Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/F34BCF4E09E911EA98DA0470F8AEA228.roa
File:                     F34BCF4E09E911EA98DA0470F8AEA228.roa (raw, json)
Hash identifier:          al5Z/n8ve7/fLOaOFl9Uo5HAe1r0bV6MaSQDpKdc7qQ=
Subject key identifier:   04:00:E4:C6:8E:98:4E:19:5C:9D:69:84:0E:19:27:A7:E1:E6:26:86
Certificate issuer:       /CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
Certificate serial:       9E
Authority key identifier: 23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/F34BCF4E09E911EA98DA0470F8AEA228.roa
Signing time:             Mon 18 Nov 2019 09:58:20 +0000
ROA not before:           Mon 18 Nov 2019 09:58:16 +0000
ROA not after:            Sat 17 Nov 2029 09:58:16 +0000
asID:                     327687
IP address blocks:        137.63.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.mft
                          rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B38EAR/serialNumber=23E63BA551365FC59123A63712D79782AF1028D1
        Validity
            Not Before: Nov 18 09:58:16 2019 GMT
            Not After : Nov 17 09:58:16 2029 GMT
        Subject: CN=5dd26b3c-504b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:48:ca:66:5b:0e:b7:d3:b8:e0:4e:93:a7:
                    dc:f1:ac:f1:26:c7:aa:88:01:f6:bd:93:65:39:29:
                    d5:ed:b2:21:c1:65:2f:62:95:31:94:43:1f:11:9a:
                    2e:cb:8a:f6:20:61:b0:2d:2a:89:96:2a:85:89:dd:
                    29:ec:a2:58:da:32:73:86:51:4d:b9:53:f6:fa:41:
                    52:21:fd:ea:9b:99:2b:11:8f:f8:c3:67:95:a3:a3:
                    be:94:1a:4f:a9:5b:f0:47:e3:6c:48:c0:12:19:6f:
                    45:46:98:92:67:a7:0d:7d:dc:ac:7d:d9:c3:e9:1e:
                    0d:22:ce:06:d8:cd:a9:8d:00:39:63:d0:77:b3:b2:
                    5e:b5:4d:74:ad:13:35:b5:2a:2f:8d:3d:7c:80:7d:
                    66:6b:f0:16:b1:e6:3b:69:20:11:a3:e0:55:56:41:
                    d3:7b:cc:28:ea:64:0a:57:e7:f8:0c:75:a5:b9:72:
                    a4:89:0e:7d:f2:17:df:8f:b5:01:0b:86:bb:b6:f3:
                    63:57:5f:54:1a:a5:06:61:e6:88:a6:6a:b0:3a:4a:
                    8f:7a:fd:b6:32:25:ab:43:6d:92:e8:0b:f4:e1:6e:
                    c3:9b:a3:c4:de:8b:10:43:30:79:e9:69:cc:61:c0:
                    9b:44:3c:94:28:4a:8d:55:75:e0:09:94:1d:5f:b4:
                    63:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:00:E4:C6:8E:98:4E:19:5C:9D:69:84:0E:19:27:A7:E1:E6:26:86
            X509v3 Authority Key Identifier:
                keyid:23:E6:3B:A5:51:36:5F:C5:91:23:A6:37:12:D7:97:82:AF:10:28:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/I-Y7pVE2X8WRI6Y3EteXgq8QKNE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B38E/87EF9710DF6111E98F394530F8AEA228/F34BCF4E09E911EA98DA0470F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.63.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:90:63:8a:0f:e5:cf:58:7e:ca:fc:d4:ef:cd:16:4c:96:91:
         80:b7:c5:38:43:ae:b2:1a:9a:f7:58:71:c3:33:59:5e:8b:74:
         ba:b6:e4:d8:84:39:21:12:98:2e:a5:76:8b:10:23:72:be:a9:
         a2:5e:2a:7c:0f:c5:5f:3b:d5:fe:68:d8:fa:62:6f:1d:ba:7b:
         75:dd:f8:64:2e:5e:12:e3:43:33:8d:8f:ab:ae:02:b0:02:74:
         a9:94:59:8b:53:6f:67:ef:d5:04:d8:65:57:2d:e8:9a:ce:9c:
         4d:f1:aa:31:96:ac:4b:42:77:52:e1:1f:09:15:bb:83:fb:61:
         09:91:df:50:7a:65:1c:f7:7d:d3:a9:12:91:80:fe:f3:51:35:
         bd:59:b4:2d:ad:fe:23:48:bb:59:7c:71:36:78:08:9e:e4:c0:
         a4:00:a6:89:51:d8:68:fa:cc:4c:ee:ba:2d:10:7f:3f:b2:b6:
         06:3d:be:8d:85:fb:df:a0:fa:1e:36:0e:b6:01:fb:c3:99:3e:
         9b:06:0e:57:7a:a8:63:d9:b2:3f:5b:67:0a:21:0f:84:81:c2:
         17:fc:77:7f:c3:0d:f6:9e:e8:50:0b:4b:80:0c:5a:c3:86:d9:
         58:4e:9d:41:81:5d:1c:93:28:21:89:bc:68:63:3f:d2:8c:83:
         e1:18:ad:fc
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgICAJ4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkIzOEVBUjExMC8GA1UEBRMoMjNFNjNCQTU1MTM2NUZDNTkxMjNBNjM3MTJENzk3
ODJBRjEwMjhEMTAeFw0xOTExMTgwOTU4MTZaFw0yOTExMTcwOTU4MTZaMBgxFjAU
BgNVBAMTDTVkZDI2YjNjLTUwNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLeUjKZlsOt9O44E6Tp9zxrPEmx6qIAfa9k2U5KdXtsiHBZS9ilTGUQx8R
mi7LivYgYbAtKomWKoWJ3SnsoljaMnOGUU25U/b6QVIh/eqbmSsRj/jDZ5Wjo76U
Gk+pW/BH42xIwBIZb0VGmJJnpw193Kx92cPpHg0izgbYzamNADlj0Hezsl61TXSt
EzW1Ki+NPXyAfWZr8Bax5jtpIBGj4FVWQdN7zCjqZApX5/gMdaW5cqSJDn3yF9+P
tQELhru282NXX1QapQZh5oimarA6So96/bYyJatDbZLoC/ThbsObo8TeixBDMHnp
acxhwJtEPJQoSo1VdeAJlB1ftGPpAgMBAAGjggJrMIICZzAdBgNVHQ4EFgQUBADk
xo6YThlcnWmEDhknp+HmJoYwHwYDVR0jBBgwFoAUI+Y7pVE2X8WRI6Y3EteXgq8Q
KNEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJCMzhFLzg3RUY5NzEwREY2MTExRTk4RjM5NDUzMEY4QUVBMjI4L0ktWTdw
VkUyWDhXUkk2WTNFdGVYZ3E4UUtORS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0ktWTdwVkUyWDhXUkk2WTNFdGVYZ3E4UUtORS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjJCMzhFLzg3RUY5NzEwREY2MTExRTk4RjM5NDUzMEY4QUVB
MjI4L0YzNEJDRjRFMDlFOTExRUE5OERBMDQ3MEY4QUVBMjI4LnJvYTAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAIk/wTANBgkqhkiG9w0BAQsFAAOCAQEAZpBj
ig/lz1h+yvzU780WTJaRgLfFOEOushqa91hxwzNZXot0urbk2IQ5IRKYLqV2ixAj
cr6pol4qfA/FXzvV/mjY+mJvHbp7dd34ZC5eEuNDM42Pq64CsAJ0qZRZi1NvZ+/V
BNhlVy3oms6cTfGqMZasS0J3UuEfCRW7g/thCZHfUHplHPd906kSkYD+81E1vVm0
La3+I0i7WXxxNngInuTApACmiVHYaPrMTO66LRB/P7K2Bj2+jYX736D6HjYOtgH7
w5k+mwYOV3qoY9myP1tnCiEPhIHCF/x3f8MN9p7oUAtLgAxaw4bZWE6dQYFdHJMo
IYm8aGM/0oyD4Rit/A==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:52 2024 by rpki-client on console-fra.rpki-client.org