Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9493B090014011EFA5E5F117017001B1.roa
File:                     9493B090014011EFA5E5F117017001B1.roa (raw, json)
Hash identifier:          low9FWI1q36gb0dNaBSycbdfUZJ2iVug1U6PZfR1Wbg=
Subject key identifier:   83:72:21:71:4A:73:5D:25:D5:DE:BA:D2:07:CD:6B:EC:12:CF:C7:C9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       83E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9493B090014011EFA5E5F117017001B1.roa
Signing time:             Tue 23 Apr 2024 07:10:35 +0000
ROA not before:           Tue 23 Apr 2024 07:10:32 +0000
ROA not after:            Sat 11 May 2024 07:10:32 +0000
asID:                     22773
IP address blocks:        45.196.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33760 (0x83e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 23 07:10:32 2024 GMT
            Not After : May 11 07:10:32 2024 GMT
        Subject: CN=66275eeb-ff58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:64:2e:a8:a3:88:90:df:1b:a8:5f:6c:0e:4f:
                    ab:89:41:e9:e0:b4:05:44:2f:0a:c0:bf:bc:09:2f:
                    77:d5:3f:87:c2:72:72:68:6e:e2:b9:87:6b:93:63:
                    ce:30:a5:64:1f:9c:42:32:5b:b9:eb:ac:ad:2d:b3:
                    a3:ff:34:44:73:03:5e:bf:0f:af:c2:ae:5a:5d:ec:
                    06:65:03:05:9e:ec:80:4f:d1:51:b6:30:9c:ca:53:
                    dc:9b:92:a4:c1:a7:52:b5:01:f4:d7:a4:93:27:c0:
                    9a:cc:dc:1f:bd:e3:44:87:6f:37:bf:74:4e:2c:f2:
                    b8:f5:be:f4:42:7b:30:9b:1e:b1:f7:ab:db:23:b1:
                    4f:28:71:cb:7c:d7:e3:41:e0:8f:92:86:38:38:cd:
                    b0:4c:3c:46:e8:fb:fa:e4:3e:41:67:b3:e8:40:0e:
                    34:6f:54:e8:47:bf:37:60:3f:71:7b:66:39:3e:20:
                    73:95:ae:27:97:13:04:e4:76:14:a7:66:b5:ee:8d:
                    ae:9a:e2:9c:69:a1:08:49:e0:8e:a7:29:81:3d:26:
                    4d:47:e0:73:67:7f:5d:fd:76:c8:83:0c:e4:bd:15:
                    81:f0:91:03:7f:ca:20:9a:5d:7f:f1:d7:fc:c0:62:
                    eb:87:9d:50:d6:c8:e8:b6:cf:3c:1b:d1:86:23:f4:
                    53:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:72:21:71:4A:73:5D:25:D5:DE:BA:D2:07:CD:6B:EC:12:CF:C7:C9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9493B090014011EFA5E5F117017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:0a:61:34:c2:18:2c:a5:ab:4a:98:16:58:cc:cc:ab:25:95:
         95:ef:f7:6e:aa:e7:a9:c6:a8:80:f4:23:6f:4c:06:9f:35:d0:
         76:38:66:05:e0:3a:a2:37:1f:f1:18:4a:77:4f:af:d4:c6:f8:
         af:f6:2d:9f:ac:8d:e9:e1:07:45:28:6b:fc:7e:b3:83:a0:30:
         16:61:6b:bf:24:6d:45:c5:44:f8:7c:38:73:23:c7:a5:a9:5f:
         b9:dc:5e:9e:52:16:e8:fc:1a:89:da:0b:d9:77:41:15:cd:6f:
         02:b3:4e:86:08:72:40:3f:d0:de:14:52:b9:2b:41:84:d6:6e:
         6c:e3:e4:a4:8b:6f:b1:89:6c:01:8e:8b:98:ef:51:30:bf:c7:
         ba:0b:9c:9f:dc:09:64:90:10:3a:9b:54:b5:f9:aa:30:f1:d3:
         73:bf:8d:0f:fa:82:54:d0:cf:15:24:8e:71:f6:6c:f8:44:58:
         93:f8:fb:15:97:93:4e:ff:62:e3:e6:f1:d7:db:24:03:d7:49:
         cb:cd:79:fa:c3:c6:7a:70:f1:a7:33:b1:3f:7c:da:10:40:6e:
         95:85:02:cd:f4:b1:b3:61:7a:71:51:62:33:25:21:3e:4c:1e:
         18:3e:e5:d3:90:ad:32:df:b8:b2:ac:5e:eb:ae:7f:fd:eb:6d:
         6d:e3:9e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:48 2024 by rpki-client on console-ams.rpki-client.org