Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02FA773816AF11F09CFC7DE76DB8BCC6.roa
File:                     02FA773816AF11F09CFC7DE76DB8BCC6.roa (raw, json)
Hash identifier:          e03nrGlq79AKv0pN0b8fwejxsVGjaqelQqADFdo5MZg=
Subject key identifier:   FB:19:DB:84:FA:98:A4:A2:AF:BA:A3:32:C3:46:7B:3B:D6:E5:A4:F2
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       014BA2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02FA773816AF11F09CFC7DE76DB8BCC6.roa
Signing time:             Fri 11 Apr 2025 08:28:57 +0000
ROA not before:           Fri 11 Apr 2025 08:28:53 +0000
ROA not after:            Wed 07 May 2025 08:28:53 +0000
asID:                     62240
IP address blocks:        45.196.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84898 (0x14ba2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Apr 11 08:28:53 2025 GMT
            Not After : May  7 08:28:53 2025 GMT
        Subject: CN=67f8d2c9-bfc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c1:b8:a9:76:42:f7:4b:4b:2d:9d:4b:c2:fc:
                    27:4b:e7:18:81:7a:cf:eb:6f:fc:28:d2:38:4e:3c:
                    0b:d7:72:be:ea:a8:5d:f0:67:86:21:3f:e6:38:cf:
                    b6:26:28:70:e8:38:95:5a:dd:3b:af:86:ca:2c:69:
                    b4:af:27:55:b0:a2:05:5f:45:d2:0d:58:71:b3:15:
                    66:1e:cc:43:7c:1a:82:e5:6c:03:ae:9c:a2:ed:ac:
                    e5:25:cb:ee:d2:e4:00:7b:b4:28:09:fe:1c:55:98:
                    8d:2c:71:46:27:26:54:a7:90:93:9a:05:9f:55:27:
                    74:d1:48:cf:af:a1:9e:1d:34:d2:79:c6:09:78:30:
                    e9:6f:a0:af:ed:be:28:87:d3:26:75:d9:ce:69:40:
                    f0:e8:09:c2:6a:8c:38:35:99:d0:37:51:c6:19:86:
                    bd:25:87:e8:d1:b6:b3:93:f3:bf:27:48:cf:ac:9a:
                    1c:ad:9d:3b:d3:64:1d:85:1f:43:bc:8d:97:5f:df:
                    c2:10:fb:29:b7:63:ed:7f:97:7c:25:94:56:75:07:
                    bd:1b:22:1a:f1:62:d6:ac:ea:e2:3d:40:b3:6c:10:
                    35:26:08:a4:d4:f4:b0:29:62:39:fe:63:4e:70:dc:
                    35:45:d0:01:70:e6:93:7c:28:03:df:05:ea:18:69:
                    b8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:19:DB:84:FA:98:A4:A2:AF:BA:A3:32:C3:46:7B:3B:D6:E5:A4:F2
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02FA773816AF11F09CFC7DE76DB8BCC6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.196.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:b5:d8:4a:ee:19:6b:96:7f:1c:14:f2:1c:bd:03:16:a0:61:
         2a:a0:2c:83:75:23:66:00:c8:6e:ca:97:74:d1:63:01:7a:56:
         7e:bd:90:63:17:b7:75:a3:01:e0:9b:61:68:d9:ae:61:16:d9:
         44:f1:7e:e4:1c:e9:2a:62:38:cc:d5:3f:fc:4e:44:d4:65:4d:
         e0:2e:b5:d0:8c:13:ff:62:6f:3e:28:84:29:b5:05:b2:b6:5c:
         66:e4:9c:ff:d0:0f:71:94:76:cd:8b:ed:01:03:7f:53:4e:f2:
         0e:b5:7c:af:3d:19:86:8c:49:a5:84:8f:5d:16:f7:51:77:73:
         9e:eb:66:f2:24:34:7b:e3:00:7b:94:ae:ea:e1:34:6f:76:db:
         68:18:4a:61:44:54:fb:7a:1b:25:09:61:d0:df:d0:59:01:c8:
         fd:3c:7f:f0:0f:7e:65:1b:4f:ee:1c:7b:e3:b5:6a:ac:2c:f4:
         01:b5:56:9b:7d:e9:98:84:8f:d5:5f:5e:05:15:a6:7b:d6:94:
         4b:20:ad:d0:a1:3f:c1:6e:52:c0:59:ee:9c:71:a2:4f:a3:5a:
         d2:64:25:0d:70:6a:e3:25:ed:07:29:12:9a:74:d1:50:30:bb:
         cf:bc:3f:c3:43:79:e0:cb:a9:fc:d1:1f:ff:ef:d0:bf:7f:42:
         6f:cb:b4:7e
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAUuiMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUwNDExMDgyODUzWhcNMjUwNTA3MDgyODUzWjAYMRYw
FAYDVQQDEw02N2Y4ZDJjOS1iZmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAm8G4qXZC90tLLZ1LwvwnS+cYgXrP62/8KNI4TjwL13K+6qhd8GeGIT/m
OM+2Jihw6DiVWt07r4bKLGm0rydVsKIFX0XSDVhxsxVmHsxDfBqC5WwDrpyi7azl
Jcvu0uQAe7QoCf4cVZiNLHFGJyZUp5CTmgWfVSd00UjPr6GeHTTSecYJeDDpb6Cv
7b4oh9MmddnOaUDw6AnCaow4NZnQN1HGGYa9JYfo0bazk/O/J0jPrJocrZ0702Qd
hR9DvI2XX9/CEPspt2Ptf5d8JZRWdQe9GyIa8WLWrOriPUCzbBA1Jgik1PSwKWI5
/mNOcNw1RdABcOaTfCgD3wXqGGm4jwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPsZ
24T6mKSir7qjMsNGezvW5aTyMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMkZBNzczODE2QUYxMUYwOUNGQzdERTc2REI4QkNDNi5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcTxMA0GCSqGSIb3DQEBCwUA
A4IBAQBGtdhK7hlrln8cFPIcvQMWoGEqoCyDdSNmAMhuypd00WMBelZ+vZBjF7d1
owHgm2Fo2a5hFtlE8X7kHOkqYjjM1T/8TkTUZU3gLrXQjBP/Ym8+KIQptQWytlxm
5Jz/0A9xlHbNi+0BA39TTvIOtXyvPRmGjEmlhI9dFvdRd3Oe62byJDR74wB7lK7q
4TRvdttoGEphRFT7ehslCWHQ39BZAcj9PH/wD35lG0/uHHvjtWqsLPQBtVabfemY
hI/VX14FFaZ71pRLIK3QoT/BblLAWe6ccaJPo1rSZCUNcGrjJe0HKRKadNFQMLvP
vD/DQ3ngy6n80R//79C/f0Jvy7R+
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:58:13 2025 by rpki-client on console.sobornost.net