Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E60DA26AFE2411EE90696243017001B1.roa
File:                     E60DA26AFE2411EE90696243017001B1.roa (raw, json)
Hash identifier:          ep82IKjUvPU/835V19P0Db2HJ+/dWxY3kDptzzjUuhg=
Subject key identifier:   9D:12:4D:69:7F:28:60:A5:B7:4E:DB:80:CF:6C:01:8C:B3:6F:F0:2F
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       8396
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E60DA26AFE2411EE90696243017001B1.roa
Signing time:             Fri 19 Apr 2024 08:14:53 +0000
ROA not before:           Fri 19 Apr 2024 08:14:49 +0000
ROA not after:            Sun 28 Apr 2024 08:14:49 +0000
asID:                     142062
IP address blocks:        45.204.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33686 (0x8396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 19 08:14:49 2024 GMT
            Not After : Apr 28 08:14:49 2024 GMT
        Subject: CN=662227fd-459c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:31:58:18:f2:ee:72:3b:e7:83:f9:cb:73:07:
                    11:cb:41:d8:3e:db:bf:63:e0:f6:02:35:e2:28:23:
                    5a:94:49:4b:99:ff:a6:67:55:ed:57:78:bb:bb:bd:
                    57:5e:bc:7a:71:a4:90:5e:98:07:d0:5a:ae:c2:41:
                    37:be:b8:b6:c7:ca:14:01:fa:8f:82:c6:ee:06:ff:
                    e8:73:db:26:b7:d1:6b:60:68:52:41:6b:96:56:d5:
                    90:27:24:c5:28:0d:ed:8f:ee:6d:b9:2e:9d:8f:ed:
                    f5:b6:a9:ae:e9:17:a5:3c:5f:53:f1:cd:8f:3e:d0:
                    87:8b:57:13:42:a6:78:27:99:05:ad:68:9d:ed:bf:
                    8c:7b:85:a1:6f:5e:b9:22:89:ac:d2:60:29:8e:6a:
                    57:59:5c:6e:47:93:79:98:9f:db:5e:59:28:67:ad:
                    b7:da:cb:75:5d:75:75:e5:d7:37:9d:44:a0:82:0f:
                    b0:df:99:f2:03:fb:2b:31:5d:af:d7:64:7a:f0:53:
                    85:9f:2f:0b:dd:1e:2c:02:73:d8:45:d7:82:33:9c:
                    26:53:3e:68:41:ca:4c:10:7c:2d:2b:6a:43:0b:5e:
                    d0:5e:eb:18:8e:7e:9e:ce:2c:4b:2d:5a:b5:f9:41:
                    f8:34:97:c0:a6:bc:73:e8:e3:00:12:93:74:7a:25:
                    39:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:12:4D:69:7F:28:60:A5:B7:4E:DB:80:CF:6C:01:8C:B3:6F:F0:2F
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E60DA26AFE2411EE90696243017001B1.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.204.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:00:5e:ea:a7:4b:94:b0:cc:ca:a8:9c:32:64:3f:ab:6a:31:
         d6:68:e2:07:7b:52:57:48:9c:50:4c:51:7a:fb:2f:79:38:c8:
         85:ec:87:29:28:8c:cd:9f:e0:37:c1:6a:61:15:dd:25:0f:23:
         22:09:a3:2c:30:2a:96:d8:b0:5d:5b:70:83:9b:2c:6a:04:3d:
         5a:0f:52:87:31:fc:68:6a:06:c0:a8:2f:ec:c5:b0:74:8d:95:
         1b:e7:de:67:e7:f0:6c:c3:0e:e0:7c:fc:02:0e:60:a9:74:b8:
         12:dc:4f:8c:06:bb:b1:23:4d:e4:1a:97:70:20:40:e0:17:e7:
         6a:b2:f8:f7:c2:38:6e:1f:38:2d:d4:b9:85:6c:65:ac:0c:e4:
         b6:d4:ff:aa:cb:d0:45:4b:e4:88:88:aa:dc:19:bf:66:be:36:
         78:95:55:2d:82:65:9b:7d:45:82:b9:bc:3c:28:e8:23:49:d5:
         d0:54:53:f6:fc:e1:c5:a2:30:cf:07:09:0c:87:8f:df:84:69:
         36:36:63:36:c6:6c:d1:81:fe:54:17:20:10:99:e3:ec:67:fb:
         4b:e9:09:cd:8d:af:37:a9:86:e9:28:e4:d4:32:4d:b5:df:d5:
         c3:00:52:95:cd:f0:99:b0:7b:ef:43:07:df:22:ae:6a:82:2c:
         44:53:b9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 22:33:46 2024 by rpki-client on console-fra.rpki-client.org