Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECD6A96EF90E11ED96C51D7D4AD9E6FC.roa
File:                     ECD6A96EF90E11ED96C51D7D4AD9E6FC.roa (raw, json)
Hash identifier:          2odkm9fsbOq6LurzjFZeGEijySF0PBPcn/C/tbpc0g4=
Subject key identifier:   CA:8D:B5:63:A7:D9:9B:5C:A4:47:71:3E:23:38:1C:9E:6A:71:EB:F3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       2651
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECD6A96EF90E11ED96C51D7D4AD9E6FC.roa
Signing time:             Tue 23 May 2023 02:10:02 +0000
ROA not before:           Tue 23 May 2023 02:09:58 +0000
ROA not after:            Tue 25 Jun 2024 02:09:58 +0000
asID:                     135607
IP address blocks:        45.202.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9809 (0x2651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: May 23 02:09:58 2023 GMT
            Not After : Jun 25 02:09:58 2024 GMT
        Subject: CN=646c207a-a470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ab:c7:07:76:11:8a:27:89:b1:aa:03:c1:a1:
                    2c:fa:03:5f:f0:9f:9a:b9:32:46:2e:f9:ef:72:fe:
                    03:71:36:c9:20:33:ae:6d:a9:c2:01:1c:e0:2e:62:
                    ea:44:a9:7c:7f:73:28:e1:f7:f1:55:dd:13:b8:28:
                    05:fe:d1:1d:b4:75:53:22:4d:df:87:43:97:2b:78:
                    86:c8:24:fb:a8:e9:58:36:43:ca:8b:4c:b3:b6:e2:
                    a2:89:9d:73:99:ee:7e:34:a2:c7:e0:48:19:24:dd:
                    ad:37:21:c4:8a:52:94:2c:93:87:7e:bd:52:fc:d3:
                    9a:fb:93:00:3b:96:55:d5:66:15:c0:33:0d:86:9a:
                    fe:bf:e6:ff:e9:b6:98:1e:45:7b:5f:09:5e:79:d0:
                    80:ae:ca:19:50:9e:d6:a5:72:e5:5b:3c:89:fc:e0:
                    7b:5e:8b:73:0b:32:e2:d5:07:9d:53:97:70:ae:cc:
                    92:5e:63:ec:67:a5:52:5c:66:0b:9d:42:42:d1:be:
                    4e:49:e4:60:97:94:23:78:6b:20:c2:dc:f4:af:17:
                    d8:3a:00:3f:8e:24:7e:ee:e6:45:c8:e1:a8:16:bd:
                    9d:95:32:35:63:96:ff:07:81:b2:0d:da:f3:d9:a6:
                    eb:5c:79:7f:d6:f7:83:73:19:b3:3c:7d:8e:53:c7:
                    4b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8D:B5:63:A7:D9:9B:5C:A4:47:71:3E:23:38:1C:9E:6A:71:EB:F3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ECD6A96EF90E11ED96C51D7D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.202.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:f7:40:6e:31:6e:8c:88:14:84:28:da:e4:bd:80:c5:21:9e:
         8e:6b:5d:a6:49:78:2b:48:8e:a1:c4:02:48:f7:0f:9d:20:c1:
         90:38:2b:2a:80:3b:55:8f:14:f0:92:f9:c6:4d:a2:6d:b3:fc:
         9d:d5:5d:64:94:4b:93:59:de:5c:12:f9:69:e6:9d:5e:08:f0:
         07:18:09:29:9e:13:12:6a:1c:3e:fe:ef:fe:4e:f3:61:ac:14:
         a2:db:e1:86:e6:c4:24:33:16:be:50:c7:a1:0d:c3:89:6f:7e:
         79:17:58:03:a0:b6:fb:87:56:34:cd:3e:8d:5b:16:b6:52:06:
         63:96:b3:66:4d:ac:d9:f4:0c:3a:f3:bb:23:3f:3d:4d:72:32:
         7f:dc:82:ca:ae:72:69:e1:12:79:72:2d:79:32:59:3a:62:e0:
         53:23:58:e9:04:30:1d:34:99:97:9e:d1:b5:ab:4d:d4:5f:a7:
         85:78:5b:18:fc:a7:43:b2:b8:7e:0a:6f:3d:3e:f9:70:4c:10:
         10:3a:8f:ff:e6:de:1d:02:db:ac:ac:ea:dd:f0:df:a2:22:42:
         39:e8:7d:30:ef:1d:4a:32:68:d8:d4:60:c6:f2:16:b9:c7:de:
         c3:bd:d4:77:50:95:2f:ec:00:e8:03:4d:69:e5:69:78:d0:98:
         da:cc:fd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 08:05:00 2024 by rpki-client on console-ams.rpki-client.org