Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25528B2A1A3711EE902D8E854AD9E6FC.roa
File:                     25528B2A1A3711EE902D8E854AD9E6FC.roa (raw, json)
Hash identifier:          AMz5eIZuxqhe8Ce5AaOOeVo4oZVYMaUkgBaTqDo4gFk=
Subject key identifier:   7B:43:64:64:3F:35:65:6D:3D:B5:7B:8F:CA:DC:3D:69:99:92:CF:2B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       2E99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25528B2A1A3711EE902D8E854AD9E6FC.roa
Signing time:             Tue 04 Jul 2023 06:51:05 +0000
ROA not before:           Thu 28 Dec 2023 06:51:00 +0000
ROA not after:            Tue 07 May 2024 06:51:00 +0000
asID:                     133929
IP address blocks:        45.200.104.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 06:51:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11929 (0x2e99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 28 06:51:00 2023 GMT
            Not After : May  7 06:51:00 2024 GMT
        Subject: CN=64a3c159-7241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:9f:8e:9e:1d:94:d9:17:56:57:aa:3d:d2:
                    cb:69:47:9b:07:25:58:84:d2:3b:2d:78:50:23:c7:
                    7e:dd:07:3e:25:68:3c:65:e9:53:a4:e0:d5:f8:04:
                    65:37:0f:06:2d:21:60:7f:b4:da:aa:0e:34:e5:72:
                    5c:89:95:7a:a2:1b:3d:3f:4c:10:96:d4:28:47:23:
                    52:10:2b:6f:34:e4:d2:85:5b:f7:ac:5e:f8:e1:be:
                    f1:f6:0d:8e:10:d5:68:e5:03:a9:9c:46:77:35:16:
                    52:08:d6:d1:2c:46:c5:d1:f7:d2:a8:2f:e3:f9:f6:
                    69:13:76:04:92:42:c6:a4:7c:1c:5e:b8:47:3a:cb:
                    ed:59:9e:2e:04:2d:b6:f8:a5:ae:ed:18:3b:43:d8:
                    b6:6e:d2:56:28:1c:17:84:08:21:fc:08:b7:b2:3a:
                    19:20:c6:e4:ec:58:99:91:f5:38:5f:f2:a8:40:08:
                    ab:38:4d:c1:d0:bd:24:52:80:16:0a:a9:dc:43:46:
                    74:3d:31:a0:4b:bb:6c:a9:74:ef:35:1c:01:63:7d:
                    f5:d3:21:25:cf:35:84:e9:23:b0:fb:8d:17:bd:68:
                    c6:f1:46:17:6a:37:47:6f:58:a1:21:6d:9f:6f:38:
                    09:d0:27:e3:00:9a:8e:31:ba:23:5e:3d:31:b2:30:
                    25:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:43:64:64:3F:35:65:6D:3D:B5:7B:8F:CA:DC:3D:69:99:92:CF:2B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25528B2A1A3711EE902D8E854AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.200.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:54:49:48:cb:4a:c3:c7:f3:6a:c8:2b:bb:1d:11:77:d0:53:
         f8:9c:b5:6c:04:57:46:f5:81:3c:72:15:67:d0:c2:12:25:0c:
         3b:67:8b:7f:0b:55:3d:c2:20:9b:bf:de:a7:25:a8:56:85:dd:
         f8:4b:0e:83:d6:22:71:c3:83:a1:db:50:d4:c4:fe:b2:69:db:
         79:d9:dc:a4:0a:aa:36:3b:3d:95:a4:7f:3c:84:fc:82:55:0b:
         d6:55:0a:c9:aa:ff:a1:c3:34:5e:5a:a8:0e:04:3f:b0:0c:fe:
         1a:fb:de:a9:e5:11:a8:f0:78:c2:5d:5c:5b:5f:06:f8:07:37:
         e0:62:73:ce:10:bd:ef:1c:ae:9c:49:21:2d:6b:b4:31:8b:f2:
         58:c4:c4:da:ae:c5:1b:5f:7a:12:dd:fa:55:30:3c:f5:f8:53:
         99:a5:da:f5:ad:59:24:47:03:4f:b6:14:4c:43:56:42:36:7f:
         fb:9b:eb:f0:ae:ea:72:d9:4c:3b:87:d8:f5:3d:c7:81:3f:77:
         c9:de:9d:96:e4:d9:f5:86:0a:d2:5d:e9:70:b7:0e:2e:22:38:
         c8:df:97:28:9e:1e:86:b6:11:32:5e:71:dd:39:b7:ba:81:73:
         34:b9:18:81:dc:dc:c9:20:9c:25:d5:69:42:fe:33:c8:59:ca:
         1e:ff:f4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:06 2024 by rpki-client on console-fra.rpki-client.org