Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/71527C825D0411EEA28107604AD9E6FC.roa
File:                     71527C825D0411EEA28107604AD9E6FC.roa (raw, json)
Hash identifier:          JEspqxm7k/yKfLqkh60Wxdp048Uar1Vepr+KMQVGZx8=
Subject key identifier:   CD:55:DC:6B:04:C7:10:E1:9C:19:A1:42:CE:79:11:D2:40:F4:25:89
Certificate issuer:       /CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
Certificate serial:       0347
Authority key identifier: 1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/71527C825D0411EEA28107604AD9E6FC.roa
Signing time:             Wed 27 Sep 2023 07:06:56 +0000
ROA not before:           Wed 27 Sep 2023 07:06:53 +0000
ROA not after:            Tue 30 Sep 2025 07:06:53 +0000
asID:                     328327
IP address blocks:        2c0f:c00:4010::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839 (0x347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3621C06AF/serialNumber=1DD16FD68BFF7CAB1AB91C55DA61FC0CDFF41743
        Validity
            Not Before: Sep 27 07:06:53 2023 GMT
            Not After : Sep 30 07:06:53 2025 GMT
        Subject: CN=6513d490-d7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3c:4a:bc:31:8e:2d:6d:48:65:8e:fa:99:2a:
                    0c:cd:f5:29:cb:51:56:b0:38:7b:1f:28:51:41:98:
                    45:1b:f7:32:f7:df:68:79:94:ac:8c:df:52:6e:49:
                    93:27:48:d5:d4:6e:4d:3f:0b:31:f6:f1:83:3f:f4:
                    d8:d5:70:97:35:1f:76:63:a1:d3:b1:d0:00:5c:4f:
                    0f:da:d0:66:d3:85:2c:16:04:34:a3:94:3b:32:c5:
                    88:fe:dd:89:00:61:38:98:f9:bf:58:b4:ab:f9:40:
                    7a:84:09:b1:77:5b:b5:d0:73:ad:4e:fc:6e:bc:87:
                    27:de:48:6d:97:5d:4f:d2:ba:11:c2:32:29:45:c1:
                    6d:f3:91:d5:5a:72:b3:77:af:48:04:42:41:c5:0d:
                    ae:0a:51:2d:10:0c:6a:8b:83:4d:6d:05:22:55:18:
                    5a:bb:c4:15:4f:ba:17:9f:19:f4:0e:31:28:5f:f3:
                    0e:08:4e:ea:61:ec:81:54:4d:f1:0f:d2:87:86:93:
                    fd:73:51:62:bf:d6:36:60:3a:ac:5f:b7:09:15:4f:
                    01:b1:c0:46:7e:19:d7:28:a5:bb:eb:4f:22:51:92:
                    f9:96:24:fe:28:a8:07:0f:85:5d:b7:f0:bb:7c:de:
                    36:62:94:9c:e2:30:11:a0:32:4d:83:81:32:a1:34:
                    43:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:55:DC:6B:04:C7:10:E1:9C:19:A1:42:CE:79:11:D2:40:F4:25:89
            X509v3 Authority Key Identifier:
                keyid:1D:D1:6F:D6:8B:FF:7C:AB:1A:B9:1C:55:DA:61:FC:0C:DF:F4:17:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/HdFv1ov_fKsauRxV2mH8DN_0F0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HdFv1ov_fKsauRxV2mH8DN_0F0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3621C06/58C9B78C205911EC991B6877D8A014CE/71527C825D0411EEA28107604AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:c00:4010::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:fb:b0:a6:9b:ad:0e:b4:3e:03:78:45:57:46:1d:f7:ff:37:
         ce:2b:c6:5a:bb:c3:f9:f3:23:cf:66:7e:7a:04:01:8a:33:40:
         b7:8e:cb:9f:5b:c2:00:2f:c9:bd:9f:3f:c7:33:ba:9a:27:f4:
         bc:06:50:ca:8b:42:ed:17:4a:9a:cf:ff:f2:48:40:e5:00:85:
         21:42:3c:d0:4d:77:a3:d9:0a:d1:4a:d3:79:3e:26:6e:e1:29:
         57:a3:0d:d0:ba:1f:dd:73:0d:44:b1:fd:3f:fb:1b:a8:a0:e1:
         a1:44:15:cf:c3:a8:78:84:07:69:ca:d8:b9:24:e7:51:85:b8:
         7e:bf:c3:39:92:bf:37:e7:fb:63:30:3f:c6:e8:7f:65:11:a2:
         f4:a1:88:f6:95:38:70:67:5b:cd:d4:30:68:93:4d:64:bb:1c:
         10:67:33:db:ff:17:70:f3:9e:51:5b:60:11:67:24:f8:5e:3e:
         85:6f:ea:0b:75:73:a9:3c:a0:67:dd:3a:9f:e5:56:dc:ab:65:
         a4:37:48:2b:a6:09:eb:a7:88:1c:69:bd:27:87:15:65:8b:7c:
         ca:51:7f:67:91:41:b0:ab:d3:ad:5c:be:6c:fa:e1:16:8a:6e:
         e3:b2:d4:56:4e:17:8d:85:24:09:4b:a7:95:ee:c0:38:4c:87:
         93:38:53:04
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgICA0cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
MjFDMDZBRjExMC8GA1UEBRMoMUREMTZGRDY4QkZGN0NBQjFBQjkxQzU1REE2MUZD
MENERkY0MTc0MzAeFw0yMzA5MjcwNzA2NTNaFw0yNTA5MzAwNzA2NTNaMBgxFjAU
BgNVBAMTDTY1MTNkNDkwLWQ3YzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+PEq8MY4tbUhljvqZKgzN9SnLUVawOHsfKFFBmEUb9zL332h5lKyM31Ju
SZMnSNXUbk0/CzH28YM/9NjVcJc1H3ZjodOx0ABcTw/a0GbThSwWBDSjlDsyxYj+
3YkAYTiY+b9YtKv5QHqECbF3W7XQc61O/G68hyfeSG2XXU/SuhHCMilFwW3zkdVa
crN3r0gEQkHFDa4KUS0QDGqLg01tBSJVGFq7xBVPuhefGfQOMShf8w4ITuph7IFU
TfEP0oeGk/1zUWK/1jZgOqxftwkVTwGxwEZ+GdcopbvrTyJRkvmWJP4oqAcPhV23
8Lt83jZilJziMBGgMk2DgTKhNEPhAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzVXc
awTHEOGcGaFCznkR0kD0JYkwHwYDVR0jBBgwFoAUHdFv1ov/fKsauRxV2mH8DN/0
F0MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4QTAxNENFL0hkRnYx
b3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hkRnYxb3ZfZktzYXVSeFYybUg4RE5fMEYwTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjIxQzA2LzU4QzlCNzhDMjA1OTExRUM5OTFCNjg3N0Q4
QTAxNENFLzcxNTI3QzgyNUQwNDExRUVBMjgxMDc2MDRBRDlFNkZDLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAsDwwAQBAwDQYJKoZIhvcN
AQELBQADggEBAKj7sKabrQ60PgN4RVdGHff/N84rxlq7w/nzI89mfnoEAYozQLeO
y59bwgAvyb2fP8czupon9LwGUMqLQu0XSprP//JIQOUAhSFCPNBNd6PZCtFK03k+
Jm7hKVejDdC6H91zDUSx/T/7G6ig4aFEFc/DqHiEB2nK2Lkk51GFuH6/wzmSvzfn
+2MwP8bof2URovShiPaVOHBnW83UMGiTTWS7HBBnM9v/F3DznlFbYBFnJPhePoVv
6gt1c6k8oGfdOp/lVtyrZaQ3SCumCeuniBxpvSeHFWWLfMpRf2eRQbCr061cvmz6
4RaKbuOy1FZOF42FJAlLp5XuwDhMh5M4UwQ=
-----END CERTIFICATE-----