Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAC80182260E11EE98F1FC644AD9E6FC.roa
File:                     DAC80182260E11EE98F1FC644AD9E6FC.roa (raw, json)
Hash identifier:          Mf6H+udy6EJEN13EAulHoLiWwNT88Tlw9asb3fsgA4Q=
Subject key identifier:   CA:EF:05:1C:8A:30:85:CB:DB:B7:51:49:6F:BA:8E:56:59:74:9D:2B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       30E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAC80182260E11EE98F1FC644AD9E6FC.roa
Signing time:             Wed 19 Jul 2023 08:32:54 +0000
ROA not before:           Wed 19 Jul 2023 08:32:50 +0000
ROA not after:            Thu 25 Jul 2024 08:32:50 +0000
asID:                     39159
IP address blocks:        45.194.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12515 (0x30e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Jul 19 08:32:50 2023 GMT
            Not After : Jul 25 08:32:50 2024 GMT
        Subject: CN=64b79fb6-e77f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:44:85:55:7c:70:3d:6b:9a:6f:14:e1:48:b2:
                    4d:60:71:6f:2d:12:5e:d3:3f:68:8c:a1:d3:7c:1a:
                    25:31:e9:96:60:64:46:7d:ca:1b:b1:1b:bc:29:6d:
                    81:f9:84:99:cb:be:8b:2f:62:66:ca:0b:9f:ab:d1:
                    d6:84:22:94:a4:29:ba:00:31:b7:02:33:fc:07:8a:
                    6b:0c:5c:5e:a3:c8:ef:22:9a:c1:a5:46:a5:7c:c2:
                    57:ae:73:15:4f:74:d7:37:9f:d5:4c:24:61:f6:1b:
                    cc:90:cf:38:b9:36:db:76:10:43:14:17:9f:16:89:
                    4e:df:39:15:f1:f2:f8:fb:a3:c5:92:f3:86:3a:fb:
                    65:60:70:f4:a1:1c:f2:3a:ed:a2:6c:30:7b:ae:06:
                    83:5f:e2:68:c3:96:db:10:0a:a8:44:c2:53:bd:55:
                    50:01:1d:2a:b2:e0:93:76:00:93:d9:04:83:ac:54:
                    f4:6a:e6:5a:a2:6c:20:8e:11:44:b5:c3:73:e1:b5:
                    7e:43:09:35:60:22:85:58:f4:5f:c8:93:f1:51:ca:
                    97:11:4b:01:4d:80:1c:a9:ba:9e:0d:46:2b:e9:3b:
                    f4:00:77:b9:c3:4c:8e:5f:c9:c0:c5:92:ee:54:7d:
                    27:47:13:6c:ab:82:27:f6:1f:b7:12:16:bf:30:a4:
                    58:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EF:05:1C:8A:30:85:CB:DB:B7:51:49:6F:BA:8E:56:59:74:9D:2B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DAC80182260E11EE98F1FC644AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.194.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:fa:74:09:eb:3f:cc:dc:e7:57:49:1f:f0:28:3a:dc:34:36:
         ae:38:10:15:a2:f4:70:8d:89:40:68:e9:5f:c0:6e:c4:02:aa:
         15:81:b3:93:09:c4:b1:b5:bd:7e:0d:e4:e6:df:32:d7:2e:de:
         c0:9e:68:9f:5a:10:f4:66:1f:ef:70:d0:4e:b6:12:75:bc:6f:
         13:e6:d9:53:51:e8:1e:b1:23:45:4c:70:aa:7c:8d:ae:c7:a6:
         c5:40:35:55:82:40:f4:c7:6d:b7:23:da:ca:25:5e:71:c3:22:
         64:6e:5a:a1:eb:da:d1:aa:1e:45:5f:38:06:e6:1e:48:80:4b:
         6b:c6:46:6b:ce:af:a4:ff:86:77:f0:b0:93:97:79:b1:a3:76:
         fe:5b:24:20:e7:4d:6e:8e:8d:f0:d6:5f:1e:a0:72:47:78:c8:
         f0:9a:22:cc:0b:6b:e5:e6:ce:3f:e2:ea:be:2e:d9:60:a7:d1:
         d8:82:de:d5:f7:5e:d5:82:a0:9e:5f:99:e9:4d:26:8f:07:1e:
         fc:48:aa:63:c1:df:35:78:eb:c6:17:4b:ac:07:5a:a5:a2:5d:
         34:0d:19:b9:2f:e1:91:1e:76:d6:c8:1b:ab:ae:a4:8e:50:69:
         58:29:cb:7b:e2:a0:5f:5c:bc:2a:99:73:b1:48:cc:16:c2:f6:
         9e:26:53:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:12:08 2024 by rpki-client on console-fra.rpki-client.org