Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51975262585111EE84BDDA5A4AD9E6FC.roa
File:                     51975262585111EE84BDDA5A4AD9E6FC.roa (raw, json)
Hash identifier:          /sfoQRaXiBFL+0ErHp5cE3rBuH9SLiM9Zlnx1fkxKIs=
Subject key identifier:   57:07:5B:D9:85:84:6E:F2:EA:F5:5D:F2:71:EB:DC:35:BF:7A:CC:44
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       3ABA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51975262585111EE84BDDA5A4AD9E6FC.roa
Signing time:             Thu 21 Sep 2023 07:34:38 +0000
ROA not before:           Thu 21 Sep 2023 07:34:35 +0000
ROA not after:            Thu 03 Oct 2024 07:34:35 +0000
asID:                     45996
IP address blocks:        45.194.98.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15034 (0x3aba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 21 07:34:35 2023 GMT
            Not After : Oct  3 07:34:35 2024 GMT
        Subject: CN=650bf20e-18b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:03:9d:b4:e0:27:08:05:f7:94:28:34:d9:e3:
                    02:48:77:da:7c:1c:6c:04:1a:18:6d:4a:b2:f9:a3:
                    a7:ff:06:19:13:34:3a:21:10:3a:f4:5e:35:76:4e:
                    66:00:ee:29:d6:5f:07:1a:c5:d4:e9:69:95:7a:2a:
                    4b:0e:c9:41:42:a2:e0:c6:53:27:4d:3f:59:77:76:
                    0e:2d:96:95:a2:a9:b1:e3:b0:73:21:ce:7b:43:0f:
                    e2:3b:46:63:da:b0:d4:d2:a1:d3:9b:27:f0:78:6d:
                    83:60:18:eb:fc:c8:a4:16:b9:c4:66:e1:0e:73:6b:
                    b2:d8:65:80:86:93:d6:a7:04:bb:2e:47:83:68:9e:
                    8f:73:2e:fc:72:c2:31:4d:c0:67:ec:59:37:89:1b:
                    2e:d1:3d:27:70:ee:d6:56:c9:fc:53:7a:88:2b:74:
                    61:73:b9:c4:ef:fb:61:72:8a:d6:fa:70:8d:44:75:
                    26:81:ac:49:c9:d2:30:c2:88:ba:ba:6d:19:54:29:
                    4a:30:44:45:5a:0e:24:db:ec:2f:6f:82:70:e5:7d:
                    e7:44:cb:a2:67:6f:f2:64:f1:a3:35:a1:88:26:ca:
                    83:54:4f:f0:7f:cd:85:52:bf:5f:e8:0e:ff:35:4f:
                    86:50:51:09:cd:96:28:29:48:3d:e3:0d:88:fd:d5:
                    96:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:07:5B:D9:85:84:6E:F2:EA:F5:5D:F2:71:EB:DC:35:BF:7A:CC:44
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51975262585111EE84BDDA5A4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:8c:4f:6b:dc:0b:cd:d5:13:aa:9d:71:2b:98:7f:b1:cc:25:
         a5:2d:69:a7:7b:9e:80:70:75:78:a2:d3:45:ff:1a:37:98:24:
         76:42:99:cc:91:08:ad:09:67:00:0a:dc:6b:62:c6:dc:aa:85:
         59:f6:29:a4:af:ac:b8:6f:1d:b5:0c:58:ac:96:17:69:1d:8d:
         76:41:9f:6b:37:0d:42:9b:0f:0d:e5:c5:82:18:31:a6:d0:d5:
         69:b6:0e:f8:35:26:66:a6:6c:78:8c:06:62:53:ce:e1:42:89:
         02:f8:91:47:d9:20:46:c5:f6:93:bf:8c:0c:f9:38:c6:c1:88:
         4c:df:98:9e:48:7c:8b:3e:9f:78:d1:00:88:b3:9c:3a:a9:c3:
         4b:a1:78:2f:57:e6:25:9a:f0:9d:9d:8a:69:25:37:0a:49:da:
         1d:5f:cb:4a:15:94:b6:46:90:aa:a4:c4:d2:d6:9c:73:3c:01:
         cd:a7:91:de:1d:53:96:a7:07:22:87:81:1e:b7:60:51:75:71:
         51:1e:c9:03:af:91:57:e2:84:ff:7a:23:e3:97:4d:fb:b7:a8:
         12:6e:0b:cc:05:14:68:1e:23:66:b1:2f:ea:bb:56:34:e7:63:
         59:f5:72:0d:f3:d5:ee:79:b4:f7:74:0b:0a:d4:e7:9a:2f:ce:
         d1:58:8e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:08 2024 by rpki-client on console-fra.rpki-client.org