Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/1415515A09E011EA89201968F8AEA228.roa
File:                     1415515A09E011EA89201968F8AEA228.roa (raw, json)
Hash identifier:          Z6YNFRKlqZHg8MBy1LXwdhOEadbPL4UT4CSjsM+aDYo=
Subject key identifier:   CA:10:FF:62:1B:6F:07:2A:D9:11:02:33:E6:1E:16:59:75:6D:8E:97
Certificate issuer:       /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial:       5A
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/1415515A09E011EA89201968F8AEA228.roa
Signing time:             Mon 18 Nov 2019 08:47:40 +0000
ROA not before:           Mon 18 Nov 2019 08:47:34 +0000
ROA not after:            Sat 17 Nov 2029 08:47:34 +0000
asID:                     327687
IP address blocks:        137.63.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
                          rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 27 May 2024 00:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
        Validity
            Not Before: Nov 18 08:47:34 2019 GMT
            Not After : Nov 17 08:47:34 2029 GMT
        Subject: CN=5dd25aac-39f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:14:32:0c:69:60:a4:66:0d:14:cd:d4:ed:40:
                    92:54:28:7c:dd:b2:c1:40:5c:f0:55:da:f5:94:a3:
                    83:c2:48:4b:97:e0:82:bf:29:07:3a:04:5a:29:2e:
                    d5:e5:dc:02:1b:b9:21:2d:4c:98:14:61:db:09:57:
                    3a:68:a5:92:ae:d6:48:78:b8:f2:de:67:2b:d7:34:
                    dc:d1:c6:88:19:a2:d9:3b:fb:60:31:a4:68:60:19:
                    4a:5a:50:f7:47:d0:3d:51:f3:6b:09:4d:a8:46:8a:
                    df:c1:7b:33:40:db:dd:b7:82:c0:be:34:3b:1d:d9:
                    86:24:a2:ea:66:59:7a:52:8c:ea:38:f2:f7:8c:2d:
                    ff:ca:0c:a6:a5:cd:f9:46:1a:96:35:d0:44:51:d8:
                    55:6e:02:a1:b8:3f:23:ec:8e:d2:f4:b1:27:d9:ad:
                    f6:73:38:34:0b:50:09:06:34:8c:4d:86:08:83:35:
                    35:8e:13:d0:47:55:19:58:0c:6b:a5:ff:fb:e4:83:
                    b1:17:0c:bc:92:13:f3:86:cd:89:af:b7:29:7d:4a:
                    d1:2b:b4:ee:d4:b6:f4:2a:5b:a7:ea:33:18:47:3a:
                    2d:d7:74:8b:b6:20:c5:7b:b1:5e:8d:97:1d:87:d7:
                    8a:34:fe:2b:96:00:33:88:a0:db:dd:d5:dc:b3:37:
                    d8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:10:FF:62:1B:6F:07:2A:D9:11:02:33:E6:1E:16:59:75:6D:8E:97
            X509v3 Authority Key Identifier:
                keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/1415515A09E011EA89201968F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.63.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:5c:06:0d:b1:83:10:28:2a:1a:ec:5b:10:fa:e5:ad:f4:91:
         40:5e:e1:dd:a5:e0:4c:48:93:f6:ae:1a:a9:5b:78:72:c7:95:
         9c:06:b1:8c:ac:b0:37:5c:97:f8:e1:97:ad:37:b4:e9:50:88:
         c2:e5:36:41:34:0f:f4:ab:60:b4:8d:33:5f:d1:5f:ea:aa:1f:
         44:b1:59:53:28:ce:b7:df:17:3e:b6:3e:63:b8:5d:8a:dc:54:
         12:89:9f:df:41:e0:ea:f7:cd:88:b9:bb:22:48:a8:e5:48:6f:
         02:a4:8c:26:54:a4:50:16:12:ba:b3:11:6b:6c:94:a0:75:05:
         f7:a9:a0:bb:49:8b:f8:a4:a7:9d:ea:38:2a:56:03:70:e8:cb:
         db:fc:44:2f:3f:37:08:03:d7:eb:a9:3b:79:ff:a6:1c:84:5c:
         f6:95:ce:ab:ec:ab:1d:01:3b:9c:c0:85:56:39:79:aa:c2:25:
         87:7c:bc:56:9e:c2:ea:71:aa:e3:a9:0d:45:52:8f:8e:8d:67:
         93:6b:52:40:97:2a:e1:41:61:7a:ca:01:ea:c1:8a:14:40:df:
         81:9e:c4:de:17:ab:d4:65:a7:a5:a7:c2:4b:76:d6:65:b1:13:
         f8:cb:4c:7b:bf:79:dc:8f:3a:f1:f8:7c:fa:9c:d5:a8:8e:38:
         36:5d:89:a0
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIBWjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
QjM4RUFSMTEwLwYDVQQFEygyM0U2M0JBNTUxMzY1RkM1OTEyM0E2MzcxMkQ3OTc4
MkFGMTAyOEQxMB4XDTE5MTExODA4NDczNFoXDTI5MTExNzA4NDczNFowGDEWMBQG
A1UEAxMNNWRkMjVhYWMtMzlmODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPsUMgxpYKRmDRTN1O1AklQofN2ywUBc8FXa9ZSjg8JIS5fggr8pBzoEWiku
1eXcAhu5IS1MmBRh2wlXOmilkq7WSHi48t5nK9c03NHGiBmi2Tv7YDGkaGAZSlpQ
90fQPVHzawlNqEaK38F7M0Db3beCwL40Ox3ZhiSi6mZZelKM6jjy94wt/8oMpqXN
+UYaljXQRFHYVW4Cobg/I+yO0vSxJ9mt9nM4NAtQCQY0jE2GCIM1NY4T0EdVGVgM
a6X/++SDsRcMvJIT84bNia+3KX1K0Su07tS29Cpbp+ozGEc6Ldd0i7YgxXuxXo2X
HYfXijT+K5YAM4ig293V3LM32DcCAwEAAaOCAmswggJnMB0GA1UdDgQWBBTKEP9i
G28HKtkRAjPmHhZZdW2OlzAfBgNVHSMEGDAWgBQj5julUTZfxZEjpjcS15eCrxAo
0TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkIzOEUvODdFRjk3MTBERjYxMTFFOThGMzk0NTMwRjhBRUEyMjgvSS1ZN3BW
RTJYOFdSSTZZM0V0ZVhncThRS05FLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
SS1ZN3BWRTJYOFdSSTZZM0V0ZVhncThRS05FLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MkIzOEUvODdFRjk3MTBERjYxMTFFOThGMzk0NTMwRjhBRUEy
MjgvMTQxNTUxNUEwOUUwMTFFQTg5MjAxOTY4RjhBRUEyMjgucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAiT+MMA0GCSqGSIb3DQEBCwUAA4IBAQBPXAYN
sYMQKCoa7FsQ+uWt9JFAXuHdpeBMSJP2rhqpW3hyx5WcBrGMrLA3XJf44ZetN7Tp
UIjC5TZBNA/0q2C0jTNf0V/qqh9EsVlTKM633xc+tj5juF2K3FQSiZ/fQeDq982I
ubsiSKjlSG8CpIwmVKRQFhK6sxFrbJSgdQX3qaC7SYv4pKed6jgqVgNw6Mvb/EQv
PzcIA9frqTt5/6YchFz2lc6r7KsdATucwIVWOXmqwiWHfLxWnsLqcarjqQ1FUo+O
jWeTa1JAlyrhQWF6ygHqwYoUQN+BnsTeF6vUZaelp8JLdtZlsRP4y0x7v3ncjzrx
+Hz6nNWojjg2XYmg
-----END CERTIFICATE-----
Generated at Sat May 25 02:22:26 2024 by rpki-client on console-fra.rpki-client.org