Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2D4E7CC4BEE11EEB9C005574AD9E6FC.roa
File:                     E2D4E7CC4BEE11EEB9C005574AD9E6FC.roa (raw, json)
Hash identifier:          FpSu4soSGuF9cCEZsLDheX1awkPYTceAdMODI8rs1mE=
Subject key identifier:   45:B4:8B:4A:2A:09:E3:16:1A:2F:04:D3:87:F9:C6:DF:8F:C7:90:10
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       37EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2D4E7CC4BEE11EEB9C005574AD9E6FC.roa
Signing time:             Tue 05 Sep 2023 13:19:47 +0000
ROA not before:           Tue 05 Sep 2023 13:19:44 +0000
ROA not after:            Fri 24 May 2024 13:19:44 +0000
asID:                     131178
IP address blocks:        45.201.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14315 (0x37eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep  5 13:19:44 2023 GMT
            Not After : May 24 13:19:44 2024 GMT
        Subject: CN=64f72af3-5863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:c7:d4:e2:51:d5:e5:a7:78:8b:38:46:9a:
                    3f:39:c2:e0:2c:50:45:07:d5:ad:42:4e:77:a4:69:
                    66:88:2e:fe:8f:0b:da:43:a0:55:87:76:f6:9d:a4:
                    94:03:0a:be:5f:00:b0:ea:a0:b9:3c:65:c5:37:e7:
                    a9:69:89:32:c0:f1:f6:eb:de:dc:69:00:94:83:d6:
                    04:76:bc:74:b7:15:f5:ff:7c:d2:3f:2b:c6:7d:3c:
                    d4:0b:09:84:7d:8b:30:6d:fa:1c:f5:12:47:36:23:
                    3b:75:05:52:da:15:2d:56:09:13:61:4c:9e:19:35:
                    9f:2c:16:5f:7a:7a:0c:c0:76:27:c4:46:cc:7d:33:
                    5a:2d:8a:84:58:c9:cc:39:36:b0:63:85:90:39:5d:
                    dd:84:bd:a4:0e:14:2a:da:56:4b:de:1b:8e:81:fd:
                    be:b8:98:f5:7a:df:95:92:5f:d9:ab:8a:9d:05:ab:
                    7d:42:65:38:14:d9:99:2b:d3:e4:2e:c9:12:33:46:
                    e2:aa:09:dc:58:09:c4:e5:9f:e2:8c:cd:07:25:66:
                    f6:58:96:52:c2:1e:9d:f2:f9:68:ff:3d:74:03:d9:
                    da:cc:30:0b:51:bb:e4:2e:be:31:52:0d:c3:ea:a0:
                    1b:5f:82:94:6a:54:49:fa:1f:78:f2:a3:73:8a:6f:
                    75:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:B4:8B:4A:2A:09:E3:16:1A:2F:04:D3:87:F9:C6:DF:8F:C7:90:10
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2D4E7CC4BEE11EEB9C005574AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.201.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:4d:83:c3:e4:de:97:c2:f0:d2:07:3b:3a:9e:e4:ec:5f:2c:
         ad:f1:b3:b4:92:40:cd:16:5f:4e:58:fd:b0:87:9b:32:02:a3:
         af:62:70:ec:fd:f4:5f:20:85:f8:cd:42:24:7e:b6:25:85:b5:
         09:26:be:b5:b4:93:2d:a9:bc:9f:8a:97:db:5c:5b:be:cb:6a:
         ea:2d:e2:41:97:cd:d4:ad:24:5b:cc:92:d1:0b:3d:ff:44:85:
         0b:1d:bb:35:9f:9e:bb:2b:eb:77:d2:59:31:28:52:ed:43:fd:
         d7:4a:79:4b:01:a0:56:ec:ed:cf:7c:06:bc:5a:1b:d3:53:a7:
         09:a4:b5:ec:a6:cb:98:05:b1:19:f9:b9:1f:6e:21:25:67:7d:
         49:85:8d:00:18:5d:de:82:f9:c7:96:fd:cf:54:89:a1:b4:ed:
         2d:3d:ff:39:9a:ad:ff:be:d8:1b:de:d8:b0:51:ff:fd:c0:e6:
         14:05:b6:17:28:52:8e:18:4b:6d:88:07:ab:61:90:45:78:63:
         75:ed:3e:64:a0:19:92:8f:ea:50:4f:cb:ca:17:90:aa:3b:37:
         d6:72:f3:9f:51:7e:98:e4:69:f3:71:98:bc:42:7d:f4:b7:7d:
         8d:d4:67:d8:27:00:d2:26:79:91:9a:e2:32:69:4b:bd:d2:b9:
         15:2d:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 17:18:24 2024 by rpki-client on console-ams.rpki-client.org