Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/C1DD39CACFBF11EEA8FB4574775412E6.roa
File:                     C1DD39CACFBF11EEA8FB4574775412E6.roa (raw, json)
Hash identifier:          Q5pUSksntCvIgKgWSWWYT5WZcxdon8uSCDfTyZBPILk=
Subject key identifier:   B8:FD:AB:42:6B:77:9D:F2:2D:61:DA:F7:BA:A5:E5:9E:AC:37:D0:AA
Certificate issuer:       /CN=F3614ABBAF/serialNumber=7801603BB2F37046E0FAFDD7A74FCB06E3C40818
Certificate serial:       01B7
Authority key identifier: 78:01:60:3B:B2:F3:70:46:E0:FA:FD:D7:A7:4F:CB:06:E3:C4:08:18
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/C1DD39CACFBF11EEA8FB4574775412E6.roa
Signing time:             Tue 20 Feb 2024 07:14:59 +0000
ROA not before:           Tue 20 Feb 2024 07:14:56 +0000
ROA not after:            Mon 19 Jan 2026 07:14:56 +0000
asID:                     328341
IP address blocks:        102.164.0.0/19 maxlen: 24
                          2c0f:ec70::/32 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614ABBAF/serialNumber=7801603BB2F37046E0FAFDD7A74FCB06E3C40818
        Validity
            Not Before: Feb 20 07:14:56 2024 GMT
            Not After : Jan 19 07:14:56 2026 GMT
        Subject: CN=65d45173-bf69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d5:39:e5:7f:11:1b:af:19:ed:2f:8c:c9:f3:
                    0d:71:41:16:a6:aa:18:fa:f1:d5:35:39:7c:ab:b5:
                    ea:a0:dd:6f:5e:86:77:e3:d4:fb:27:99:69:66:cf:
                    cb:d7:4b:77:d1:4e:35:0d:78:d3:66:d6:32:42:fa:
                    7c:21:81:b8:60:9a:9a:de:ca:3d:fe:1b:0a:eb:a2:
                    b3:9a:0d:25:29:88:9d:34:04:73:b0:82:bd:98:9f:
                    5f:bf:a8:28:1e:eb:86:67:29:c6:0d:74:80:ca:2a:
                    87:d0:95:80:26:49:f8:1d:09:28:6e:94:a6:ed:57:
                    e5:1c:f6:98:60:19:bd:5b:52:23:27:29:75:c6:15:
                    ac:c6:76:9c:2b:15:2c:65:a2:1e:0c:6d:94:43:4a:
                    43:90:65:4b:b1:9b:68:63:65:75:84:bc:90:cc:08:
                    db:6d:07:a3:9b:f1:a7:4b:af:1c:bb:cd:74:4e:92:
                    b0:55:f8:04:8f:da:08:9f:f9:d6:ca:39:bf:c7:b8:
                    ad:4b:19:c6:88:36:63:04:90:27:88:4e:08:fa:ac:
                    e1:19:1d:9a:72:34:67:90:40:35:54:90:89:0a:43:
                    f2:05:57:77:a4:c7:12:d6:e5:43:53:f3:12:d1:6c:
                    54:1c:33:83:32:26:de:fa:61:4a:79:9e:23:50:af:
                    65:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FD:AB:42:6B:77:9D:F2:2D:61:DA:F7:BA:A5:E5:9E:AC:37:D0:AA
            X509v3 Authority Key Identifier:
                keyid:78:01:60:3B:B2:F3:70:46:E0:FA:FD:D7:A7:4F:CB:06:E3:C4:08:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/C1DD39CACFBF11EEA8FB4574775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  102.164.0.0/19
                IPv6:
                  2c0f:ec70::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:9f:fb:9d:72:28:59:6c:9d:c4:8b:2c:4f:3e:29:c6:77:b0:
         e3:d7:8e:0f:63:cf:36:bd:9a:8d:12:d9:e8:b6:55:8a:b7:3e:
         f7:f1:8e:57:45:ea:8b:70:bc:82:a3:48:c8:ac:79:84:1a:d5:
         53:2f:9c:54:97:7c:61:e3:8e:e9:11:6b:b9:14:51:18:4c:82:
         ef:cb:1e:0c:93:2a:b6:5d:78:87:9b:7c:5e:2b:7d:86:e9:84:
         ae:40:b7:09:bf:75:67:a3:01:64:6d:28:fa:29:06:26:e5:75:
         12:4c:ea:96:02:94:38:02:bd:68:ee:96:e3:9d:be:67:22:8c:
         f9:9e:69:1b:6b:3b:43:51:61:a7:df:40:5f:0f:67:63:39:a3:
         2a:78:b2:a7:d6:6e:0a:a0:86:ad:58:43:ce:a1:8b:08:7f:f0:
         c5:71:b8:11:d2:63:18:a2:d7:6f:82:7b:ee:d1:5b:52:3c:f0:
         ac:5d:ac:99:10:72:ba:64:90:79:5d:1c:dc:31:29:10:0f:51:
         52:ec:13:fd:15:5b:11:33:48:cf:e1:d9:60:4a:c0:f2:82:dd:
         8f:28:12:63:97:72:2d:04:f2:77:36:1a:e9:88:13:ed:63:f6:
         7a:73:c9:0d:df:b6:9e:58:5d:a3:33:3f:05:ec:92:d7:08:49:
         d1:c6:9b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----