Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC7BB536088211F095A268BB762E951A.roa
File:                     BC7BB536088211F095A268BB762E951A.roa (raw, json)
Hash identifier:          Ik2MPXuJUOFC4sArxVdQeSvGE/3/KymbyHbipw11fyU=
Subject key identifier:   BA:F5:23:FC:3D:B0:24:FE:19:77:08:69:73:DA:2F:2C:A6:26:87:B2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       0147C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC7BB536088211F095A268BB762E951A.roa
Signing time:             Mon 24 Mar 2025 07:36:45 +0000
ROA not before:           Mon 24 Mar 2025 07:36:41 +0000
ROA not after:            Wed 30 Apr 2025 07:36:41 +0000
asID:                     2914
IP address blocks:        45.196.70.0/24 maxlen: 24
                          45.196.71.0/24 maxlen: 24
                          45.196.72.0/24 maxlen: 24
                          45.196.73.0/24 maxlen: 24
                          45.196.74.0/24 maxlen: 24
                          45.196.75.0/24 maxlen: 24
                          45.196.76.0/24 maxlen: 24
                          45.196.77.0/24 maxlen: 24
                          45.196.78.0/24 maxlen: 24
                          45.196.79.0/24 maxlen: 24
                          45.196.80.0/24 maxlen: 24
                          45.196.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Apr 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83913 (0x147c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR
        Validity
            Not Before: Mar 24 07:36:41 2025 GMT
            Not After : Apr 30 07:36:41 2025 GMT
        Subject: CN=67e10b8d-9785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:12:56:c2:94:63:2e:3c:72:87:8b:aa:6b:32:
                    77:69:64:47:c3:66:b6:a5:ca:42:db:6e:05:6a:44:
                    df:4c:38:80:92:39:26:97:30:40:e9:49:bc:19:41:
                    72:ce:37:95:30:c8:f3:6f:87:b8:03:aa:37:d4:19:
                    62:50:aa:fb:20:69:cc:11:d7:d1:74:68:2c:cb:d3:
                    77:ce:40:a5:c4:95:bf:f5:37:02:d0:a6:31:55:85:
                    6e:2f:1b:22:0d:ea:80:b5:fb:ce:28:15:29:fe:76:
                    b4:80:b3:9d:2a:61:0f:18:ce:7b:61:e7:f9:fd:37:
                    65:5a:00:8e:56:40:5f:a2:5d:e1:a2:d6:98:bf:28:
                    b6:ee:f8:ef:5f:cf:60:39:0e:38:e5:08:50:dc:3f:
                    e9:0c:c6:9d:4f:e0:bd:42:06:d7:65:61:6e:2e:71:
                    89:a3:0e:7c:e4:9f:24:42:2a:f2:24:37:70:e4:7f:
                    b4:d2:9d:ee:ca:82:2e:92:14:3d:f3:9f:a5:70:eb:
                    19:fc:c0:1f:7e:e5:f4:46:18:24:f2:d2:87:ae:02:
                    86:24:5b:db:94:3e:1e:bb:ac:e4:9f:ef:b2:3e:6c:
                    33:9a:03:0f:a3:b7:93:ab:26:6c:a0:9e:a4:90:bc:
                    52:18:5d:86:77:01:cc:a3:e3:06:4d:6c:d0:c4:74:
                    43:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F5:23:FC:3D:B0:24:FE:19:77:08:69:73:DA:2F:2C:A6:26:87:B2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC7BB536088211F095A268BB762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.70.0-45.196.81.255

    Signature Algorithm: sha256WithRSAEncryption
         b7:a6:19:a2:9c:89:b0:71:13:02:72:5a:e5:77:ac:39:94:b7:
         90:35:52:66:97:5c:8c:85:56:6d:d6:d9:7e:f1:44:6f:2c:67:
         8e:73:e6:ee:51:9d:cf:74:1e:7f:fd:91:0b:ee:d9:85:39:bc:
         5a:9b:b9:66:f2:1d:8d:fb:07:9e:fd:68:cf:8b:5c:05:e5:ad:
         55:7c:14:da:04:05:01:62:f8:dd:91:c7:f2:2a:65:99:99:0f:
         e4:be:23:c5:c3:54:a9:98:5f:e8:a8:8b:03:e1:11:c8:a8:d5:
         4b:72:63:a2:c0:f2:9f:d1:21:11:d5:2e:36:3c:93:9c:3e:2f:
         16:85:d2:42:ad:86:77:5c:6b:b4:60:6d:40:5d:ce:25:87:3c:
         70:fe:b4:71:82:f5:b9:9a:dd:f0:0a:95:a3:90:60:80:2c:1b:
         c4:0e:12:06:01:64:ae:b4:6e:b3:b8:05:14:fc:67:a4:18:6b:
         c8:3b:47:47:c7:b9:24:8b:15:83:5b:e4:5c:a3:40:8c:cd:74:
         a3:93:d7:f0:b7:a3:2a:d0:20:a8:58:36:79:60:3a:3f:95:d4:
         e0:71:28:bf:be:d3:e9:ee:b2:87:bd:13:e8:73:ff:25:1b:ac:
         78:c8:09:7d:4d:80:1c:59:19:9c:29:9a:84:d6:70:c9:ac:2c:
         01:48:b1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:19:00 2025 by rpki-client