Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7D93770D7D911EE914883C9775412E6.roa
File:                     D7D93770D7D911EE914883C9775412E6.roa (raw, json)
Hash identifier:          fJOtizK+lPiiaHlW31NRjjoZwZSTcTWC9p4Alcq0L9A=
Subject key identifier:   CB:87:BE:14:39:B9:F3:F9:12:64:E8:1F:3C:B5:60:4A:97:70:85:15
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       792B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7D93770D7D911EE914883C9775412E6.roa
Signing time:             Fri 01 Mar 2024 14:41:52 +0000
ROA not before:           Fri 01 Mar 2024 14:41:49 +0000
ROA not after:            Wed 05 Jun 2024 14:41:49 +0000
asID:                     21859
IP address blocks:        45.196.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31019 (0x792b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Mar  1 14:41:49 2024 GMT
            Not After : Jun  5 14:41:49 2024 GMT
        Subject: CN=65e1e930-a9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:9b:02:6b:d0:d2:58:82:47:60:ee:d2:da:46:
                    cd:14:a8:1a:45:a5:29:97:b6:47:39:77:49:99:52:
                    e9:17:e0:23:32:70:0e:92:aa:cf:c4:37:ae:0c:0a:
                    90:f0:a3:b5:79:94:b0:e7:b9:ee:0c:0b:58:9e:9a:
                    28:60:75:6c:52:18:62:09:99:33:19:f4:0b:9c:5b:
                    45:21:99:28:11:5a:06:41:e3:db:3a:8a:3d:f6:3b:
                    91:b6:c9:2f:80:b8:90:52:72:f4:a3:08:be:9f:e4:
                    2f:8d:d0:20:85:bd:70:4f:ca:b3:ae:77:8c:8d:66:
                    10:d8:b2:25:3b:5c:a7:7d:99:75:f7:bf:12:e6:c3:
                    8b:39:ce:a5:63:80:e7:8f:72:37:76:03:21:38:f7:
                    7c:e7:3a:44:a4:8e:1b:72:34:db:00:72:40:ae:da:
                    4d:eb:f3:76:48:76:5a:7e:5c:c3:bf:2b:aa:ba:d3:
                    c2:53:a6:9d:4a:2c:60:70:11:0a:e0:49:a9:3e:e8:
                    20:57:b9:11:fe:08:9f:fc:ef:20:66:ee:c6:26:a6:
                    63:fe:5e:8f:aa:37:05:32:44:91:6f:14:aa:b3:f0:
                    12:03:9d:6c:87:34:93:dd:77:8e:1e:c9:9f:79:ed:
                    3e:3e:ba:9e:cc:a3:c2:82:0f:10:db:6d:1d:ef:7f:
                    8a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:87:BE:14:39:B9:F3:F9:12:64:E8:1F:3C:B5:60:4A:97:70:85:15
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7D93770D7D911EE914883C9775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:36:de:d4:3c:4b:82:e9:8e:d2:bb:a7:e6:91:ef:be:02:39:
         bd:8d:03:90:a0:a7:30:ce:1a:2a:35:62:a5:57:78:d5:a3:44:
         24:25:cc:cf:7c:82:09:51:d8:dc:b7:eb:97:a2:1d:1e:5c:3d:
         27:5d:83:33:09:cb:24:77:58:f9:bc:5c:71:f1:45:5f:12:f0:
         ec:72:cc:0c:77:d8:b7:85:ba:19:e5:57:de:82:d5:f2:cf:19:
         fe:92:a0:d0:af:07:f3:9e:3c:23:07:d8:78:69:70:e9:41:da:
         f5:e3:05:b0:f5:27:08:e5:98:9f:3c:68:62:8a:21:33:bb:6a:
         91:15:68:2e:d1:38:cf:40:26:1e:bf:51:8b:31:44:d5:05:38:
         2c:33:b9:15:51:10:2f:d2:2b:ea:30:ad:65:6f:74:c6:3f:0c:
         6c:95:b4:ae:1a:08:10:8d:5e:fe:8e:d3:e7:31:30:c7:ef:33:
         8c:01:a5:ec:39:56:d4:3f:0f:11:ac:8f:bf:57:91:3b:ff:6f:
         ec:33:a6:b1:6e:83:fc:a9:0a:77:12:71:97:39:57:a8:76:e1:
         9a:13:f8:75:c4:07:04:42:bb:15:26:8d:79:a6:81:95:ae:65:
         aa:21:39:8f:f3:e2:04:a3:ef:ed:e9:5b:3e:57:ce:ea:b7:f1:
         d3:00:41:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:18:23 2024 by rpki-client on console-ams.rpki-client.org