Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96DDD2863DF011EEA27C0E494AD9E6FC.roa
File:                     96DDD2863DF011EEA27C0E494AD9E6FC.roa (raw, json)
Hash identifier:          cD4qpVJq57u9xQHUzFKmiswb+W6lTrfSGanRAdbvsw0=
Subject key identifier:   2C:A2:20:48:FF:C3:67:85:3A:4B:CC:45:4F:22:8F:BB:55:6B:F0:D4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       366B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96DDD2863DF011EEA27C0E494AD9E6FC.roa
Signing time:             Fri 18 Aug 2023 17:56:43 +0000
ROA not before:           Fri 18 Aug 2023 17:56:39 +0000
ROA not after:            Sun 23 Jun 2024 17:56:39 +0000
asID:                     265867
IP address blocks:        45.195.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13931 (0x366b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 18 17:56:39 2023 GMT
            Not After : Jun 23 17:56:39 2024 GMT
        Subject: CN=64dfb0db-d2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:02:5d:77:53:06:64:ad:36:97:eb:b7:65:e9:
                    3c:55:f5:1c:20:9a:19:fd:f6:4a:5a:42:a8:a0:35:
                    f9:6a:c1:05:26:71:5c:99:28:dc:13:5f:cb:44:f7:
                    42:58:0b:bf:2d:0e:9e:44:c9:66:69:b5:09:6b:e8:
                    46:8a:ac:c7:ea:b4:ba:66:0d:03:5b:54:7c:14:f1:
                    be:51:68:95:11:22:cc:2e:07:ab:f8:d9:88:aa:97:
                    e7:b2:6e:57:de:1f:5a:92:c3:ec:36:eb:f6:33:0d:
                    46:44:d3:e6:49:f7:3e:b2:a3:bb:d4:04:c2:00:f0:
                    60:30:43:b9:00:7a:db:dd:a5:ad:78:c4:04:91:7f:
                    1a:ce:ef:ec:c2:55:d1:0b:95:0d:54:55:b1:8b:ed:
                    49:c1:e0:6c:5b:80:86:b6:cd:24:2a:89:8f:06:06:
                    69:b3:32:35:58:17:6f:e9:02:21:44:17:58:70:3e:
                    d8:e5:5b:5b:fc:cb:04:04:fc:ba:0a:19:9f:9a:99:
                    7c:87:97:45:ee:d8:51:08:2a:25:48:c4:77:90:62:
                    23:c8:06:5d:56:54:9e:82:60:02:74:8e:4b:19:37:
                    bd:dc:77:43:96:f5:91:bd:60:3f:15:ff:f1:40:80:
                    e2:50:ce:da:54:c9:14:d2:af:42:5a:59:27:ae:91:
                    78:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A2:20:48:FF:C3:67:85:3A:4B:CC:45:4F:22:8F:BB:55:6B:F0:D4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96DDD2863DF011EEA27C0E494AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.195.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a4:1f:b2:ea:c3:d6:dd:8d:c2:9f:3f:c1:73:ea:f8:47:d0:
         90:73:aa:25:a4:1a:09:02:9c:b5:ca:88:7d:2f:56:30:cc:08:
         ce:3e:57:5a:99:c3:6b:de:eb:9a:0f:fc:dd:f2:e3:ae:d5:b0:
         3c:56:2e:b8:be:da:3e:25:66:0f:9c:88:2c:d6:9c:89:15:59:
         eb:28:9d:30:26:a6:2a:5a:82:94:58:7d:95:e3:ee:8a:f9:59:
         e2:0d:46:3d:81:81:98:2b:a1:6d:81:0d:90:03:d0:f1:5b:dd:
         0d:48:6f:e5:52:88:4c:cd:66:e1:e8:c5:ff:2e:b7:a5:1e:be:
         b3:ec:b2:a9:97:d7:7b:ac:b8:4a:34:35:8e:2c:9c:31:0a:0c:
         d6:31:17:de:9b:90:fb:23:f4:2c:94:f0:16:e3:30:91:cb:20:
         12:46:6e:bf:c3:52:4c:78:77:82:c7:15:d5:26:01:a1:6b:40:
         e4:f4:ae:ba:41:a2:16:df:55:2a:33:a5:86:77:c4:c8:2a:11:
         e7:11:6e:40:c2:fb:5d:4f:fe:06:6e:66:f4:bd:94:2e:8f:a4:
         39:b8:04:ca:63:57:15:b6:f3:3a:09:bb:5f:5c:07:92:3c:4e:
         6b:8c:72:c6:eb:9f:67:a1:a3:2a:a4:d4:94:96:db:04:01:3f:
         10:8c:76:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:13 2024 by rpki-client on console-fra.rpki-client.org