Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63F03A0E417D11EEAB779B174AD9E6FC.roa
File:                     63F03A0E417D11EEAB779B174AD9E6FC.roa (raw, json)
Hash identifier:          30A7wCqxVQ1glfuFvu67zCWQObJM5zR3SLUgESwMLoQ=
Subject key identifier:   28:A9:FA:85:2F:B5:E8:E5:CE:70:ED:69:6A:0C:E0:AB:A6:BF:E6:34
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       36DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63F03A0E417D11EEAB779B174AD9E6FC.roa
Signing time:             Wed 23 Aug 2023 06:22:10 +0000
ROA not before:           Wed 23 Aug 2023 06:22:07 +0000
ROA not after:            Sat 21 Sep 2024 06:22:07 +0000
asID:                     147019
IP address blocks:        45.194.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14045 (0x36dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 23 06:22:07 2023 GMT
            Not After : Sep 21 06:22:07 2024 GMT
        Subject: CN=64e5a592-f760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:89:1b:e9:cc:6b:36:d1:a5:f0:3a:d1:75:30:
                    06:80:33:0e:db:d9:9b:5f:c9:56:6b:de:c8:e4:b1:
                    ac:5c:56:72:d1:ab:b1:b3:44:d5:ab:46:df:88:c8:
                    ac:b1:a7:66:74:7e:c9:c5:09:09:98:c3:f5:72:03:
                    71:d7:31:71:c5:8c:49:12:f1:1a:2a:ad:4f:7a:85:
                    55:27:53:5a:7c:35:20:79:79:51:85:10:05:ad:51:
                    50:58:f7:cd:07:34:2d:5a:52:bf:98:2f:3a:14:a0:
                    03:3f:99:60:90:40:93:a5:e7:44:d0:7b:15:b0:e2:
                    5f:6b:52:e1:01:c8:19:de:b2:0b:ea:13:46:2a:9e:
                    df:21:c3:9a:7a:21:47:eb:3f:f6:26:7a:68:84:91:
                    d5:af:8a:5c:d1:13:a6:bd:74:4a:20:1a:a2:01:29:
                    db:86:4e:eb:e9:cc:02:7d:bb:73:a6:cf:e6:d6:c1:
                    78:44:9c:d9:52:db:dc:2a:b4:04:64:c6:3c:91:19:
                    a9:07:95:d8:39:b3:db:18:dc:03:7a:41:59:3c:19:
                    a9:4e:a7:c2:11:82:9b:ae:e7:b4:53:35:81:16:ac:
                    52:c3:0c:bd:b3:9d:c4:3f:fe:69:13:74:f6:6f:6a:
                    62:df:e7:c0:62:9b:3f:74:81:67:35:a1:e8:1b:ce:
                    b5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A9:FA:85:2F:B5:E8:E5:CE:70:ED:69:6A:0C:E0:AB:A6:BF:E6:34
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/63F03A0E417D11EEAB779B174AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:2b:39:0e:b6:ad:bc:eb:86:20:8d:c2:3e:e9:cf:af:7f:56:
         09:f3:f8:11:41:2e:b0:b3:0b:fb:28:6b:ea:c7:f5:88:c6:0e:
         8e:6d:a5:db:f0:e9:4b:b4:9e:99:02:0d:d6:76:72:17:f4:84:
         e4:45:b8:e5:8d:47:8e:4e:7e:ad:19:2e:df:71:6b:72:3f:ae:
         47:0f:46:48:b2:58:b3:12:60:63:2d:d1:30:d5:b2:5e:d9:9e:
         32:ec:2b:cc:44:8d:2c:26:52:3e:ba:57:0d:ee:4e:36:db:64:
         6b:31:07:a5:63:47:a7:9d:96:59:73:c4:82:a0:65:55:e4:f9:
         11:42:e9:05:e3:e7:98:22:98:20:e2:5d:d7:49:ef:9a:18:7a:
         96:26:1e:05:76:42:89:47:bc:05:8e:17:05:2b:0f:0f:8e:dc:
         a2:ac:b6:90:f2:28:3b:d7:fa:0e:38:d7:e4:f3:72:5b:57:c2:
         09:7d:da:41:08:ee:71:d8:bf:dc:ec:5b:67:75:78:04:d3:e2:
         7d:96:10:34:e8:d3:0a:70:24:54:9c:61:0d:ad:8f:14:70:dd:
         e0:ff:c1:3d:e2:c9:fd:b8:aa:4c:14:2e:01:a1:80:a6:9d:da:
         8f:44:d2:05:fb:b2:e0:af:ce:a8:8c:c4:e3:71:8a:18:07:e5:
         3f:30:38:d2
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICNt0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
OEYyRDBBUjExMC8GA1UEBRMoNzk3RDg4RDgxM0UyMEZGRjk4MkNDNzQxOUU5NjlC
QUVBNkJGRDY5QjAeFw0yMzA4MjMwNjIyMDdaFw0yNDA5MjEwNjIyMDdaMBgxFjAU
BgNVBAMTDTY0ZTVhNTkyLWY3NjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPiRvpzGs20aXwOtF1MAaAMw7b2ZtfyVZr3sjksaxcVnLRq7GzRNWrRt+I
yKyxp2Z0fsnFCQmYw/VyA3HXMXHFjEkS8RoqrU96hVUnU1p8NSB5eVGFEAWtUVBY
980HNC1aUr+YLzoUoAM/mWCQQJOl50TQexWw4l9rUuEByBnesgvqE0Yqnt8hw5p6
IUfrP/YmemiEkdWvilzRE6a9dEogGqIBKduGTuvpzAJ9u3Omz+bWwXhEnNlS29wq
tARkxjyRGakHldg5s9sY3AN6QVk8GalOp8IRgpuu57RTNYEWrFLDDL2zncQ//mkT
dPZvamLf58Bimz90gWc1oegbzrVXAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUKKn6
hS+16OXOcO1pagzgq6a/5jQwHwYDVR0jBBgwFoAUeX2I2BPiD/+YLMdBnpabrqa/
1pswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVBMjI4L2VYMkky
QlBpRF8tWUxNZEJucGFicnFhXzFwcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2VYMkkyQlBpRF8tWUxNZEJucGFicnFhXzFwcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjhGMkQwLzkyRjg2RTFDNkUwNTExRThBMUI1ODU0QkY4QUVB
MjI4LzYzRjAzQTBFNDE3RDExRUVBQjc3OUIxNzRBRDlFNkZDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtwjowDQYJKoZIhvcNAQELBQAD
ggEBAHsrOQ62rbzrhiCNwj7pz69/Vgnz+BFBLrCzC/soa+rH9YjGDo5tpdvw6Uu0
npkCDdZ2chf0hORFuOWNR45Ofq0ZLt9xa3I/rkcPRkiyWLMSYGMt0TDVsl7ZnjLs
K8xEjSwmUj66Vw3uTjbbZGsxB6VjR6edlllzxIKgZVXk+RFC6QXj55gimCDiXddJ
75oYepYmHgV2QolHvAWOFwUrDw+O3KKstpDyKDvX+g441+TzcltXwgl92kEI7nHY
v9zsW2d1eATT4n2WEDTo0wpwJFScYQ2tjxRw3eD/wT3iyf24qkwULgGhgKad2o9E
0gX7suCvzqiMxONxihgH5T8wONI=
-----END CERTIFICATE-----
Generated at Mon May 6 08:04:53 2024 by rpki-client on console-ams.rpki-client.org