Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBD9CDB437FF11EEA585BB3E4AD9E6FC.roa
File:                     DBD9CDB437FF11EEA585BB3E4AD9E6FC.roa (raw, json)
Hash identifier:          aoZkBi1OQezg/R2BXI5LlQ4hljywzRPB1IUMmojMJ8s=
Subject key identifier:   26:10:F9:DF:C0:88:AC:17:4B:CB:AD:9D:CD:EE:11:EE:21:7E:46:D9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       3465
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBD9CDB437FF11EEA585BB3E4AD9E6FC.roa
Signing time:             Fri 11 Aug 2023 04:30:54 +0000
ROA not before:           Fri 11 Aug 2023 04:30:51 +0000
ROA not after:            Thu 13 Jun 2024 04:30:51 +0000
asID:                     21859
IP address blocks:        45.207.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13413 (0x3465)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 11 04:30:51 2023 GMT
            Not After : Jun 13 04:30:51 2024 GMT
        Subject: CN=64d5b97e-5e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:62:4d:50:5f:4c:08:c5:dd:7a:b5:40:7a:36:
                    f9:ce:ba:46:b2:c5:69:b7:73:ff:d0:fd:33:86:b0:
                    26:d3:1f:c2:9d:d2:3d:94:ef:21:a4:f3:c6:d2:24:
                    3f:e8:f5:b6:5c:64:9d:4a:0b:8b:3d:a8:a2:0d:dc:
                    1e:04:f1:24:14:5b:58:77:11:97:ac:99:14:f1:5e:
                    d2:3d:9f:aa:24:e2:61:87:e5:7e:36:53:42:e1:d1:
                    ea:c8:e1:2d:80:a3:70:31:7e:eb:7e:04:60:cc:69:
                    02:f1:e3:27:a3:32:3e:67:93:b4:c9:16:6d:8a:a8:
                    e1:28:9f:07:5d:c4:95:17:8b:a6:40:0f:d4:42:bb:
                    ca:7f:3d:95:dd:a4:cc:67:5e:09:60:a5:dd:2c:3e:
                    64:2e:b0:92:4e:fd:8b:33:63:72:bb:0b:75:1f:1a:
                    40:14:76:eb:f5:28:8c:63:a3:95:9f:0d:e8:5a:f3:
                    26:bc:8d:bc:8e:47:c5:a5:73:17:84:3d:c6:94:f9:
                    45:6b:26:19:3c:48:3e:18:99:dd:66:84:82:2d:5c:
                    85:24:a5:ef:d3:40:70:be:b5:a4:18:14:6c:3a:16:
                    d7:af:be:16:e9:79:f7:e7:69:61:a4:82:fe:da:1f:
                    6b:b7:ef:f6:68:61:3e:66:20:26:a4:47:d5:8a:7e:
                    49:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:10:F9:DF:C0:88:AC:17:4B:CB:AD:9D:CD:EE:11:EE:21:7E:46:D9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBD9CDB437FF11EEA585BB3E4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.207.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:b9:e2:de:91:f3:aa:d4:8c:c7:2b:d8:c5:5b:c0:d7:1a:3f:
         29:e2:22:a0:b6:d0:94:4d:a5:9b:8f:3d:e1:42:0a:f1:a4:e5:
         f2:06:f0:29:35:a2:4b:dc:a1:82:ab:f9:8e:5a:37:f2:e9:67:
         e0:bc:b2:a2:eb:fe:8f:e4:f8:16:37:b0:ed:78:06:2a:bb:42:
         73:06:b4:2f:4f:d7:2e:cc:56:b0:18:eb:49:cc:5c:f2:47:13:
         e4:fd:33:81:2f:7e:a1:4f:0a:4f:2f:dc:f9:cb:19:6e:cc:be:
         e0:4c:6e:d5:ae:aa:a5:b1:d5:1f:0a:49:81:c9:4a:72:c9:39:
         e2:0f:a5:b6:13:07:e0:5c:f6:48:20:e1:94:7c:02:66:55:d6:
         e1:8b:ed:5f:3d:bd:85:1b:f4:a9:3b:76:0a:cb:44:82:84:16:
         68:4f:31:a5:5f:c7:a7:2d:5d:d9:b2:2d:4f:fe:7f:37:cb:86:
         38:dd:d3:a0:18:30:e1:2d:b9:92:20:6b:2f:76:62:00:54:61:
         87:7f:44:f0:ed:0a:76:27:02:e5:6a:a0:dc:03:fb:10:0c:b2:
         dd:34:e8:79:9c:80:12:b5:2b:a6:4d:61:71:13:32:8b:75:84:
         ad:d3:3e:26:fc:e6:ab:81:3c:50:fd:ea:d4:37:b6:0d:8a:e5:
         5f:fa:30:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 14:41:24 2024 by rpki-client on console-ams.rpki-client.org