Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B37067B4014111EF870C5E22017001B1.roa
File:                     B37067B4014111EF870C5E22017001B1.roa (raw, json)
Hash identifier:          T2+Wqgp9dKZ2iVIQxACNOXUfmbuG3r0cNnmFxjgJmt8=
Subject key identifier:   5E:57:C9:6D:F2:20:17:24:25:AE:9B:96:5F:84:B0:B7:A3:CB:86:6F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       83F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B37067B4014111EF870C5E22017001B1.roa
Signing time:             Tue 23 Apr 2024 07:18:37 +0000
ROA not before:           Tue 23 Apr 2024 07:18:33 +0000
ROA not after:            Sat 11 May 2024 07:18:33 +0000
asID:                     9009
IP address blocks:        45.192.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33776 (0x83f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 23 07:18:33 2024 GMT
            Not After : May 11 07:18:33 2024 GMT
        Subject: CN=662760cd-9d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:61:5f:7f:57:5c:80:51:7c:8b:54:64:05:8f:
                    50:e1:94:09:5b:56:94:cc:1f:8c:0a:5b:a4:9c:ce:
                    1d:47:2c:d9:2f:05:4c:f3:9e:d9:24:93:96:3d:ea:
                    1d:06:cc:fd:e3:4b:bc:ac:ce:cf:00:d5:1d:d8:e2:
                    c6:a8:3f:f4:3c:de:33:d0:f6:48:34:34:0f:3e:d0:
                    6f:66:81:3a:fe:b2:59:bb:5a:5e:09:e0:84:10:91:
                    5a:3a:b8:70:7f:1a:33:7d:e9:0a:07:bf:f7:a4:d5:
                    ef:19:bf:f8:40:ad:e5:d6:be:75:32:25:17:c6:7a:
                    df:5b:bc:87:04:be:c9:79:fa:b5:00:11:4e:fb:97:
                    23:eb:5e:02:d4:94:0f:4e:a2:19:62:78:fc:08:f5:
                    20:86:53:84:7a:aa:69:82:6a:38:67:a5:37:df:18:
                    b6:88:50:2d:38:75:6a:70:e3:8c:98:5e:3f:5c:3f:
                    45:8f:1d:ea:f7:35:c2:f8:4a:24:d8:3c:dc:b2:6f:
                    3c:56:7d:e6:a2:f2:70:aa:18:0f:e8:b3:09:7d:8a:
                    b1:d1:c2:e5:01:02:9d:84:df:39:05:02:13:7f:93:
                    68:14:69:6d:e9:d5:ad:06:7d:2a:3f:40:3e:05:4d:
                    d2:90:7f:a8:ed:ff:6c:e8:77:ed:b7:77:41:e8:d6:
                    21:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:57:C9:6D:F2:20:17:24:25:AE:9B:96:5F:84:B0:B7:A3:CB:86:6F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B37067B4014111EF870C5E22017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.192.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:e6:23:61:a0:25:1b:22:6c:05:83:f3:ec:f6:7d:41:c2:1a:
         2c:99:8c:19:34:6a:9b:36:2b:58:26:d6:6b:90:33:f2:66:ef:
         03:6f:ae:42:24:5b:a2:84:fb:58:12:ab:63:c1:2d:25:15:1b:
         dd:f2:e5:11:81:ec:2b:b0:21:de:16:3a:dc:aa:29:5e:61:9e:
         13:66:4b:16:36:6c:19:4b:ca:08:37:b0:3b:af:37:87:56:69:
         e6:ee:f1:92:51:81:68:65:7f:38:96:82:67:ba:bc:ee:15:9f:
         8d:9c:14:b9:ce:ff:b8:8c:fc:24:0c:87:ba:a1:25:b9:10:93:
         6d:4b:7f:76:2e:2b:da:39:0b:a2:5e:51:d9:a4:c7:6c:d9:86:
         11:66:8c:60:26:9c:60:95:c6:ac:7d:f2:5d:47:c9:ed:32:e4:
         67:3e:88:a6:c0:ff:0d:43:cf:e1:86:d6:43:e8:4e:a7:53:db:
         84:f5:4f:ec:cc:dd:3d:5c:38:5c:18:1f:6a:c3:9a:c9:5a:bc:
         07:a8:a7:20:0e:8d:be:c2:d1:96:b8:00:f7:65:fd:53:43:ae:
         3c:86:7b:22:a9:d3:72:1a:2e:f1:ee:89:14:59:5d:50:90:b0:
         a3:fe:55:d9:10:d4:fa:f0:8f:6b:bd:dc:3a:7d:09:c5:27:d2:
         94:b4:24:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:15 2024 by rpki-client on console-fra.rpki-client.org