Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E57BF23AA2ED11EEB1997476D25BE465.roa
File:                     E57BF23AA2ED11EEB1997476D25BE465.roa (raw, json)
Hash identifier:          uqnI3zjpFNoY1h+Dq0CjAbxmexvyEhaP6sUDRb60GGY=
Subject key identifier:   29:AA:3F:5E:5D:E7:D9:18:73:5A:A4:1C:89:A5:5F:0B:F3:86:DF:57
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       591E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E57BF23AA2ED11EEB1997476D25BE465.roa
Signing time:             Mon 25 Dec 2023 06:21:54 +0000
ROA not before:           Mon 25 Dec 2023 06:21:50 +0000
ROA not after:            Wed 02 Oct 2024 06:21:50 +0000
asID:                     393294
IP address blocks:        45.199.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22814 (0x591e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Dec 25 06:21:50 2023 GMT
            Not After : Oct  2 06:21:50 2024 GMT
        Subject: CN=65891f82-e072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9a:f7:62:2f:b1:fd:e8:2f:4a:45:31:5c:3a:
                    de:0b:ad:e0:26:75:e5:cd:23:9a:2f:4a:86:c5:94:
                    14:3b:94:5c:83:21:ab:ed:28:17:ee:84:22:6e:7a:
                    e4:ca:41:5c:9b:75:07:1f:c9:6e:50:a9:6a:3c:28:
                    cd:54:03:1e:03:8a:9e:a8:41:48:51:47:0d:e3:56:
                    99:4c:97:39:e7:63:75:a0:0a:68:89:87:94:10:75:
                    c0:38:6e:b8:c3:8f:13:24:1e:93:ee:4f:fd:ff:e3:
                    b5:14:09:ed:6e:e4:91:f8:72:a5:73:c0:06:bc:73:
                    f1:72:55:45:88:ec:c8:29:d8:0d:4a:49:a7:9f:11:
                    3d:60:59:6d:1e:07:87:03:9c:80:f0:7c:66:94:ea:
                    28:78:26:16:06:cd:ff:85:53:2a:67:4f:f1:27:d5:
                    4d:e7:29:31:20:0c:83:2b:c9:1d:6b:a1:c1:ba:ea:
                    2d:07:68:12:d2:6d:3c:f8:39:77:e0:72:3d:24:13:
                    9a:e1:a5:c4:29:96:3b:34:c6:2d:4d:f9:08:db:10:
                    48:c0:ca:b8:51:77:b0:89:eb:5c:f2:e5:c6:26:65:
                    06:a2:7d:3b:8a:db:71:c2:db:16:10:37:70:88:15:
                    f3:cd:36:aa:92:ac:48:c1:56:65:e4:2e:7b:fc:ac:
                    0c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AA:3F:5E:5D:E7:D9:18:73:5A:A4:1C:89:A5:5F:0B:F3:86:DF:57
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E57BF23AA2ED11EEB1997476D25BE465.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:a8:23:f7:4e:9d:a6:a5:59:48:d7:98:de:60:0f:48:7b:93:
         20:0c:19:67:67:81:bc:53:20:9d:dd:46:95:ff:ed:9c:84:1d:
         b6:ea:5a:5b:12:3e:6c:53:8d:c3:1f:84:bd:e5:63:f8:b3:ac:
         28:ac:56:93:53:43:aa:c7:8b:bf:e2:61:ac:ec:5c:51:e4:84:
         23:e4:b8:a8:65:88:91:f3:c1:50:80:e6:c3:42:da:c5:93:54:
         7c:f9:fd:e6:bb:77:81:55:d4:1c:4c:31:96:1a:79:fa:3c:0e:
         1e:69:6a:0e:d9:d5:a7:04:50:41:33:66:d9:10:34:2c:67:4f:
         3a:99:e8:f0:d5:37:1f:f4:4b:ec:50:c4:fc:ea:9c:f0:7e:94:
         06:67:21:89:21:99:1f:9e:5b:2a:cd:63:b0:7b:b7:7e:e5:b9:
         8f:fd:37:7a:85:5b:18:bd:b2:6f:8d:26:81:5f:47:ac:ca:dc:
         a2:b8:0c:c9:5b:c4:43:ca:b0:98:a1:27:26:da:b5:2a:ec:e0:
         a6:c4:22:b9:c0:c0:9b:a6:45:36:27:d9:4d:f9:1f:ed:b6:cc:
         5b:11:6b:4f:88:c5:2e:30:e4:80:7c:88:25:a6:4f:ee:a3:cd:
         7d:c9:c8:2b:4f:ea:0c:17:c8:1c:85:67:7d:63:9e:bc:71:cc:
         42:d1:fb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:08:19 2024 by rpki-client on console-fra.rpki-client.org