLc4NJTcKAag=
Subject key identifier:   95:8D:39:6C:E4:67:8F:AC:7F:71:9E:9F:EA:AF:23:E7:52:4D:BD:D0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       2AFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17CC844C08F311EE8FE2FB204AD9E6FC.roa
Signing time:             Mon 12 Jun 2023 07:31:06 +0000
ROA not before:           Mon 12 Jun 2023 07:31:03 +0000
ROA not after:            Sat 25 May 2024 07:31:03 +0000
asID:                     131178
IP address blocks:        45.201.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11005 (0x2afd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 12 07:31:03 2023 GMT
            Not After : May 25 07:31:03 2024 GMT
        Subject: CN=6486c9ba-7305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:29:60:28:ee:9b:f0:6c:ff:c2:5d:b1:5e:5b:
                    7d:af:67:0f:ce:b4:1d:83:59:ee:a8:bb:f8:45:85:
                    41:2f:4d:7e:c6:58:07:53:23:ff:2a:fa:0e:1d:99:
                    9e:ba:b9:09:95:43:0b:aa:95:16:c3:86:45:27:86:
                    b6:fa:3f:c2:68:a7:a0:b2:15:5d:52:14:85:6e:1c:
                    25:63:40:d1:9b:8e:08:59:08:65:2c:36:94:0b:12:
                    58:bc:5f:e8:82:67:85:56:c2:70:9c:86:07:76:bc:
                    9b:b2:76:6e:92:ec:82:01:a0:cc:36:53:a7:aa:bd:
                    6d:6b:84:d2:4a:44:c1:cd:9e:0e:29:e8:05:27:1e:
                    9a:b9:dd:d8:4d:82:f6:0e:79:74:94:67:e5:5f:c2:
                    ef:5b:1d:10:1d:fc:5d:74:91:3a:b5:37:ad:cc:f9:
                    9c:b7:72:6c:cd:8d:85:05:53:40:19:5d:ff:e4:7a:
                    fd:b2:b7:0b:f2:2f:d3:ac:5e:d3:89:73:7c:3c:74:
                    7e:56:99:97:aa:59:d6:f1:4f:f9:ef:75:60:3e:3e:
                    0a:ba:ac:b0:32:66:ff:d9:8e:81:c5:d8:d8:04:20:
                    70:33:ac:df:f1:25:7e:c2:68:e5:89:4f:3a:92:d3:
                    77:6c:89:5c:cb:cd:f8:68:f5:4f:23:ab:34:4c:95:
                    c1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8D:39:6C:E4:67:8F:AC:7F:71:9E:9F:EA:AF:23:E7:52:4D:BD:D0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/17CC844C08F311EE8FE2FB204AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:2a:ff:7d:02:0d:ec:19:60:29:10:4c:23:d6:80:34:96:6e:
         8f:ae:7e:9c:7e:59:93:f8:b6:67:32:a8:97:91:09:78:20:23:
         a8:dc:31:bb:97:da:fb:6b:d2:20:a5:b3:0b:6a:15:25:dd:68:
         ad:db:ab:7e:02:6f:25:c2:86:fa:2f:09:e4:51:96:68:76:27:
         f8:09:a4:b2:dd:60:de:06:42:54:76:35:af:b9:e3:aa:6f:27:
         bc:ae:79:1d:4e:0d:03:59:18:fa:82:69:03:18:93:5b:59:76:
         89:d7:40:74:3f:0a:c3:37:33:4e:8d:78:83:47:7d:75:7b:c6:
         9d:4f:48:a0:ee:15:53:ca:2c:af:7a:62:f6:64:e2:ce:8d:34:
         f0:c8:5e:40:29:36:6a:24:44:d6:85:54:c2:28:a5:0e:cf:44:
         1a:5b:e3:87:53:6c:af:d4:c1:d3:90:3c:1a:7b:06:fe:fa:ed:
         83:28:10:7f:d8:69:41:a2:e8:b6:e7:ad:09:51:4d:e9:8c:64:
         25:09:70:fb:b9:ed:23:37:5a:72:61:e5:80:43:65:a4:96:a2:
         87:8d:a5:f5:a3:3f:52:d0:b3:39:56:72:61:14:e7:41:71:f0:
         dc:41:09:ef:f3:47:a1:99:c7:00:8d:bd:f2:38:91:c9:39:0c:
         41:73:09:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:41:19 2024 by rpki-client on console-ams.rpki-client.org