Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/BE6404FAD4DF11EBBA81A747F8AEA228.roa
File:                     BE6404FAD4DF11EBBA81A747F8AEA228.roa (raw, json)
Hash identifier:          GH3Ja4snhwLWpp5ydwcxU3wl3XfH8RIdlELqY5Zsj+E=
Subject key identifier:   71:3D:C0:5A:75:86:F3:77:43:EE:E4:FA:9B:0B:FA:50:8C:14:6D:3F
Certificate issuer:       /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial:       087A
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/BE6404FAD4DF11EBBA81A747F8AEA228.roa
Signing time:             Thu 24 Jun 2021 11:31:40 +0000
ROA not before:           Thu 24 Jun 2021 11:31:37 +0000
ROA not after:            Wed 30 Apr 2031 11:31:37 +0000
asID:                     327750
IP address blocks:        2c0f:f4e8::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2170 (0x87a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
        Validity
            Not Before: Jun 24 11:31:37 2021 GMT
            Not After : Apr 30 11:31:37 2031 GMT
        Subject: CN=60d46d1c-61e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:52:03:05:e2:23:60:6c:00:b8:f1:0d:94:7a:
                    90:e4:cf:9b:2a:91:3b:16:1e:3a:70:fe:0e:4b:36:
                    50:e6:9b:fa:ed:8f:5c:80:fc:0b:ed:ee:1c:1d:8c:
                    ed:3e:01:cb:91:da:95:5a:c5:13:b6:9c:00:86:2b:
                    d9:00:1b:a1:16:8c:b9:75:f8:52:46:f9:18:4d:3c:
                    10:df:37:48:22:fa:fb:0f:f5:dd:ed:a9:04:ca:d2:
                    7f:0a:dd:b6:9b:f8:06:02:9b:4a:31:fb:72:50:1c:
                    cb:c1:04:eb:a6:9f:8e:0f:6a:45:a3:0d:78:b2:c3:
                    02:3a:85:97:f9:1e:db:ac:80:18:83:cd:92:ce:d0:
                    e5:1b:04:6a:d9:4e:87:f5:f8:30:69:c7:db:12:a4:
                    89:37:31:63:8b:87:81:ac:44:9f:9b:e9:f7:f5:8f:
                    5a:42:b9:4b:f9:19:a6:31:17:b9:3f:5e:07:dc:6a:
                    9b:b9:59:37:f6:ed:97:0d:cf:c6:3c:05:9d:bb:c6:
                    e5:99:03:11:58:32:65:86:0f:fe:22:88:c8:46:dc:
                    0c:39:36:ed:e0:20:27:ee:96:6b:12:3b:6d:dc:22:
                    85:99:3d:b8:21:4c:05:e4:9e:1a:21:17:11:72:c7:
                    bf:a7:ff:6a:45:b7:fa:c0:bd:f8:6d:3a:b3:d1:52:
                    4f:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3D:C0:5A:75:86:F3:77:43:EE:E4:FA:9B:0B:FA:50:8C:14:6D:3F
            X509v3 Authority Key Identifier:
                keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/BE6404FAD4DF11EBBA81A747F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f4e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:1c:f4:11:99:90:74:33:01:7e:7b:8e:62:61:5b:1e:c0:a7:
         72:aa:90:96:3d:48:e8:f3:e1:46:85:1f:6f:00:63:d3:74:34:
         aa:7b:fb:54:60:b8:35:68:8a:e4:cb:af:b3:50:fa:63:2f:96:
         a6:78:fc:8a:24:1a:1c:11:01:17:36:47:c4:11:c6:40:f0:16:
         2e:ce:f3:ac:9e:a1:5f:f5:75:c5:f0:dd:cc:35:1f:96:10:db:
         d7:65:12:1a:4a:42:77:cd:5e:41:a4:6d:aa:38:7b:68:69:8c:
         c4:46:a6:a7:38:9c:20:93:a8:14:bf:31:99:00:db:bd:2d:46:
         49:bf:85:85:02:ba:f8:16:cd:b0:52:37:c4:28:cc:4e:50:45:
         d1:2c:52:37:d8:bb:4a:f1:be:e9:cb:7f:53:eb:d3:9a:0c:c7:
         85:6e:94:b4:fd:5f:c3:dc:35:42:85:69:03:d7:e8:07:a2:d3:
         ab:64:3d:41:1c:9e:77:04:9d:4c:29:c3:25:5a:ba:93:77:1f:
         79:0a:39:41:6e:57:9c:d7:db:c8:90:db:fc:ad:1c:68:65:a9:
         11:c2:43:33:34:4c:a1:ce:a5:26:f3:10:85:5e:bf:e9:4d:c6:
         b1:f0:c3:b7:87:86:7d:0a:ef:93:4e:db:17:27:29:12:45:73:
         80:b6:b5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----