Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0902B7484F911EEA8F4165D4AD9E6FC.roa
File:                     C0902B7484F911EEA8F4165D4AD9E6FC.roa (raw, json)
Hash identifier:          X45U/ogzzUxEwmJ4gQe9w6lVx2uu+t1GRIgiO3tgKoo=
Subject key identifier:   B1:73:4F:2A:00:78:AF:00:C4:50:7A:E1:6A:1B:D0:5B:9C:83:13:B0
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       4979
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0902B7484F911EEA8F4165D4AD9E6FC.roa
Signing time:             Fri 17 Nov 2023 03:31:11 +0000
ROA not before:           Fri 17 Nov 2023 03:31:07 +0000
ROA not after:            Tue 12 Nov 2024 03:31:07 +0000
asID:                     54252
IP address blocks:        45.199.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18809 (0x4979)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Nov 17 03:31:07 2023 GMT
            Not After : Nov 12 03:31:07 2024 GMT
        Subject: CN=6556de7f-281a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:ff:30:5e:e6:6b:9c:82:48:04:7b:f9:20:
                    28:72:60:64:70:45:83:69:1e:7e:a0:3a:fe:2a:b8:
                    08:45:04:19:1f:48:0d:f5:c9:d6:a2:39:5c:52:e5:
                    78:cd:b9:89:2a:1f:f2:21:97:2a:8b:b5:a5:9d:5a:
                    4f:ee:11:b4:0b:60:74:ce:53:22:9e:2b:f5:d5:07:
                    61:7f:02:19:e7:5e:18:98:a1:a0:aa:73:22:6d:c3:
                    29:e2:c5:cc:73:67:11:ab:d6:08:ef:52:a5:74:80:
                    a8:3f:0b:9e:4d:31:21:e0:99:7a:d5:01:42:cb:79:
                    f9:fd:19:ae:02:1f:15:c8:a9:94:e5:19:c8:8a:7f:
                    e2:53:3b:25:e5:12:c1:50:c8:74:07:8c:7a:19:5e:
                    43:74:f4:f1:5c:05:91:7a:dc:23:55:c5:70:16:59:
                    d8:68:c5:c6:a8:25:5b:59:1d:d6:f3:e6:e6:19:e6:
                    89:73:f7:20:38:d3:33:b3:ef:0d:64:b0:f9:99:b4:
                    7d:7c:b7:f4:20:c4:10:98:99:a6:3e:0a:f5:1b:d7:
                    c1:eb:97:6f:a9:34:92:98:ed:94:f4:4c:6f:34:fc:
                    f9:7f:d2:c4:88:51:35:d1:46:9c:45:cf:4a:ab:85:
                    d1:04:ea:c4:6e:5e:f5:fd:bf:3a:14:00:fd:d1:81:
                    b3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:73:4F:2A:00:78:AF:00:C4:50:7A:E1:6A:1B:D0:5B:9C:83:13:B0
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0902B7484F911EEA8F4165D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:dd:25:7c:f4:2e:85:6e:4f:f3:8f:27:a6:de:a5:12:99:c9:
         07:0b:e4:5a:95:bc:ea:ac:9f:2c:61:b9:39:7a:4f:4f:20:9e:
         81:cd:5a:25:ca:71:80:bb:ac:7b:c9:e7:32:94:2a:f9:b1:3b:
         e6:99:9a:8d:04:a4:9e:e3:12:53:33:c1:40:c7:24:92:96:9c:
         cc:70:a7:1d:ac:1d:3a:8e:ee:da:6f:3f:8a:93:d8:d0:ae:c3:
         09:c4:c9:bf:b6:da:13:f9:7c:0f:2a:01:19:20:e9:cd:73:7a:
         cc:4b:75:0f:bf:8b:9d:b0:e8:ed:58:ef:6d:3e:53:af:e8:14:
         4c:6e:ac:08:b0:8b:22:e6:b8:75:8c:8a:e6:c7:12:24:d5:9f:
         e4:44:ea:7e:97:0b:fe:24:08:a5:c0:77:15:e0:4b:7b:89:d4:
         a2:e5:53:bb:99:fd:36:fd:98:e5:3f:e9:ad:be:2e:71:3a:5f:
         80:91:0d:2d:99:39:e6:c7:8f:1c:e7:5a:c8:ad:b3:11:2b:f9:
         52:6d:dc:5b:cd:e4:dd:d9:cb:b2:59:aa:45:77:06:a9:9a:f6:
         52:76:b1:14:77:62:a2:97:06:99:46:63:84:dc:ce:3b:00:34:
         fe:9d:5e:78:50:89:9c:5a:b3:82:68:3e:d3:d6:eb:a1:86:96:
         2e:d7:62:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:16 2024 by rpki-client on console-fra.rpki-client.org