Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/E2E92A384D8811EA9503E918F8AEA228.roa
File:                     E2E92A384D8811EA9503E918F8AEA228.roa (raw, json)
Hash identifier:          8ApNvJ5iZQ1hoY98XoCRAaF/IDuPBrIvVY92OK6KpAE=
Subject key identifier:   39:59:A4:57:DE:7F:E2:FA:7B:B4:DF:11:7A:AD:FC:50:52:DC:A4:58
Certificate issuer:       /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial:       010B
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/E2E92A384D8811EA9503E918F8AEA228.roa
Signing time:             Wed 12 Feb 2020 11:14:58 +0000
ROA not before:           Wed 12 Feb 2020 11:14:44 +0000
ROA not after:            Tue 12 Feb 2030 11:14:44 +0000
asID:                     327687
IP address blocks:        137.63.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
                          rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 May 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
        Validity
            Not Before: Feb 12 11:14:44 2020 GMT
            Not After : Feb 12 11:14:44 2030 GMT
        Subject: CN=5e43de32-d516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3f:da:6c:68:1d:bc:9c:1a:f4:77:db:9a:cb:
                    79:e9:10:e0:65:8c:6e:b8:de:2e:5e:6b:58:94:9c:
                    8e:29:fa:0b:0c:45:07:69:70:e5:66:3b:6b:68:49:
                    34:e6:7a:7f:da:60:71:80:3c:6b:ed:34:0a:86:ad:
                    39:20:49:26:93:93:fa:e4:24:14:9f:d4:e7:a4:de:
                    c1:6b:2a:10:4a:37:ef:8c:59:ad:48:2c:bd:ba:36:
                    e3:0a:15:bc:5f:dd:17:7a:d4:7d:49:ae:4c:13:5c:
                    7c:77:3d:65:41:71:98:a5:12:02:c8:84:0d:a4:17:
                    fc:57:17:c1:0e:cb:d2:bf:ba:a5:88:f3:ac:ed:18:
                    50:3c:4a:09:0c:e2:cc:95:9e:ee:fc:96:2e:a9:2f:
                    0a:47:6c:fe:ad:c9:a8:d2:41:6c:95:31:37:15:58:
                    8b:2b:a3:bc:d2:00:10:87:6c:f0:59:5d:79:9e:1b:
                    83:1f:4c:a9:1a:29:ff:f5:58:d9:19:00:4f:3f:39:
                    5f:78:7b:eb:ee:22:d1:74:65:20:83:06:3c:df:8d:
                    8f:3a:ea:bb:8b:25:9b:b8:98:ac:6b:e3:00:6b:1f:
                    ca:b0:f9:9f:e6:09:4a:0a:d4:c0:d6:e4:f4:02:c8:
                    7e:5b:af:73:7e:c8:35:9f:0a:5b:53:de:ef:c7:67:
                    59:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:59:A4:57:DE:7F:E2:FA:7B:B4:DF:11:7A:AD:FC:50:52:DC:A4:58
            X509v3 Authority Key Identifier:
                keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/E2E92A384D8811EA9503E918F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.63.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:73:8e:25:68:1a:66:cc:27:2d:47:26:dd:b9:9f:7f:ed:1b:
         06:4a:a3:3a:5d:81:e8:a0:c5:67:a2:36:b2:f6:9d:37:2d:fa:
         d1:10:f3:e6:ef:aa:ea:53:c0:cf:fe:62:6c:3a:3e:3d:95:4e:
         c8:ba:71:20:45:16:7d:70:60:a9:0c:35:23:1c:00:84:46:54:
         73:b9:16:c7:3a:e4:48:93:f8:3b:46:bb:d1:09:65:ae:b9:3e:
         4a:eb:fd:49:30:3a:59:23:fa:93:a2:e4:b1:20:1d:4e:54:4c:
         f8:af:52:ff:a5:87:88:f3:28:3e:fa:a6:68:1a:f8:bc:a6:96:
         12:a9:c1:53:a7:2e:16:7d:28:43:78:df:6f:0d:3c:22:3e:73:
         de:be:6b:f7:6b:9a:c9:02:b8:62:8e:21:a5:65:f7:ae:8e:01:
         46:b6:96:6f:e9:57:df:60:0d:a7:6e:fe:ec:c3:3e:fa:45:1e:
         0a:97:2a:b6:c5:43:fa:0a:85:d0:8b:f0:98:f5:24:43:a3:30:
         6d:fa:ad:c6:e2:ee:f8:bc:41:c2:04:cc:a5:6e:07:3b:95:31:
         0f:52:8e:e2:86:de:39:6a:11:6e:7b:11:5f:14:2b:b0:37:f3:
         6c:26:09:e0:74:55:c3:d7:06:16:54:e3:1f:5c:89:56:fa:4d:
         ec:59:08:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 02:39:05 2024 by rpki-client on console-ams.rpki-client.org