Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/E75EC21A5AE011E6BDC8B732F8AEA228.roa
File:                     E75EC21A5AE011E6BDC8B732F8AEA228.roa (raw, json)
Hash identifier:          ALBZd8kdrIS9KNur9rLRnWeMr0qyjIT357ULTOorec8=
Subject key identifier:   F4:ED:B7:3E:90:17:E4:76:03:7C:40:29:E0:CC:B3:07:50:73:C7:BE
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       02
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/E75EC21A5AE011E6BDC8B732F8AEA228.roa
Signing time:             Fri 05 Aug 2016 07:47:48 +0000
ROA not before:           Fri 05 Aug 2016 07:47:26 +0000
ROA not after:            Thu 31 Dec 2026 07:47:26 +0000
asID:                     327966
IP address blocks:        169.239.164.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                          rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 31 Mar 2024 00:16:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
        Validity
            Not Before: Aug  5 07:47:26 2016 GMT
            Not After : Dec 31 07:47:26 2026 GMT
        Subject: CN=57a444a4-f50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:26:52:28:4f:54:2e:34:d8:51:a2:f6:95:
                    dc:7e:e4:9c:87:8c:4b:69:98:02:26:cf:2a:47:56:
                    a1:c1:cb:08:b3:60:18:9c:db:a7:4d:52:a0:94:33:
                    ae:f3:31:95:8a:8a:9f:fd:f3:6d:6b:15:e2:ab:12:
                    5c:73:71:c2:08:8f:5e:51:2e:93:8c:33:73:a6:b5:
                    1c:65:c0:70:46:89:7f:25:45:dc:2f:f5:34:fc:7f:
                    d1:99:bb:0b:84:86:b5:02:20:ae:68:1c:fd:a6:1b:
                    41:e0:34:2d:9e:b6:51:5f:56:93:30:df:a1:33:c7:
                    80:eb:89:9c:e4:a1:9d:cb:da:23:3b:36:16:bf:98:
                    b9:8e:d7:36:96:a3:87:e7:b1:c8:67:c7:c2:30:92:
                    fc:f4:a5:d8:9e:be:da:00:34:af:03:ef:a7:77:6c:
                    68:f4:c3:66:3c:fd:f0:dc:46:3f:36:57:aa:f1:ad:
                    b4:7e:5c:43:46:ff:16:1e:d6:83:0d:97:fc:b1:f5:
                    d5:b6:ea:23:60:c9:9c:fe:09:24:c0:6c:7f:9c:a3:
                    0c:84:42:bc:b5:e7:9d:93:52:49:9c:a9:3f:e7:bd:
                    e2:64:1a:8b:8f:5f:65:4a:cc:0b:e4:5e:41:78:f1:
                    32:23:e7:9d:4e:aa:f2:33:4f:62:06:6f:a9:12:11:
                    3d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:ED:B7:3E:90:17:E4:76:03:7C:40:29:E0:CC:B3:07:50:73:C7:BE
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/E75EC21A5AE011E6BDC8B732F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:7f:5a:28:6f:7b:61:99:4e:6a:c7:28:21:bc:4f:51:ba:b2:
         fe:dd:84:71:5d:27:2b:72:2b:9d:32:31:46:8f:55:21:38:60:
         1b:cb:a0:ef:98:14:a5:01:8b:6a:90:6c:be:90:02:49:4e:10:
         70:4f:6e:70:eb:c7:a8:4a:d0:ae:f4:62:0b:74:e9:5e:5a:ed:
         c6:99:41:d7:05:f0:39:63:c0:0b:fb:34:b6:77:ff:a0:67:da:
         1a:3d:c0:b8:86:6e:6b:8a:16:33:7d:bb:7f:36:6d:71:2d:5f:
         81:f2:78:00:15:c0:39:ba:b4:3c:d6:95:db:ed:72:55:f3:4a:
         57:b6:02:98:63:2c:71:19:45:9e:87:44:42:00:be:f3:00:47:
         d5:08:3b:a5:ce:b6:91:7d:35:f0:98:4c:0e:bf:51:ee:83:09:
         46:ec:b3:d4:4a:29:e7:a1:ed:7d:c5:50:77:49:66:98:fb:70:
         d3:79:d6:e9:ed:4a:01:17:92:17:b7:44:27:e4:1f:b4:d7:ba:
         1c:35:5e:40:81:e0:60:50:4b:08:c7:11:56:fc:a3:03:b4:0d:
         4d:76:71:bc:94:fe:8c:8c:4b:a2:f8:5c:f6:8c:1f:a1:e4:b6:
         56:49:fd:91:c3:aa:b2:8c:6b:b3:5e:81:1e:14:75:63:f9:bd:
         18:82:64:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 29 02:38:54 2024 by rpki-client on console-fra.rpki-client.org