Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/3365633609DD11EA9707D165F8AEA228.roa
File:                     3365633609DD11EA9707D165F8AEA228.roa (raw, json)
Hash identifier:          wjYexOqIpShzgA/ZrKGvlpcOkJ/3CZeB/4cAyu18oJg=
Subject key identifier:   87:96:73:60:C9:D7:CF:FC:34:24:87:F7:E8:C6:1E:5D:0E:DC:2D:1C
Certificate issuer:       /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial:       46
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/3365633609DD11EA9707D165F8AEA228.roa
Signing time:             Mon 18 Nov 2019 08:27:08 +0000
ROA not before:           Mon 18 Nov 2019 08:26:55 +0000
ROA not after:            Sat 17 Nov 2029 08:26:55 +0000
asID:                     327687
IP address blocks:        137.63.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
                          rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
        Validity
            Not Before: Nov 18 08:26:55 2019 GMT
            Not After : Nov 17 08:26:55 2029 GMT
        Subject: CN=5dd255db-0054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d2:de:0a:c9:8c:51:96:f7:0b:4b:e4:b0:50:
                    a6:0f:f6:ed:e8:62:12:b5:69:b4:60:3f:78:1d:4d:
                    48:65:ec:33:7c:d5:7f:f9:8f:b2:7b:72:a4:9b:3f:
                    d9:bd:08:5a:13:30:b8:f3:bb:4c:4d:e3:88:02:59:
                    bc:eb:f1:8d:14:b0:83:25:a3:90:f4:5e:a9:e8:57:
                    eb:df:77:59:02:87:66:fd:e0:fe:c9:f3:1c:9d:16:
                    47:f1:8e:c9:96:5f:12:20:22:a5:33:f2:c7:2f:09:
                    22:63:6c:5e:a0:6b:5d:8c:1e:a4:39:2c:ea:01:a9:
                    d7:9a:18:74:e9:f9:9f:9c:58:1e:cb:a4:80:60:4c:
                    a7:51:58:bf:aa:3a:4c:60:42:51:53:a5:29:51:68:
                    f2:e3:48:e5:21:60:88:2c:45:74:51:40:dd:e8:22:
                    aa:9a:fa:f3:0f:f0:73:e3:4a:da:8a:eb:ec:ce:f4:
                    7a:71:5c:ae:e4:75:fe:0e:09:59:b4:8f:23:2d:9e:
                    67:fb:ff:89:c3:1a:e7:ff:57:22:08:b3:ca:93:31:
                    cd:5b:de:62:a8:95:2d:1b:59:1e:24:b3:cb:50:45:
                    f0:91:6c:02:a7:6b:e8:62:d1:d4:75:cc:ab:89:a0:
                    cf:46:30:3e:fe:1b:a0:a4:52:ef:4a:47:61:77:4c:
                    c8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:96:73:60:C9:D7:CF:FC:34:24:87:F7:E8:C6:1E:5D:0E:DC:2D:1C
            X509v3 Authority Key Identifier:
                keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/3365633609DD11EA9707D165F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.63.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:a8:34:ce:9a:1e:85:d9:d0:02:ea:c9:50:a1:db:ec:86:41:
         73:18:00:d1:1f:55:46:65:d1:0a:6d:6d:87:b4:da:10:66:6b:
         63:f3:c8:46:23:b5:5c:d2:33:8f:4b:77:72:58:76:6c:d0:1f:
         99:cf:59:31:62:d3:21:6f:e6:56:d7:d6:79:1c:bf:ad:1d:6e:
         e0:fa:e2:85:c5:3d:77:18:45:13:60:e9:f9:39:82:c2:c1:92:
         2c:cb:5f:40:f6:c5:6f:c8:4d:90:30:e6:5a:7b:48:9e:4e:61:
         56:9c:96:76:88:21:1f:9e:39:bb:2d:0e:ad:d4:fe:ad:55:07:
         81:d4:cf:83:4b:70:b5:d6:39:ca:06:53:87:a1:44:07:69:86:
         40:c0:b3:01:62:92:bc:d4:a7:c3:5b:ec:97:d9:99:6d:63:2b:
         fc:08:ff:dd:9e:bb:69:b4:2d:5b:51:ab:9b:27:28:93:b2:66:
         50:41:d7:b7:02:15:28:38:26:af:45:48:aa:8e:cf:12:c6:cb:
         5d:18:da:11:18:d7:2f:83:90:5d:38:8c:72:93:f1:d2:1a:a7:
         24:be:48:fb:58:57:47:ac:69:ee:3f:c7:10:75:01:da:79:89:
         f3:dd:80:0d:87:53:a9:d5:ca:a4:c3:5a:6a:4e:e8:e2:6a:04:
         cf:92:eb:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org