Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B52AD8168DD111EEB145056F4AD9E6FC.roa
File:                     B52AD8168DD111EEB145056F4AD9E6FC.roa (raw, json)
Hash identifier:          4kvylWjoe1Ex2XmZT/DRTWlaonrnodtqUfltDP4ljeM=
Subject key identifier:   40:87:B6:AD:3A:03:B2:F0:64:37:ED:8D:59:D6:88:82:85:63:41:08
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       4C65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B52AD8168DD111EEB145056F4AD9E6FC.roa
Signing time:             Tue 28 Nov 2023 09:37:12 +0000
ROA not before:           Sat 03 Feb 2024 09:37:09 +0000
ROA not after:            Thu 08 Aug 2024 09:37:09 +0000
asID:                     133861
IP address blocks:        45.207.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19557 (0x4c65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Feb  3 09:37:09 2024 GMT
            Not After : Aug  8 09:37:09 2024 GMT
        Subject: CN=6565b4c8-35b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bc:be:03:3d:48:ab:87:89:8a:f0:21:aa:8f:
                    99:bb:69:34:82:2c:46:6e:e2:7d:13:3b:fd:37:a7:
                    44:dc:8b:19:50:50:d6:9c:c1:10:92:c4:a6:52:74:
                    d9:bc:62:e9:42:1e:81:86:47:68:17:87:bc:d0:f7:
                    8f:0a:71:1a:59:8b:3f:04:48:a1:52:d7:c7:69:42:
                    04:56:35:4a:cb:ce:e8:5a:ee:ea:8f:5e:ff:96:00:
                    b9:88:5a:f7:f0:9a:86:b9:95:0b:d5:3c:13:98:b8:
                    8e:d2:b3:55:6e:c6:9f:6f:1e:09:90:8d:93:29:e9:
                    ff:19:2f:fa:8d:f7:cf:e3:9f:68:3e:af:fc:91:d4:
                    5e:1c:44:d9:2e:ce:08:54:ca:5f:8d:ce:76:a2:b8:
                    cc:10:66:58:83:c9:34:35:cf:6b:c3:6b:77:ec:59:
                    eb:01:e0:b4:d7:f4:e1:b7:97:55:59:93:b4:13:c6:
                    9c:d6:5e:6d:99:0e:f0:8c:d4:91:35:d9:a8:03:1a:
                    5c:ab:b1:ab:6c:1a:47:0b:b5:80:91:db:b8:b8:38:
                    54:a4:18:e8:44:3b:12:e1:75:16:f9:03:19:85:31:
                    09:4a:7b:f6:49:0b:cd:97:3f:5c:cf:73:71:80:f8:
                    5b:fc:bb:a0:10:4a:7e:81:42:4e:af:bf:9f:e8:e9:
                    54:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:87:B6:AD:3A:03:B2:F0:64:37:ED:8D:59:D6:88:82:85:63:41:08
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B52AD8168DD111EEB145056F4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:40:4c:14:4a:dd:be:fe:e1:9d:ae:aa:e5:4b:42:ee:61:eb:
         ea:af:c6:8b:da:52:e4:60:14:75:21:be:aa:22:59:0a:37:43:
         2e:e7:18:80:03:06:1f:da:48:fc:3b:b2:e8:d5:56:dc:59:2b:
         dd:0e:dd:c7:13:af:19:b5:94:8e:01:c9:95:4a:00:de:aa:af:
         c3:20:2c:7c:88:34:49:9c:3d:8e:cd:d3:db:45:67:3e:c4:30:
         0f:25:d8:89:58:9b:f9:39:b1:5a:19:89:2c:d5:7f:0e:8e:12:
         1b:2c:87:5d:64:b5:25:1c:0e:c0:12:75:2f:31:26:70:b0:8d:
         57:95:6e:36:a9:76:91:e9:ac:94:ec:37:0d:75:7c:63:ea:2e:
         db:42:8d:ec:ea:c7:b1:7e:7e:31:92:60:d6:de:2c:a5:94:af:
         33:52:63:22:23:0e:9f:2a:af:e7:73:74:ad:c2:38:2f:d4:c6:
         87:b6:e2:a8:c9:7d:eb:28:df:c6:55:e7:e8:c3:e1:48:bf:e8:
         dd:c0:06:2f:48:2a:58:17:2f:1d:5a:ff:30:84:78:62:1d:87:
         e1:64:fd:01:dc:b3:04:06:8f:25:86:9c:88:69:8c:1d:83:60:
         73:5f:dc:e3:e7:95:2d:6f:2d:b7:c2:ed:1d:07:f4:68:0c:d1:
         1d:64:10:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:15 2024 by rpki-client on console-fra.rpki-client.org