Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7034A346FB8611ED97062D7F4AD9E6FC.roa
File:                     7034A346FB8611ED97062D7F4AD9E6FC.roa (raw, json)
Hash identifier:          fgSJ8kaOs1yF/3qVXtkTGVgRW5lpCa2TKbv3NIg9Dvc=
Subject key identifier:   E1:70:55:D6:E3:37:17:34:D0:30:6F:A1:FB:A3:FE:CD:48:5F:6F:6D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       27C2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7034A346FB8611ED97062D7F4AD9E6FC.roa
Signing time:             Fri 26 May 2023 05:30:35 +0000
ROA not before:           Fri 26 May 2023 05:30:31 +0000
ROA not after:            Sun 30 Jun 2024 05:30:31 +0000
asID:                     984
IP address blocks:        45.205.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10178 (0x27c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 26 05:30:31 2023 GMT
            Not After : Jun 30 05:30:31 2024 GMT
        Subject: CN=647043fa-f928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f2:bd:94:60:be:4e:54:be:af:5a:41:1c:f7:
                    67:cc:d7:d5:82:34:b5:70:57:ce:e4:1a:93:5e:c4:
                    a1:e1:1d:ce:47:21:57:01:3a:e9:02:46:9d:13:fe:
                    16:2f:33:d1:dc:7f:e1:85:d2:db:d0:71:d3:a4:98:
                    20:24:6e:35:42:bf:bd:8a:dc:68:97:ca:61:32:b1:
                    cb:86:89:ac:37:8f:d9:a6:52:5c:85:ad:d7:36:f3:
                    f8:11:1b:31:98:9d:2f:8b:db:28:03:71:b6:a3:d8:
                    9a:02:51:23:fa:23:9f:cb:13:22:a4:38:78:a5:1b:
                    b0:de:53:1f:c5:b1:02:d2:1c:08:61:72:90:2c:e5:
                    6f:18:8d:61:03:b9:68:a6:65:bf:89:aa:f6:fc:54:
                    b6:b3:29:ff:43:24:30:b1:fb:b2:a3:62:ac:ed:a3:
                    b4:20:52:07:02:fd:c8:14:36:50:7f:2b:6f:f9:cd:
                    cb:64:32:6a:7b:2e:3f:b1:3c:11:7b:a3:b2:fa:b9:
                    78:2e:dd:cd:4a:87:d3:70:ae:24:1a:ac:8b:8e:b8:
                    a3:0c:5b:a5:b7:e2:42:69:f6:63:a9:61:c2:17:21:
                    52:99:56:8c:ba:87:24:44:bc:66:af:47:2c:3a:56:
                    f9:a0:b0:03:bb:08:15:58:6b:81:a5:be:e5:a5:1a:
                    f3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:70:55:D6:E3:37:17:34:D0:30:6F:A1:FB:A3:FE:CD:48:5F:6F:6D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7034A346FB8611ED97062D7F4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.205.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         1e:2a:b1:b5:f8:c3:41:c9:23:e7:78:af:60:0c:ab:ca:d1:07:
         be:77:51:5b:06:cb:b6:2e:bf:01:8d:71:90:25:4c:3f:83:1e:
         9e:a5:8b:c8:0e:a1:8c:41:0e:bc:ed:3f:bf:8f:5a:b2:97:06:
         78:9f:ee:e0:b4:5d:e4:a3:25:f4:30:fe:2c:a6:a9:9f:51:a6:
         9c:5f:a5:81:73:3b:f5:67:0e:fa:40:27:98:d9:2a:28:e8:7b:
         c9:ae:9f:da:a5:32:0b:43:b2:69:e0:ce:e2:18:2f:70:4d:b1:
         ab:a3:5d:ae:7f:61:e0:c9:8f:8a:5d:ab:a2:f0:30:07:1c:df:
         bf:7a:a4:4d:e7:d7:c4:0f:36:bd:de:13:ca:7e:8f:1b:1e:83:
         c7:91:53:0c:a2:96:ba:ea:3a:8e:b7:51:51:be:6e:09:01:9c:
         31:d8:e1:ed:d4:20:91:f7:96:21:64:d1:86:b8:89:f3:3e:42:
         1a:7c:c9:dd:ae:c1:54:e1:b4:bd:9c:02:e9:fd:fc:a0:d1:07:
         95:bf:4d:32:c2:65:e9:9c:4d:8f:e8:ef:16:e1:5f:d1:05:b3:
         6d:e3:cf:6e:0d:8a:3b:29:1a:d8:af:79:a5:75:3c:66:46:3a:
         d8:d6:d2:76:53:dc:38:ec:80:54:f8:c0:fd:0e:61:c2:66:a7:
         ac:bb:fb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:04:54 2024 by rpki-client on console-ams.rpki-client.org