Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93DCF8DA689A11EE8D31632E4AD9E6FC.roa
File:                     93DCF8DA689A11EE8D31632E4AD9E6FC.roa (raw, json)
Hash identifier:          eaidImyJ3DE3LRl2R4ZC7h2797So819z56EmVDpGsfA=
Subject key identifier:   95:57:F6:B2:22:0B:37:1F:8C:B3:D7:C0:50:BA:FA:1F:0A:C4:C2:A3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       3E41
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93DCF8DA689A11EE8D31632E4AD9E6FC.roa
Signing time:             Thu 12 Oct 2023 00:59:21 +0000
ROA not before:           Thu 12 Oct 2023 00:00:18 +0000
ROA not after:            Mon 26 Aug 2024 00:00:18 +0000
asID:                     140883
IP address blocks:        45.195.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15937 (0x3e41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 12 00:00:18 2023 GMT
            Not After : Aug 26 00:00:18 2024 GMT
        Subject: CN=652744e9-d3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:10:a0:f3:ad:a9:04:ac:da:6b:fa:a2:bb:c5:
                    76:a3:d4:ac:a4:d9:79:f8:75:02:6e:b3:5f:20:a0:
                    6d:38:c2:19:8c:2b:fb:af:35:06:54:3b:f8:61:76:
                    be:f2:63:16:e9:a9:9b:fe:87:9d:1d:28:59:a1:1f:
                    a5:fb:38:04:38:fc:3b:6a:ac:2e:7a:da:d1:f0:19:
                    a3:75:b8:f6:9b:8a:99:18:02:89:94:40:72:39:35:
                    7e:de:88:26:63:7c:a6:1c:a4:35:ea:fe:69:79:1b:
                    45:21:ea:09:fa:23:1f:5b:0f:3a:2a:cc:db:9f:2a:
                    5b:64:7f:55:2e:81:fd:6a:63:f6:28:17:33:19:a2:
                    87:38:26:d1:75:29:92:0f:88:c9:3d:a1:be:fe:18:
                    d6:66:ca:e3:1b:c8:49:1d:79:fd:d0:ad:c0:d1:98:
                    65:cd:3f:91:ed:4c:17:74:21:6d:aa:e7:b8:da:60:
                    50:d7:eb:57:cf:4a:7d:9b:26:48:9a:6b:74:57:43:
                    80:d7:70:f0:eb:cd:b4:9e:23:b4:dd:14:d7:73:75:
                    d0:53:8d:49:89:f7:d5:2d:a2:e9:c4:ba:ae:5f:e1:
                    a9:be:77:d3:30:5b:63:5d:1d:58:a7:2c:15:05:8b:
                    cf:21:57:0a:ca:13:a9:b5:c9:29:02:7e:87:29:b4:
                    35:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:57:F6:B2:22:0B:37:1F:8C:B3:D7:C0:50:BA:FA:1F:0A:C4:C2:A3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93DCF8DA689A11EE8D31632E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:c0:3d:37:72:45:0d:98:5a:4c:2f:dd:c2:7c:54:c3:8f:f5:
         ca:73:1e:6c:f1:69:49:04:9e:d2:e6:06:62:20:0b:db:f2:1a:
         82:47:ef:f2:ca:0f:48:c4:7b:54:6c:87:94:3d:97:1d:02:db:
         f7:1b:0a:a2:1b:2e:86:1d:d4:65:a1:57:21:c7:fa:7b:82:0e:
         d3:32:2e:bf:58:31:16:21:c7:ef:ca:8d:21:9d:fd:1d:ac:16:
         55:52:6a:26:51:3a:ce:48:1f:a7:8a:2b:58:85:39:b0:f3:a4:
         6d:b0:22:3c:c0:16:a9:f3:b1:8a:ed:1d:ca:70:fe:f0:70:9e:
         19:0c:b6:46:3c:5a:2f:4c:99:51:17:a9:ed:56:9e:eb:81:6f:
         c3:7f:e9:af:9f:02:cd:f3:e7:00:ac:1e:5a:ee:6d:71:ce:bb:
         11:78:79:2a:ee:19:83:cf:d5:be:44:75:d3:3b:c1:bb:e0:10:
         b5:9c:3c:9f:18:0f:55:fc:74:39:b5:d0:5b:77:0d:f8:91:f5:
         5d:c6:f6:7f:e2:ce:57:a7:b6:f3:20:0e:30:40:69:12:43:b7:
         4f:26:64:1e:0c:1c:23:35:78:f9:53:ee:ab:af:70:77:f8:e9:
         bc:b6:e9:0e:41:bb:e7:c2:4a:cc:cf:37:c9:f6:e6:82:3f:b3:
         21:98:50:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:04:20 2024 by rpki-client on console-fra.rpki-client.org