Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39A9A786417C11EEAD8DBF134AD9E6FC.roa
File:                     39A9A786417C11EEAD8DBF134AD9E6FC.roa (raw, json)
Hash identifier:          oximTYMeeAzeZRjI6VMpR7CRFco2MQQQPEwONJU1m48=
Subject key identifier:   6F:C1:E2:02:D8:FF:1C:9D:50:FA:52:9D:63:58:FF:30:00:4B:8F:BA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       36CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39A9A786417C11EEAD8DBF134AD9E6FC.roa
Signing time:             Wed 23 Aug 2023 06:13:49 +0000
ROA not before:           Wed 23 Aug 2023 06:13:46 +0000
ROA not after:            Sat 21 Sep 2024 06:13:46 +0000
asID:                     147019
IP address blocks:        45.194.57.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14031 (0x36cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 23 06:13:46 2023 GMT
            Not After : Sep 21 06:13:46 2024 GMT
        Subject: CN=64e5a39d-86e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:f8:19:10:c1:79:79:57:d8:ea:a8:e7:a2:
                    82:d2:1b:a0:45:d9:50:b1:99:55:c3:72:b4:8e:b0:
                    b6:88:70:c8:a3:19:ac:b1:2e:9b:cd:f8:a4:a6:39:
                    0e:e5:45:6b:a2:12:9e:99:80:02:d3:ca:98:1b:ff:
                    50:91:8a:90:81:c4:7a:b8:99:07:e9:16:27:ee:58:
                    47:5f:54:1f:1d:4d:2b:c0:47:41:50:d9:a1:03:da:
                    f2:1e:c3:a7:97:06:e8:9a:40:83:ae:51:f7:18:99:
                    7e:04:7c:8e:ac:29:df:df:1f:8e:f3:4a:bc:e9:d3:
                    2e:de:cb:cd:70:26:31:f6:2f:5c:f3:97:16:fc:e9:
                    45:61:34:1e:d3:ce:6a:0c:ab:73:ac:61:e7:7e:fb:
                    9a:93:e0:95:82:73:43:3f:94:27:0f:c1:a8:06:e3:
                    51:34:1b:bc:fa:bc:49:6a:2e:51:30:09:8c:c3:71:
                    ff:df:45:71:2e:5d:64:3d:c1:82:7a:60:53:0c:e2:
                    8f:8a:a0:fc:ed:34:01:33:90:22:1a:fd:0d:24:c1:
                    0d:9c:94:f6:b9:37:ac:55:73:ea:ae:19:d1:31:11:
                    c2:da:ab:98:d6:44:8d:2f:ab:06:48:04:b0:71:7b:
                    fb:c2:e4:b9:13:66:6c:97:f6:2d:30:cd:09:37:db:
                    66:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C1:E2:02:D8:FF:1C:9D:50:FA:52:9D:63:58:FF:30:00:4B:8F:BA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39A9A786417C11EEAD8DBF134AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:0c:83:aa:27:b5:5f:0e:89:3e:6c:55:1e:b4:4d:05:6b:fa:
         66:2e:a5:38:a3:b1:bd:3a:fa:d3:01:da:c8:0f:97:aa:1d:96:
         3a:ff:34:ca:57:02:b4:a8:21:83:8c:dd:f8:35:e0:5d:b4:cf:
         7e:82:06:28:9e:19:9e:6e:41:0d:af:a4:ab:89:cd:9b:b1:43:
         34:1d:5b:58:54:f0:19:1f:53:26:35:44:08:3b:fc:41:64:89:
         c4:73:b0:57:ea:58:9d:16:c8:d8:52:66:1b:ae:5e:7d:81:39:
         00:5e:59:48:fa:ce:53:56:f1:a9:c8:33:6e:28:7e:55:6f:66:
         08:fb:bb:c7:b2:d0:c0:cc:6e:ce:6c:25:40:5d:ae:da:7f:ce:
         ef:a1:a7:c3:a8:42:b2:02:a1:18:33:b7:b1:7f:a3:0c:be:31:
         cd:7c:5f:34:4e:93:74:f0:56:d7:00:24:68:6f:50:40:b4:33:
         55:52:a1:5c:72:06:9b:d4:31:10:4a:33:dd:f4:ba:b1:64:54:
         1e:3b:8f:7a:55:20:50:84:c9:a0:0a:13:b2:7f:08:e2:0f:bb:
         39:97:9f:8a:47:41:47:bd:37:aa:b7:97:27:0a:39:3f:1a:62:
         e0:08:72:05:91:1e:71:5a:38:d1:2d:c9:64:b8:ac:63:53:62:
         3b:31:fd:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:07 2024 by rpki-client on console-fra.rpki-client.org