Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/E469B7A209DF11EAAA16F467F8AEA228.roa
File:                     E469B7A209DF11EAAA16F467F8AEA228.roa (raw, json)
Hash identifier:          ZRDhSnRH7HBEfkVRxB1nIcCOVgEq85LfxK7bA2lpkXo=
Subject key identifier:   73:B2:FE:3F:C6:95:B2:2E:CA:33:EF:8C:28:43:8D:93:1C:2C:CF:30
Certificate issuer:       /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial:       58
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/E469B7A209DF11EAAA16F467F8AEA228.roa
Signing time:             Mon 18 Nov 2019 08:46:20 +0000
ROA not before:           Mon 18 Nov 2019 08:46:16 +0000
ROA not after:            Sat 17 Nov 2029 08:46:16 +0000
asID:                     327687
IP address blocks:        137.63.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
                          rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
        Validity
            Not Before: Nov 18 08:46:16 2019 GMT
            Not After : Nov 17 08:46:16 2029 GMT
        Subject: CN=5dd25a5c-bd4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:74:36:9c:92:31:82:0c:a7:21:94:01:93:40:
                    01:18:ca:b5:cb:98:e2:50:bf:31:ed:07:d6:12:c0:
                    27:4e:45:be:75:0f:0a:ab:5b:61:ea:db:f3:f0:2d:
                    c3:45:f9:70:2d:c7:21:92:74:e3:3c:4b:6f:f5:b8:
                    50:4f:c6:a2:99:06:fb:d2:94:31:a2:57:ba:e1:2b:
                    b3:77:3a:2d:05:1a:b6:a6:94:98:5d:16:5f:11:27:
                    ee:8d:e6:20:82:a4:77:e5:0c:3c:b1:ba:65:d7:66:
                    58:0d:a6:b0:1a:b2:ad:45:28:38:01:09:af:14:aa:
                    f6:29:71:54:5b:32:1b:a8:23:58:d1:2f:da:30:50:
                    0c:aa:b0:8f:30:97:28:c9:d8:c9:bf:91:86:16:d4:
                    ba:a7:2b:bd:62:9e:7a:3a:7f:a5:8c:c5:3b:e2:bf:
                    5e:b3:88:04:dc:ac:5a:84:5e:36:2d:31:79:3d:bd:
                    4f:ee:3e:5b:0a:67:3c:ef:19:16:d0:83:e6:6f:01:
                    73:be:98:43:b5:f0:42:ab:78:2e:18:a2:90:4c:49:
                    6f:01:f7:be:06:39:2c:7b:01:57:0c:16:19:d7:65:
                    97:56:9d:0e:10:c8:67:83:7f:ca:ab:88:43:86:7a:
                    d9:b9:a5:4b:62:60:3b:27:06:c1:a6:29:fc:49:a3:
                    9b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B2:FE:3F:C6:95:B2:2E:CA:33:EF:8C:28:43:8D:93:1C:2C:CF:30
            X509v3 Authority Key Identifier:
                keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/E469B7A209DF11EAAA16F467F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.63.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:30:3b:6c:c2:75:2c:ae:ab:e1:fa:81:5b:8a:3b:0e:b8:60:
         c6:64:b9:dd:c2:0f:cc:8b:ae:f8:d7:c0:30:04:9a:9e:c0:d9:
         66:7b:60:4b:79:c9:c9:1e:5e:61:1f:53:94:0d:f9:3f:21:6b:
         7d:bb:0a:c1:e3:e3:c1:5f:ab:10:aa:02:e7:e1:a7:b0:04:fc:
         8c:2e:7c:2e:aa:91:ac:f7:d0:55:79:5c:9a:7b:b0:3b:04:1b:
         00:76:14:67:bd:b0:b7:13:77:9d:c0:f5:58:b6:93:da:ee:05:
         33:0f:0b:21:44:48:bb:b6:fd:a3:08:e8:6b:22:c1:e6:7e:a3:
         6c:dd:f8:72:2c:68:69:ef:38:9e:ce:87:29:a2:f5:c8:b4:21:
         2c:ce:16:79:fe:27:cd:95:d3:42:76:82:5c:71:75:6f:7f:ac:
         83:f9:13:c0:d5:52:f8:0f:27:6f:86:e0:75:41:ed:4b:75:87:
         35:60:ce:29:7c:2e:71:60:a7:09:8b:7b:0d:5a:2d:ce:5a:a2:
         f3:c0:8a:bb:b0:88:3f:bb:cf:85:37:05:35:4f:c7:47:96:01:
         1f:b7:65:3f:47:c0:f5:fc:ba:e7:52:9a:71:ce:75:ef:58:ad:
         06:30:97:7d:13:2f:60:45:00:42:ef:2a:c8:67:7c:dd:c0:b0:
         70:54:55:fc
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIBWDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYy
QjM4RUFSMTEwLwYDVQQFEygyM0U2M0JBNTUxMzY1RkM1OTEyM0E2MzcxMkQ3OTc4
MkFGMTAyOEQxMB4XDTE5MTExODA4NDYxNloXDTI5MTExNzA4NDYxNlowGDEWMBQG
A1UEAxMNNWRkMjVhNWMtYmQ0YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOR0NpySMYIMpyGUAZNAARjKtcuY4lC/Me0H1hLAJ05FvnUPCqtbYerb8/At
w0X5cC3HIZJ04zxLb/W4UE/GopkG+9KUMaJXuuErs3c6LQUatqaUmF0WXxEn7o3m
IIKkd+UMPLG6ZddmWA2msBqyrUUoOAEJrxSq9ilxVFsyG6gjWNEv2jBQDKqwjzCX
KMnYyb+RhhbUuqcrvWKeejp/pYzFO+K/XrOIBNysWoReNi0xeT29T+4+WwpnPO8Z
FtCD5m8Bc76YQ7XwQqt4LhiikExJbwH3vgY5LHsBVwwWGddll1adDhDIZ4N/yquI
Q4Z62bmlS2JgOycGwaYp/Emjm58CAwEAAaOCAmswggJnMB0GA1UdDgQWBBRzsv4/
xpWyLsoz74woQ42THCzPMDAfBgNVHSMEGDAWgBQj5julUTZfxZEjpjcS15eCrxAo
0TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MkIzOEUvODdFRjk3MTBERjYxMTFFOThGMzk0NTMwRjhBRUEyMjgvSS1ZN3BW
RTJYOFdSSTZZM0V0ZVhncThRS05FLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
SS1ZN3BWRTJYOFdSSTZZM0V0ZVhncThRS05FLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MkIzOEUvODdFRjk3MTBERjYxMTFFOThGMzk0NTMwRjhBRUEy
MjgvRTQ2OUI3QTIwOURGMTFFQUFBMTZGNDY3RjhBRUEyMjgucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAiT+BMA0GCSqGSIb3DQEBCwUAA4IBAQBoMDts
wnUsrqvh+oFbijsOuGDGZLndwg/Mi67418AwBJqewNlme2BLecnJHl5hH1OUDfk/
IWt9uwrB4+PBX6sQqgLn4aewBPyMLnwuqpGs99BVeVyae7A7BBsAdhRnvbC3E3ed
wPVYtpPa7gUzDwshREi7tv2jCOhrIsHmfqNs3fhyLGhp7ziezocpovXItCEszhZ5
/ifNldNCdoJccXVvf6yD+RPA1VL4DydvhuB1Qe1LdYc1YM4pfC5xYKcJi3sNWi3O
WqLzwIq7sIg/u8+FNwU1T8dHlgEft2U/R8D1/LrnUppxznXvWK0GMJd9Ey9gRQBC
7yrIZ3zdwLBwVFX8
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:52 2024 by rpki-client on console-fra.rpki-client.org