Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/59A177F88DCF11EA93675420F8AEA228.roa
File:                     59A177F88DCF11EA93675420F8AEA228.roa (raw, json)
Hash identifier:          iJ4bpcIMbfbrSSynUTnD1MYU3E3BFy11GDgoP7CyilU=
Subject key identifier:   F4:EA:32:E5:45:A9:8B:E4:92:2D:1A:D7:33:8F:E8:00:D7:27:CD:53
Certificate issuer:       /CN=F3610674AF/serialNumber=7046A652760C8E9035701D6A44DC271A0E33015C
Certificate serial:       0178
Authority key identifier: 70:46:A6:52:76:0C:8E:90:35:70:1D:6A:44:DC:27:1A:0E:33:01:5C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/59A177F88DCF11EA93675420F8AEA228.roa
Signing time:             Mon 04 May 2020 06:20:29 +0000
ROA not before:           Mon 04 May 2020 06:20:25 +0000
ROA not after:            Sat 04 May 2030 06:20:25 +0000
asID:                     328453
IP address blocks:        2c0f:ed28::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610674AF/serialNumber=7046A652760C8E9035701D6A44DC271A0E33015C
        Validity
            Not Before: May  4 06:20:25 2020 GMT
            Not After : May  4 06:20:25 2030 GMT
        Subject: CN=5eafb42d-8580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1e:dc:5a:46:6d:ee:f8:3a:1d:d8:9e:c9:32:
                    fe:75:45:58:f2:d1:59:ea:d4:1d:5c:81:e7:0c:8e:
                    5c:1d:d4:c4:23:70:60:29:f4:01:4e:22:dd:83:08:
                    d2:b6:3d:2f:3a:d9:db:92:e7:26:4b:01:79:a8:30:
                    a5:68:7e:87:35:b1:f0:4c:ac:cf:65:ea:b7:b8:37:
                    62:46:e6:59:ea:0b:8a:b0:86:e3:31:35:24:41:fb:
                    74:84:9a:f1:35:88:a7:66:f4:71:68:c0:16:68:80:
                    2c:5c:22:41:f9:94:ec:8c:26:41:9b:5a:05:69:3d:
                    57:d5:90:35:d8:a7:08:a5:79:a8:90:fb:91:a8:85:
                    8d:05:9a:ee:6f:a6:8e:2a:ee:d1:1e:c3:d0:af:1e:
                    ce:82:22:1b:25:37:d9:3f:ff:2b:c4:03:fb:8a:59:
                    c9:af:38:43:42:fa:eb:aa:25:58:d9:1d:70:4d:04:
                    f2:85:23:57:f7:d1:bd:20:99:85:93:f1:94:63:47:
                    16:17:b2:f0:35:1f:9a:92:ec:97:51:3f:fc:e5:c4:
                    a4:c8:1f:bb:72:d8:b9:73:27:b3:43:ef:ae:6e:3e:
                    d3:f6:51:48:9d:65:52:70:05:be:28:f5:e6:73:29:
                    80:23:2c:ba:0d:d5:1e:2b:7b:aa:94:f5:a6:5b:57:
                    c5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EA:32:E5:45:A9:8B:E4:92:2D:1A:D7:33:8F:E8:00:D7:27:CD:53
            X509v3 Authority Key Identifier:
                keyid:70:46:A6:52:76:0C:8E:90:35:70:1D:6A:44:DC:27:1A:0E:33:01:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/cEamUnYMjpA1cB1qRNwnGg4zAVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cEamUnYMjpA1cB1qRNwnGg4zAVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610674/FE8B3976725911E991F8EB70F8AEA228/59A177F88DCF11EA93675420F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ed28::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:6a:f8:34:e8:2a:04:d8:02:88:71:29:1b:fc:17:c4:97:9c:
         30:3d:58:74:d6:8a:ae:21:7c:5f:fe:93:2b:8a:67:26:ca:d5:
         31:0e:d9:41:51:1c:d0:d8:9e:9e:b2:d8:6d:eb:d7:c3:32:a1:
         ef:91:dc:b6:86:1e:31:ac:5d:21:3d:6a:f1:9c:2f:07:c9:8c:
         d6:a5:4c:88:1a:3c:58:b6:0a:d6:f0:50:65:d4:44:94:83:38:
         c2:b8:16:f3:7f:bb:7f:d1:c9:24:42:d1:6a:6b:1c:74:4c:c1:
         64:40:48:35:c6:91:17:e5:2d:8c:6a:82:87:39:87:a7:aa:3b:
         90:70:10:30:7f:7e:3b:70:c7:3b:d5:3a:d8:7a:11:cb:ce:02:
         f3:57:8c:84:d4:d0:0a:04:de:4b:ca:58:a1:bb:58:28:a9:4c:
         5d:3b:16:ef:87:ca:a4:16:bb:8b:80:0e:d8:c0:17:8e:f2:58:
         75:b1:8b:19:b8:8a:5f:16:5e:1b:6f:d8:b2:ab:1e:31:3c:bd:
         31:0c:32:f2:9b:55:2e:07:e1:2a:ae:7f:2b:cb:19:da:91:60:
         a9:35:20:af:47:85:54:9a:83:c9:5f:10:e3:1b:e6:65:8d:3c:
         a7:35:a4:03:21:1f:a8:6c:39:ae:94:d9:96:f0:f6:cd:94:c8:
         02:da:44:31
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAXgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTA2NzRBRjExMC8GA1UEBRMoNzA0NkE2NTI3NjBDOEU5MDM1NzAxRDZBNDREQzI3
MUEwRTMzMDE1QzAeFw0yMDA1MDQwNjIwMjVaFw0zMDA1MDQwNjIwMjVaMBgxFjAU
BgNVBAMTDTVlYWZiNDJkLTg1ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC9HtxaRm3u+Dod2J7JMv51RVjy0Vnq1B1cgecMjlwd1MQjcGAp9AFOIt2D
CNK2PS862duS5yZLAXmoMKVofoc1sfBMrM9l6re4N2JG5lnqC4qwhuMxNSRB+3SE
mvE1iKdm9HFowBZogCxcIkH5lOyMJkGbWgVpPVfVkDXYpwileaiQ+5GohY0Fmu5v
po4q7tEew9CvHs6CIhslN9k//yvEA/uKWcmvOENC+uuqJVjZHXBNBPKFI1f30b0g
mYWT8ZRjRxYXsvA1H5qS7JdRP/zlxKTIH7ty2LlzJ7ND765uPtP2UUidZVJwBb4o
9eZzKYAjLLoN1R4re6qU9aZbV8XdAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU9Ooy
5UWpi+SSLRrXM4/oANcnzVMwHwYDVR0jBBgwFoAUcEamUnYMjpA1cB1qRNwnGg4z
AVwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjEwNjc0L0ZFOEIzOTc2NzI1OTExRTk5MUY4RUI3MEY4QUVBMjI4L2NFYW1V
bllNanBBMWNCMXFSTnduR2c0ekFWdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2NFYW1VbllNanBBMWNCMXFSTnduR2c0ekFWdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjEwNjc0L0ZFOEIzOTc2NzI1OTExRTk5MUY4RUI3MEY4
QUVBMjI4LzU5QTE3N0Y4OERDRjExRUE5MzY3NTQyMEY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD+0oMA0GCSqGSIb3DQEB
CwUAA4IBAQA6avg06CoE2AKIcSkb/BfEl5wwPVh01oquIXxf/pMrimcmytUxDtlB
URzQ2J6estht69fDMqHvkdy2hh4xrF0hPWrxnC8HyYzWpUyIGjxYtgrW8FBl1ESU
gzjCuBbzf7t/0ckkQtFqaxx0TMFkQEg1xpEX5S2MaoKHOYenqjuQcBAwf347cMc7
1TrYehHLzgLzV4yE1NAKBN5Lylihu1goqUxdOxbvh8qkFruLgA7YwBeO8lh1sYsZ
uIpfFl4bb9iyqx4xPL0xDDLym1UuB+Eqrn8ryxnakWCpNSCvR4VUmoPJXxDjG+Zl
jTynNaQDIR+obDmulNmW8PbNlMgC2kQx
-----END CERTIFICATE-----