Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CCEFC6008F011EEB14331194AD9E6FC.roa
File:                     7CCEFC6008F011EEB14331194AD9E6FC.roa (raw, json)
Hash identifier:          wjOHNzLDupQ5jop2VN4DlkRcLFnvSnK+BoGN8HGPvCA=
Subject key identifier:   D6:92:14:41:4C:FA:70:AB:81:8C:A1:00:6B:DA:66:D9:07:F2:C1:2E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       2ACD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CCEFC6008F011EEB14331194AD9E6FC.roa
Signing time:             Mon 12 Jun 2023 07:12:27 +0000
ROA not before:           Mon 12 Jun 2023 07:12:24 +0000
ROA not after:            Sat 25 May 2024 07:12:24 +0000
asID:                     131178
IP address blocks:        45.201.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10957 (0x2acd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 12 07:12:24 2023 GMT
            Not After : May 25 07:12:24 2024 GMT
        Subject: CN=6486c55b-9536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1d:8d:6b:11:43:50:d4:96:f9:4e:b4:90:a6:
                    58:b0:fa:5e:86:b2:47:29:f6:cb:df:8b:83:08:a7:
                    f8:47:f9:ea:40:2b:e0:f3:d6:3f:40:ab:8b:3d:5d:
                    bb:df:4b:c5:0e:83:c6:72:32:b1:51:9e:72:c3:0a:
                    5b:a7:42:bb:01:33:f3:f6:c6:2c:54:26:22:46:5b:
                    95:0a:8b:6f:e5:f2:7f:26:43:66:5e:b5:2d:f3:8d:
                    09:00:3e:d4:6d:f4:a5:d9:2c:b8:ee:63:4b:a5:7b:
                    f8:12:32:56:e9:04:eb:83:b0:a9:83:e6:c0:06:be:
                    6b:1a:4c:6f:69:e1:6c:f8:b6:f8:7d:51:5c:f4:25:
                    0f:50:68:ff:f6:a4:2b:5c:de:be:b1:6b:f3:08:db:
                    dd:14:59:90:46:c8:68:0a:01:8d:e6:ee:97:f5:3f:
                    e8:72:d6:f2:99:e1:ae:03:ea:b6:5f:da:0e:5b:5e:
                    47:4f:4a:d1:7f:40:43:e9:13:81:42:f4:50:e2:7b:
                    d8:cf:b8:b3:be:16:60:96:cc:d9:20:dc:a3:2d:ce:
                    8d:e5:ea:4b:72:02:0f:cc:d7:c6:0a:49:75:8e:70:
                    02:78:34:8a:ef:6b:55:d3:73:3b:fa:f0:e2:40:a8:
                    a0:04:c3:58:f9:c5:ca:a4:c4:79:b2:4f:64:e0:a5:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:92:14:41:4C:FA:70:AB:81:8C:A1:00:6B:DA:66:D9:07:F2:C1:2E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7CCEFC6008F011EEB14331194AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:bc:f7:98:1c:cb:c5:6d:d6:c2:58:f1:fc:1c:3c:1e:08:5e:
         7f:d8:50:7c:7d:3b:82:f8:8c:62:56:24:54:a7:36:c1:59:a7:
         b4:d2:51:09:72:8a:86:11:64:04:0b:0c:b8:d6:06:d9:25:81:
         ea:a4:af:16:8e:7b:ad:7e:6c:b8:f8:85:e8:2d:7c:cf:a6:09:
         0f:3e:92:1d:aa:f3:0c:db:9f:31:8f:4b:46:75:19:fd:55:c8:
         c7:bd:a3:92:69:6b:47:07:02:65:1e:df:6f:70:64:41:14:51:
         7a:7c:13:e2:1a:31:b1:7f:5e:02:d7:52:1c:80:cc:60:97:8e:
         b7:a7:9d:cd:a8:65:4b:86:59:1a:54:96:b3:d4:b4:33:ec:c4:
         db:11:16:ab:64:3f:b2:7d:8b:b0:b5:16:40:35:0f:fe:c6:20:
         22:ae:f9:05:7b:66:21:6b:ce:0d:5a:ae:b1:49:9c:37:49:e8:
         96:19:5f:f9:ed:39:4e:cd:1f:c1:17:3f:c4:65:8e:46:ec:4f:
         ae:60:51:11:2b:87:c4:58:42:b2:29:4a:e8:5a:0e:54:ea:49:
         43:78:33:79:10:78:8f:02:0a:a7:62:51:ba:68:1d:40:b9:1e:
         2e:13:9d:f8:8a:2c:6a:d8:fd:b7:c5:5d:b2:a9:aa:13:e9:e0:
         37:41:ca:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:18:21 2024 by rpki-client on console-ams.rpki-client.org