Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/339777DA08F911EEBB9D4F324AD9E6FC.roa
File:                     339777DA08F911EEBB9D4F324AD9E6FC.roa (raw, json)
Hash identifier:          D8Xf22JHozO8W0fbLzwoqhXfAcPFEPc/8kmATiedHLU=
Subject key identifier:   A8:88:7C:81:50:09:2A:42:28:01:0C:36:90:7A:17:9F:10:C0:33:1D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       2B23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/339777DA08F911EEBB9D4F324AD9E6FC.roa
Signing time:             Mon 12 Jun 2023 08:14:50 +0000
ROA not before:           Mon 12 Jun 2023 08:14:46 +0000
ROA not after:            Sat 25 May 2024 08:14:46 +0000
asID:                     131178
IP address blocks:        45.201.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11043 (0x2b23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 12 08:14:46 2023 GMT
            Not After : May 25 08:14:46 2024 GMT
        Subject: CN=6486d3fa-c52d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:13:9d:fc:1e:df:1b:8e:68:34:15:9e:99:cc:
                    46:ee:d4:d7:63:1d:f8:28:4a:a5:08:a1:fb:3a:a4:
                    72:ad:38:c7:93:74:17:af:b2:ab:19:ef:b0:ec:f1:
                    77:87:0b:8f:81:68:7c:c4:8b:34:dc:4f:08:e0:f9:
                    46:1c:81:e1:c3:ee:ad:77:2f:2a:b5:81:ac:71:ff:
                    99:e2:0a:b5:6e:d7:db:ac:f6:9f:57:a1:47:56:59:
                    c4:a8:e4:cc:7f:4c:51:ab:73:5e:33:71:61:f8:eb:
                    1a:7d:f5:9a:96:58:93:aa:e3:51:27:05:06:64:9d:
                    5a:5e:f7:0d:6e:e4:93:31:bf:52:28:0b:3c:06:60:
                    10:3c:aa:f5:33:1e:eb:dd:54:aa:3b:6f:0e:20:d4:
                    af:80:cd:7b:8d:de:17:8f:a2:7d:04:54:e7:26:a7:
                    3e:71:8e:20:f3:4d:27:78:a3:04:b3:f0:34:cd:6e:
                    ee:8c:39:2c:01:21:ae:73:16:a8:2e:a7:74:85:51:
                    4f:ce:8b:3c:cc:f1:7a:90:65:dd:88:af:4e:41:46:
                    6c:5c:d1:a9:ed:e0:6d:28:8d:3e:a1:bc:40:44:41:
                    b3:35:c0:fa:7c:6b:44:a2:d7:7d:d3:9c:dd:5b:b6:
                    31:db:86:be:12:47:f2:80:c4:b7:a5:c5:f6:d3:ba:
                    75:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:88:7C:81:50:09:2A:42:28:01:0C:36:90:7A:17:9F:10:C0:33:1D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/339777DA08F911EEBB9D4F324AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:f2:11:7f:d9:8a:7a:c3:e6:10:d4:53:35:98:a1:67:f2:f8:
         5c:3c:09:35:81:a2:fc:e2:83:c8:b4:03:c7:ba:aa:f8:8e:f3:
         6a:55:9c:d8:5c:18:35:08:d8:11:d7:77:69:53:53:bb:2b:5c:
         5e:2c:03:a0:8c:c7:6f:2c:9f:b6:0e:a5:4b:41:3b:ad:02:e4:
         20:42:06:84:11:28:2b:48:90:a0:90:69:b1:a0:c2:9f:da:93:
         c8:ec:21:86:23:c5:24:ea:72:85:7e:d1:9e:a7:a9:bc:d8:0c:
         bb:a3:1c:cd:4b:6a:be:4a:08:46:2e:9e:7f:d4:ce:f8:2d:95:
         9a:5e:ff:4a:0b:10:90:e2:53:eb:1d:e5:8b:c8:b0:68:ad:93:
         af:7c:88:82:2a:43:3b:c8:0e:28:3e:68:09:d1:b6:e6:58:4a:
         e4:7c:2c:56:49:27:20:19:ad:8c:5d:49:6a:29:b9:67:76:e1:
         e9:98:20:21:4b:88:8d:1a:a4:ff:e2:cb:60:cd:5e:69:97:43:
         18:61:3a:24:85:c5:38:a2:0a:ea:33:3d:93:ed:3d:2f:d6:74:
         9a:77:6a:f7:78:7e:fa:be:72:11:28:a4:ba:e5:90:cf:ca:8c:
         d5:49:83:52:5a:3d:53:88:10:02:4f:05:6c:44:9f:d3:c7:9a:
         7b:1b:52:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:18:20 2024 by rpki-client on console-ams.rpki-client.org