Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BECFCE1653C611EE8D6A0E594AD9E6FC.roa
File:                     BECFCE1653C611EE8D6A0E594AD9E6FC.roa (raw, json)
Hash identifier:          lP5HpcTl9hgiEJh6IVAQ5WrXRSIArPQrAHKdjY/vFuc=
Subject key identifier:   8C:8E:41:95:4A:8C:42:78:D0:70:B8:15:80:5A:AB:3C:F2:78:A6:BE
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       39B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BECFCE1653C611EE8D6A0E594AD9E6FC.roa
Signing time:             Fri 15 Sep 2023 12:52:37 +0000
ROA not before:           Sun 01 Oct 2023 12:52:33 +0000
ROA not after:            Wed 02 Oct 2024 12:52:33 +0000
asID:                     393294
IP address blocks:        45.199.163.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14776 (0x39b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  1 12:52:33 2023 GMT
            Not After : Oct  2 12:52:33 2024 GMT
        Subject: CN=65045394-a131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:b7:9e:3a:4a:3a:97:f3:c3:3a:96:f6:11:
                    0b:2d:c2:d2:5f:34:24:cf:d4:86:cf:35:be:92:98:
                    91:e9:55:f4:45:fd:ae:a2:49:38:04:d6:77:0d:3f:
                    74:bf:a2:80:d3:75:95:f6:7a:4b:07:73:5e:68:10:
                    d2:e9:be:c5:37:00:0f:3e:13:3d:0f:f4:e6:86:aa:
                    57:f3:06:67:a5:c9:e9:ad:94:23:80:50:63:e3:a8:
                    03:be:02:62:6a:1b:dc:05:2c:3b:e1:f8:34:b1:1c:
                    64:fd:6a:be:e8:43:6d:67:6b:b9:c1:0d:1b:4a:36:
                    27:fb:3d:a2:7c:f4:fe:d8:18:4d:57:9d:5a:0a:9d:
                    5a:f3:6b:ff:89:1f:bb:12:83:b3:35:c9:64:ea:fb:
                    29:b5:eb:ee:d5:b5:08:cb:cf:a1:3e:42:e4:6e:d5:
                    d2:a1:ed:71:42:ef:b0:75:a5:20:f6:5f:8d:20:05:
                    c6:a4:c6:d5:68:f2:57:fe:04:32:ff:50:f8:95:fa:
                    23:39:54:c0:03:52:e2:ab:4e:1c:2f:27:44:e8:dc:
                    7f:ef:39:e7:9e:3d:58:ef:ed:18:4d:39:dc:49:e6:
                    21:1e:1b:9d:ca:2b:4e:bb:8e:45:c6:e1:c2:75:0b:
                    ea:6c:91:0d:4f:d3:fa:65:a6:0d:cc:68:95:f2:a4:
                    35:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8E:41:95:4A:8C:42:78:D0:70:B8:15:80:5A:AB:3C:F2:78:A6:BE
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BECFCE1653C611EE8D6A0E594AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:6e:bf:3f:9d:25:80:ab:38:b0:d9:94:e1:c0:d8:ff:0f:64:
         e6:12:12:63:fc:3a:68:81:46:e7:32:a3:ab:23:9f:6f:7b:28:
         71:32:59:72:63:a4:5a:56:c1:c0:f6:ca:e3:80:35:3e:a7:1d:
         be:2c:bc:7d:22:51:44:4c:57:ea:50:62:d8:4d:03:52:c9:b5:
         50:ba:1d:c2:8e:9e:8b:a5:f3:06:7b:38:81:95:08:70:72:2c:
         5e:cb:64:3d:7b:65:20:13:ac:b7:ee:cb:6e:84:57:2f:28:68:
         17:f5:4e:1e:68:72:31:a7:10:07:63:2e:c1:d2:ec:bd:cb:78:
         87:dd:75:53:62:3c:eb:87:ef:c1:be:df:a8:18:35:21:26:4a:
         58:1e:87:82:4e:5f:d4:66:32:f9:29:db:e5:ac:62:ea:7a:ad:
         49:0c:cb:fa:c5:ed:c6:db:52:db:f4:44:c2:a8:aa:aa:b9:4e:
         f6:22:dd:2d:be:d9:73:61:14:91:76:90:ae:54:41:e2:f6:da:
         ca:f3:f3:f1:ec:b4:e5:a0:65:6e:7f:7f:c4:90:f7:83:b4:ba:
         df:f4:20:9a:f0:5e:9e:2e:83:60:2d:a1:92:d8:12:f6:ae:9b:
         89:73:7b:4a:45:af:e5:38:40:5e:33:5d:42:33:21:ce:cc:13:
         b9:9d:b5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:06 2024 by rpki-client on console-fra.rpki-client.org