Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F4977EE08FB11EE930819394AD9E6FC.roa
File:                     7F4977EE08FB11EE930819394AD9E6FC.roa (raw, json)
Hash identifier:          iqbMe953DyvT5mmEtiupxacm4iurj++DHvIjHhrMPbk=
Subject key identifier:   10:00:53:95:22:D3:20:58:1D:77:BF:75:5E:8D:6C:70:30:C7:D2:C2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       2B4B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F4977EE08FB11EE930819394AD9E6FC.roa
Signing time:             Mon 12 Jun 2023 08:31:16 +0000
ROA not before:           Mon 12 Jun 2023 08:31:12 +0000
ROA not after:            Sat 25 May 2024 08:31:12 +0000
asID:                     131178
IP address blocks:        45.201.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11083 (0x2b4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 12 08:31:12 2023 GMT
            Not After : May 25 08:31:12 2024 GMT
        Subject: CN=6486d7d4-f2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:22:0e:99:ed:90:2c:0c:48:6e:2d:fb:e2:f8:
                    27:13:6c:2a:c2:06:4b:51:00:5c:80:d4:27:7d:6d:
                    ca:20:69:97:01:16:8f:1a:e8:6a:7c:07:d4:a9:87:
                    2c:4c:4a:8b:05:bd:09:3e:1d:08:44:39:4e:6b:a6:
                    2b:b8:e7:af:87:84:d0:fb:5c:d1:39:55:ee:79:78:
                    45:7f:14:0f:19:d9:0e:57:71:52:d5:21:d5:da:b9:
                    31:13:c7:90:6c:3d:24:6d:4e:4f:00:fa:15:16:67:
                    fb:cd:fc:a7:f9:0f:ed:ed:34:76:c6:e5:bf:6f:50:
                    7c:c0:0d:17:8b:45:cb:d8:df:89:15:ca:c4:d4:7d:
                    64:66:a3:4c:01:3d:92:43:26:6e:27:b8:44:6c:1f:
                    f8:e3:96:c4:f5:13:f8:b9:ca:1d:f3:7b:d4:f9:79:
                    6e:d7:c7:62:de:52:bf:19:96:4c:07:03:b9:62:0a:
                    f9:f3:fd:dc:31:8e:15:d0:f9:c8:14:4e:87:2f:c4:
                    b6:80:cc:c5:f7:dc:cb:0d:10:bc:44:1f:7f:91:72:
                    18:e6:30:9d:d5:98:2d:2a:ad:71:94:3a:b5:88:b0:
                    27:8c:39:84:5c:26:66:0f:81:b0:19:38:46:8f:02:
                    32:d4:dd:d0:d5:35:e7:44:6e:e3:94:14:84:ac:45:
                    75:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:00:53:95:22:D3:20:58:1D:77:BF:75:5E:8D:6C:70:30:C7:D2:C2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F4977EE08FB11EE930819394AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:b0:75:53:35:0c:5a:d0:7b:c6:cf:32:e4:f9:bc:94:ef:cd:
         f2:28:7c:f9:69:61:25:f9:f1:c4:c9:9a:5f:6e:c7:e8:eb:ce:
         82:9d:9e:8e:65:ea:2b:3a:5a:6b:75:f2:ce:41:59:2a:05:46:
         b7:24:96:12:74:f2:30:27:67:3b:60:47:c6:da:ee:49:ef:af:
         15:30:9d:69:60:2a:05:d0:e9:e9:40:fb:58:39:93:fb:22:4f:
         8a:92:36:3f:d0:27:6e:3b:cf:fb:34:52:53:b5:40:5e:fc:f6:
         1c:a9:5c:69:32:45:24:ac:ff:0c:4f:0a:43:74:64:4e:54:27:
         90:bc:b5:73:11:fe:27:e1:2d:53:2e:7c:3e:30:de:9c:ca:bc:
         ee:07:77:dd:3b:20:21:06:86:c0:d9:1c:c9:bc:d5:74:a1:b7:
         d3:75:44:ed:70:ab:c9:5b:9e:10:cf:9a:09:61:c3:81:3f:ea:
         a1:b5:5e:f2:3e:c9:b0:f2:5c:b5:55:99:b0:b5:80:79:10:0d:
         fa:41:74:b8:88:f4:83:7c:9a:16:84:18:61:87:0e:07:1f:4c:
         6f:56:85:48:1d:7f:d0:e1:d4:c4:bf:23:86:81:d9:c9:d9:fe:
         91:de:f8:8c:83:d4:4a:7a:f7:4e:1b:61:54:69:f5:64:7e:72:
         44:5b:02:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:42:54 2024 by rpki-client on console-fra.rpki-client.org