Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22EE082033A311EEB4ED36714AD9E6FC.roa
File:                     22EE082033A311EEB4ED36714AD9E6FC.roa (raw, json)
Hash identifier:          p4X18mxyXYlndvxRQzuQekjL1SH0db+BiLf5mp5e/4E=
Subject key identifier:   78:E7:F7:E5:C0:03:F8:27:3D:1E:D0:AF:E4:C0:F8:2F:45:59:67:04
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       3355
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22EE082033A311EEB4ED36714AD9E6FC.roa
Signing time:             Sat 05 Aug 2023 15:17:05 +0000
ROA not before:           Sat 05 Aug 2023 15:17:01 +0000
ROA not after:            Fri 24 May 2024 15:17:01 +0000
asID:                     38901
IP address blocks:        45.201.212.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13141 (0x3355)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  5 15:17:01 2023 GMT
            Not After : May 24 15:17:01 2024 GMT
        Subject: CN=64ce67f1-a93e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:89:20:2b:d6:a3:9e:99:2d:da:d9:c9:99:a1:
                    d8:09:92:8a:f2:6b:3f:de:ff:2f:76:2b:c0:e7:26:
                    31:e3:a6:a0:12:f8:1e:8a:b6:50:fc:f2:e5:f2:0c:
                    77:c5:5d:0a:e4:14:4c:cc:ca:fd:f7:f2:78:ff:ff:
                    ed:54:3d:e6:d8:3f:94:4f:e4:db:fc:ea:2f:b6:db:
                    ee:d5:89:76:d3:ca:0f:0d:d9:49:77:d2:c5:0c:44:
                    32:2f:30:30:c6:38:27:8c:27:2d:04:4a:27:73:82:
                    f1:e8:59:ad:6b:2a:dd:69:74:81:cd:57:ee:80:0b:
                    9e:de:0d:26:73:d3:b6:51:ef:80:a9:36:6a:bc:1d:
                    d5:45:73:88:e3:6a:29:fe:69:a2:d4:8b:91:fe:a0:
                    25:03:a4:28:08:84:93:dc:63:54:7f:33:84:16:08:
                    63:1a:cc:f2:aa:02:ca:7b:1e:35:67:28:74:29:c0:
                    ee:b4:25:6b:1b:5e:9e:b9:81:1e:44:91:a2:3f:2d:
                    ff:1d:6e:90:b8:1a:04:87:f2:80:c9:0e:aa:66:79:
                    a4:5a:0d:4c:1a:5f:bd:2d:1b:22:6b:3a:af:f1:eb:
                    a3:ba:ac:9d:49:31:44:b0:63:09:ce:43:95:28:bb:
                    3c:14:13:2a:05:bf:4d:4c:9b:a6:86:d7:2a:17:12:
                    39:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E7:F7:E5:C0:03:F8:27:3D:1E:D0:AF:E4:C0:F8:2F:45:59:67:04
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/22EE082033A311EEB4ED36714AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:6d:0f:f9:42:e2:ce:4d:f7:e6:77:a8:48:62:78:58:b5:09:
         41:30:15:18:d9:41:b4:5f:3d:6a:7c:26:33:a8:81:81:1c:72:
         d4:33:6c:be:36:8e:33:d4:95:1e:3c:70:03:f7:74:3e:6b:70:
         30:2d:c5:e3:bf:84:75:8d:62:f9:1d:17:d3:78:49:aa:1b:98:
         2a:7b:fb:f5:f3:9d:06:8e:2c:cd:83:0c:66:07:61:b5:17:ba:
         dd:80:0e:9c:c8:6d:ff:c5:e1:00:b2:62:0b:1c:d9:61:ad:b8:
         c1:dc:76:73:eb:e4:89:22:e3:ee:4a:82:74:13:c1:50:64:cc:
         5c:f1:84:45:3f:24:7b:24:03:23:5b:51:ba:67:79:39:fe:87:
         2e:48:6f:58:0f:e0:73:62:5e:a1:58:cf:f3:ca:de:3e:a5:55:
         69:8d:98:f4:d4:73:15:5f:3a:98:1f:b6:4c:48:0c:74:89:8f:
         22:9c:65:24:10:c2:ea:f2:c1:62:f3:09:0d:2b:a6:5f:94:0c:
         84:49:4a:d4:7e:44:28:a6:81:72:09:a7:ca:2a:18:63:ff:cd:
         82:49:85:54:4b:96:8e:1e:ae:18:3e:66:16:16:e7:8f:97:93:
         87:d0:b8:b6:ef:b9:50:6b:6c:83:b1:11:49:87:df:45:bd:38:
         15:da:d6:f8
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICM1UwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA4MDUxNTE3MDFaFw0yNDA1MjQxNTE3MDFaMBgxFjAU
BgNVBAMTDTY0Y2U2N2YxLWE5M2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5iSAr1qOemS3a2cmZodgJkoryaz/e/y92K8DnJjHjpqAS+B6KtlD88uXy
DHfFXQrkFEzMyv338nj//+1UPebYP5RP5Nv86i+22+7ViXbTyg8N2Ul30sUMRDIv
MDDGOCeMJy0ESidzgvHoWa1rKt1pdIHNV+6AC57eDSZz07ZR74CpNmq8HdVFc4jj
ain+aaLUi5H+oCUDpCgIhJPcY1R/M4QWCGMazPKqAsp7HjVnKHQpwO60JWsbXp65
gR5EkaI/Lf8dbpC4GgSH8oDJDqpmeaRaDUwaX70tGyJrOq/x66O6rJ1JMUSwYwnO
Q5UouzwUEyoFv01Mm6aG1yoXEjl3AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUeOf3
5cAD+Cc9HtCv5MD4L0VZZwQwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzIyRUUwODIwMzNBMzExRUVCNEVEMzY3MTRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtydQwDQYJKoZIhvcNAQELBQAD
ggEBAIBtD/lC4s5N9+Z3qEhieFi1CUEwFRjZQbRfPWp8JjOogYEcctQzbL42jjPU
lR48cAP3dD5rcDAtxeO/hHWNYvkdF9N4SaobmCp7+/XznQaOLM2DDGYHYbUXut2A
DpzIbf/F4QCyYgsc2WGtuMHcdnPr5Iki4+5KgnQTwVBkzFzxhEU/JHskAyNbUbpn
eTn+hy5Ib1gP4HNiXqFYz/PK3j6lVWmNmPTUcxVfOpgftkxIDHSJjyKcZSQQwury
wWLzCQ0rpl+UDIRJStR+RCimgXIJp8oqGGP/zYJJhVRLlo4erhg+ZhYW54+Xk4fQ
uLbvuVBrbIOxEUmH30W9OBXa1vg=
-----END CERTIFICATE-----
Generated at Mon May 6 09:08:05 2024 by rpki-client on console-fra.rpki-client.org