Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68744D9E7FEF11EEBE59683B4AD9E6FC.roa
File:                     68744D9E7FEF11EEBE59683B4AD9E6FC.roa (raw, json)
Hash identifier:          0EKdKle/Uq4rRIaZQ9RWe835CoJi9yJRJS4wriJlSvU=
Subject key identifier:   2B:07:9F:CB:CF:69:09:80:F5:9A:AA:EF:5B:46:F4:60:24:1B:B4:3B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       466A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68744D9E7FEF11EEBE59683B4AD9E6FC.roa
Signing time:             Fri 10 Nov 2023 17:34:32 +0000
ROA not before:           Fri 10 Nov 2023 17:34:29 +0000
ROA not after:            Tue 04 Jun 2024 17:34:29 +0000
asID:                     137577
IP address blocks:        45.195.51.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18026 (0x466a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 10 17:34:29 2023 GMT
            Not After : Jun  4 17:34:29 2024 GMT
        Subject: CN=654e69a8-4e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:17:3b:a7:9d:ff:26:d2:5b:fb:93:b7:05:90:
                    83:21:cf:a2:d6:f6:86:e2:d3:45:89:4a:f6:af:4d:
                    e6:1b:7b:8d:16:ae:7f:0c:ca:37:d9:41:36:a2:4e:
                    78:5e:33:6f:40:1e:75:91:eb:8a:43:d4:40:94:09:
                    a6:50:b5:33:4c:c4:70:ad:96:eb:d8:fb:48:78:64:
                    44:3e:0d:f4:f2:ee:26:7d:c9:65:6f:e4:05:16:eb:
                    93:56:f4:d5:54:91:96:0e:f1:89:bb:43:57:c4:9d:
                    cf:70:b4:9e:a2:0e:ae:78:2f:a8:c9:1b:81:4f:ae:
                    46:95:c8:66:30:8d:dc:a7:c1:63:c5:e9:99:f6:ef:
                    3e:73:92:aa:56:97:31:d9:9c:4f:bc:d3:3c:63:e4:
                    01:6b:b1:f3:5d:33:e7:13:e8:f6:a5:f0:e4:44:3b:
                    38:ce:fe:d7:da:fb:89:b9:3d:fc:a6:df:ad:0b:7f:
                    a2:a7:39:34:12:0f:07:71:c0:44:2f:81:68:aa:a2:
                    a8:bd:92:01:af:db:3e:75:33:60:4e:db:1b:68:4c:
                    e8:b1:89:19:48:b9:8d:f7:64:51:f6:40:1a:e3:01:
                    d6:73:f5:b4:62:d0:25:68:e7:54:68:ce:60:1a:86:
                    52:d8:af:60:d9:62:cc:bf:e9:6b:6b:1d:3e:f9:52:
                    74:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:07:9F:CB:CF:69:09:80:F5:9A:AA:EF:5B:46:F4:60:24:1B:B4:3B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68744D9E7FEF11EEBE59683B4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:bc:de:e5:8e:4d:f6:d2:74:f7:d5:2b:bc:c3:91:75:64:da:
         5b:91:58:9c:93:65:d2:6e:b5:22:dd:fa:12:a6:a7:f2:0b:b3:
         a8:30:6e:71:2b:5b:90:9d:ec:e5:dd:4d:59:08:e2:0e:77:6b:
         04:82:d9:1d:b2:4d:d3:fb:26:6c:8b:46:42:35:aa:6d:cb:4c:
         2a:a9:b3:43:0a:fb:36:82:d5:5e:31:73:db:40:fa:11:bc:c7:
         08:6d:44:32:a6:4c:ee:e5:74:19:29:a7:fa:85:43:85:75:7d:
         f0:da:61:45:12:bc:ee:74:fd:03:67:c1:b9:60:55:b7:e8:e3:
         7d:05:f0:22:90:ac:58:8b:fa:2b:40:da:78:24:58:ac:11:bc:
         04:3d:35:50:c9:d9:f7:c7:d6:f3:d7:3f:b5:c8:2a:b1:aa:7c:
         fb:a5:89:8d:f4:73:84:b8:56:c8:20:f4:37:c2:38:4a:5d:69:
         07:7d:f1:bd:fe:b3:db:f5:8d:e1:5a:ea:74:fb:a6:b7:ee:d0:
         d5:53:f3:c7:96:b8:05:d5:ad:ca:e6:e1:79:68:90:ea:45:24:
         30:cb:ac:01:e1:dc:53:c8:3b:6c:b1:3e:d0:51:36:a8:f4:3a:
         85:d0:ad:f6:ed:f9:4f:73:d2:c5:c0:ed:03:8c:e2:9b:af:00:
         3e:5e:ba:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:54 2024 by rpki-client on console-ams.rpki-client.org