Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D4A9EF808F211EEB079521F4AD9E6FC.roa
File:                     8D4A9EF808F211EEB079521F4AD9E6FC.roa (raw, json)
Hash identifier:          +jzlEl29i439lntnTIJATaFRmrxiDVawEE7RZL2S9gQ=
Subject key identifier:   2E:6C:79:59:EF:1A:D5:8F:3D:33:9C:31:AF:19:3F:2D:93:AC:9F:84
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       2AF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D4A9EF808F211EEB079521F4AD9E6FC.roa
Signing time:             Mon 12 Jun 2023 07:27:14 +0000
ROA not before:           Mon 12 Jun 2023 07:27:10 +0000
ROA not after:            Sat 25 May 2024 07:27:10 +0000
asID:                     131178
IP address blocks:        45.201.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10995 (0x2af3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jun 12 07:27:10 2023 GMT
            Not After : May 25 07:27:10 2024 GMT
        Subject: CN=6486c8d2-fbae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:59:58:68:fc:a9:ec:d2:7f:70:1d:c3:2b:8b:
                    9d:5a:09:a1:68:84:69:2f:2c:cb:ca:0d:4c:32:8b:
                    b5:34:9b:c6:58:e5:82:8b:01:e4:cf:62:16:00:64:
                    b9:1c:41:86:1a:b6:3b:6d:74:fc:5d:76:ae:9e:d8:
                    94:d0:d0:60:8b:8f:c1:50:ee:3d:1c:ba:0b:48:7f:
                    a9:de:1e:7c:cd:e1:54:ad:59:cd:a8:bf:5a:59:e9:
                    18:48:8b:14:27:1b:bc:d5:4e:6a:40:b5:bb:93:02:
                    af:c2:b0:e9:15:b9:01:08:34:d6:6c:56:49:7d:79:
                    c1:34:83:d8:e4:56:7c:e1:5a:82:83:aa:88:ac:c5:
                    6a:63:9d:02:c6:74:32:f1:dc:fc:86:01:f1:6f:4b:
                    de:c6:13:da:ee:c9:bb:80:e9:ec:31:bb:c1:5e:53:
                    67:49:95:fa:f7:cf:c0:f1:0a:81:52:54:32:2c:c3:
                    e9:be:b5:6c:de:d5:e9:2b:a7:9f:24:d1:cc:1b:73:
                    e0:fb:7a:ab:f7:0a:ff:93:99:5d:03:8d:e1:80:03:
                    be:f4:2c:61:9f:c6:e4:36:68:47:84:b2:40:71:6f:
                    71:9a:85:6a:79:4b:18:9b:61:19:91:db:c0:bb:c1:
                    c1:c7:3b:e4:bc:1a:74:ae:80:3c:92:4e:24:60:32:
                    9a:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6C:79:59:EF:1A:D5:8F:3D:33:9C:31:AF:19:3F:2D:93:AC:9F:84
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D4A9EF808F211EEB079521F4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:c6:62:40:8f:97:98:23:74:ec:0e:ff:4a:cc:b4:57:6d:9d:
         35:b5:23:47:68:94:bb:45:83:b9:12:a4:87:14:66:63:99:5e:
         ff:c2:ca:08:1b:ff:80:96:5f:7c:c5:a9:ce:4d:98:b8:c5:ad:
         1b:0b:29:8a:00:71:79:b5:3c:a7:b2:3f:f1:cb:9e:3d:a1:80:
         33:c7:c7:63:ab:97:7d:75:e0:d1:18:4e:19:0c:2d:ea:a1:ed:
         b3:8e:4a:0b:42:9a:b0:59:7e:6d:65:f8:bc:13:d2:74:66:51:
         31:8b:7a:0b:94:0d:16:39:a8:c7:f0:1a:d2:55:b9:33:1d:92:
         f2:d5:c3:8a:50:e7:a6:2b:08:4e:ce:95:e9:61:be:20:a4:3d:
         93:79:0c:e9:72:82:75:cc:04:8f:18:8f:cc:45:b7:ac:31:e3:
         0a:b3:07:7e:44:2c:f1:c7:0a:a1:75:b0:3e:bf:9d:d7:50:af:
         f1:ce:78:a7:d2:ef:93:a8:88:06:5a:6a:64:a0:dd:12:71:66:
         b4:67:8e:59:0a:d1:09:fb:a6:21:93:27:cd:1d:6f:54:10:a7:
         13:e2:33:bb:fd:2b:da:22:44:39:60:c1:c8:63:dd:f5:56:74:
         35:4d:55:9e:5d:4e:26:78:3a:0e:e4:bb:fe:f8:4c:75:57:e9:
         21:1a:37:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:04:19 2024 by rpki-client on console-fra.rpki-client.org