Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F5C00D8F0BA11EEB26196C0775412E6.roa
File:                     7F5C00D8F0BA11EEB26196C0775412E6.roa (raw, json)
Hash identifier:          ULbU20ZA2zuK6JpIopkL29KyzcFXBuE/foGnFqaLDlc=
Subject key identifier:   5E:DB:0C:BC:32:6E:20:3F:59:31:09:85:B2:91:0F:44:76:00:A0:9B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       8128
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F5C00D8F0BA11EEB26196C0775412E6.roa
Signing time:             Tue 02 Apr 2024 06:30:29 +0000
ROA not before:           Tue 02 Apr 2024 06:30:25 +0000
ROA not after:            Mon 29 Apr 2024 06:30:25 +0000
asID:                     141883
IP address blocks:        45.207.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 29 Apr 2024 06:30:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33064 (0x8128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr  2 06:30:25 2024 GMT
            Not After : Apr 29 06:30:25 2024 GMT
        Subject: CN=660ba605-5475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ca:11:bd:ea:0d:a8:95:59:8c:fd:51:59:cc:
                    d3:11:7f:7a:8c:3c:95:d0:14:88:dd:4e:7b:17:d5:
                    47:22:fc:8a:f7:21:63:df:fb:4b:7f:97:63:99:9f:
                    b5:80:87:d0:ed:41:38:d1:86:c8:80:c2:7c:40:f1:
                    ee:53:f3:ef:3a:40:c1:77:99:dd:7e:9b:8f:d1:d2:
                    85:1c:73:44:79:2d:68:4b:9d:36:e7:d1:62:ec:c1:
                    9b:8a:13:1b:fe:b8:a0:f6:54:4a:30:58:a7:6f:77:
                    df:0f:bd:fc:fc:72:07:a2:09:ec:c7:ea:81:18:4a:
                    c6:b4:d7:d5:29:87:6f:64:1f:ce:f2:d2:5b:b8:a4:
                    e5:8d:43:cb:e3:e9:11:e9:bc:6c:ea:58:14:05:95:
                    0d:fb:33:62:98:a0:55:0c:dc:41:a4:81:75:5d:d6:
                    66:21:a2:77:9b:f5:ca:61:a0:75:e4:25:0f:17:e7:
                    dc:ed:fe:c6:b3:35:5d:e6:79:4d:36:1d:27:86:35:
                    9c:21:f7:10:67:85:60:7d:f4:ad:f1:9b:86:f7:b8:
                    e6:52:66:c9:d1:b4:a7:11:18:97:ee:fd:ec:0d:af:
                    84:99:0f:a4:28:5e:f9:a8:83:c1:f0:d5:67:45:dc:
                    2b:02:c0:79:20:6a:86:3d:f6:c9:c2:24:48:d9:fe:
                    8a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DB:0C:BC:32:6E:20:3F:59:31:09:85:B2:91:0F:44:76:00:A0:9B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F5C00D8F0BA11EEB26196C0775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:69:ac:5f:0a:30:7f:2b:8b:99:91:63:82:05:f5:ca:05:42:
         c3:5a:76:5e:5c:73:56:5f:a5:e0:87:f8:70:99:38:7a:65:fd:
         98:f1:a3:a9:4d:15:0e:75:83:85:8a:fc:8a:d7:55:8e:fd:7b:
         72:39:18:e8:fc:df:fd:0c:5e:df:a7:4f:74:cd:ae:6d:ff:b1:
         4a:b1:3b:39:54:22:9a:87:91:39:53:bf:8e:63:25:a5:e1:6d:
         3f:c8:f9:71:2c:db:a2:a0:c7:7b:62:94:7b:37:4d:5d:90:49:
         51:29:80:a7:c3:db:52:90:b0:84:f6:50:36:6e:37:af:c2:75:
         eb:a9:5e:bb:8b:9f:df:78:c3:8f:ed:66:a3:5f:0c:70:5a:1a:
         f1:40:24:9a:c1:bf:38:74:77:85:22:9a:6b:19:9a:a8:4d:18:
         fb:37:fc:71:af:f9:55:5f:19:36:2f:b9:b7:8b:f5:d3:03:22:
         a6:67:f5:83:17:2b:a4:f1:19:0a:a1:99:80:5e:60:b4:d2:f0:
         12:8d:4a:6f:93:1e:29:b9:e2:31:f8:51:01:01:ca:39:5f:ec:
         82:3f:d1:d9:87:71:4f:af:cb:d8:06:85:db:bf:e9:7e:4a:50:
         c0:fe:68:74:92:70:58:17:14:57:8d:16:5c:65:c0:22:bb:33:
         78:eb:6b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 29 05:25:37 2024 by rpki-client on console-ams.rpki-client.org