Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/507471B4F61711ECA8BD35ABF1222468.roa
File:                     507471B4F61711ECA8BD35ABF1222468.roa (raw, json)
Hash identifier:          mftcHJVRxHtq4aPHGuWKQ475mDfq8IorWrPcZAJ1yKo=
Subject key identifier:   70:DA:AA:46:C5:70:D6:7C:11:7E:E4:56:0F:B0:ED:CB:0D:DF:6C:83
Certificate issuer:       /CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Certificate serial:       04
Authority key identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/507471B4F61711ECA8BD35ABF1222468.roa
Signing time:             Mon 27 Jun 2022 12:47:34 +0000
ROA not before:           Mon 27 Jun 2022 12:47:30 +0000
ROA not after:            Sun 27 Jun 2032 12:47:30 +0000
asID:                     328925
IP address blocks:        2c0f:3500::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
        Validity
            Not Before: Jun 27 12:47:30 2022 GMT
            Not After : Jun 27 12:47:30 2032 GMT
        Subject: CN=62b9a6e6-c6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:94:c7:07:cb:ac:a7:32:31:08:0f:02:88:a3:
                    eb:27:8e:3d:1f:f9:e2:99:e7:e8:d9:b8:f1:38:5d:
                    39:1a:11:73:eb:e5:c6:f7:1d:75:5b:5f:7b:9d:de:
                    de:21:e6:aa:56:a6:d2:c0:16:27:69:d6:79:21:12:
                    0d:eb:f2:af:4e:90:13:cf:c4:b6:34:0f:a0:e3:fb:
                    7a:27:33:e6:f3:d0:f7:de:3b:09:6d:23:b1:ed:e0:
                    a1:48:48:c6:17:f4:33:be:99:dc:ea:37:67:70:62:
                    fb:b8:1e:be:5f:e6:c1:9f:86:19:a0:12:67:2c:51:
                    8e:01:c6:f6:98:78:71:8c:16:d4:29:f7:8a:c0:f9:
                    fb:15:1d:4f:20:53:5f:99:a4:2c:85:16:75:7d:94:
                    ab:b6:6a:e0:bc:72:ff:ad:25:a6:73:c6:1d:03:fc:
                    e2:5d:48:7d:67:f8:2b:78:02:0f:e1:45:a5:8e:3d:
                    f0:90:ac:11:21:8e:6a:ec:f6:d2:10:5c:36:0b:4f:
                    a1:78:d7:8c:dd:cc:e2:eb:27:c6:50:26:1e:4d:92:
                    8b:a8:2b:ca:82:77:2f:16:9c:d0:00:98:25:25:59:
                    d2:38:79:17:a7:4d:f1:c6:bb:3f:31:19:24:f7:11:
                    b8:c4:50:01:73:a5:44:b0:88:d4:06:1d:09:ae:b5:
                    45:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DA:AA:46:C5:70:D6:7C:11:7E:E4:56:0F:B0:ED:CB:0D:DF:6C:83
            X509v3 Authority Key Identifier:
                keyid:E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/507471B4F61711ECA8BD35ABF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:3500::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:51:56:11:87:64:22:02:62:f8:72:c2:4c:4b:cf:3a:7c:a3:
         81:b9:7a:d2:79:1f:67:72:22:f8:d5:bf:0c:63:a5:9c:35:4b:
         bf:c8:59:66:f7:75:47:0e:a7:ac:7f:20:c4:ea:84:5e:3b:9c:
         32:b3:d0:99:da:14:8a:18:01:05:3b:67:64:3c:e3:76:78:8b:
         a2:1f:ea:98:80:c1:93:29:21:53:cc:e1:d5:9b:09:6d:27:b6:
         0c:8a:51:15:a0:44:a8:69:61:a0:30:4f:a9:73:96:60:93:06:
         6b:fb:44:8e:55:be:35:87:bd:f1:ea:5a:2f:4c:34:a5:0f:c1:
         d3:46:6b:21:76:d0:cb:a6:6c:71:12:32:66:5a:60:70:ec:26:
         53:30:cf:59:a1:e3:f2:a4:60:28:0a:c3:cf:bd:68:e2:96:a7:
         af:b6:74:48:3e:d9:ca:12:9c:43:1b:59:29:ea:ab:13:f2:fc:
         88:ab:6a:33:2a:de:f7:5c:3c:66:25:c8:a1:cf:e0:34:ed:73:
         ef:ae:7e:3a:7f:ea:ee:aa:30:33:c8:6a:66:a7:28:1a:59:50:
         9d:c6:83:5c:34:67:fa:bb:a7:c7:42:25:95:27:a7:89:87:35:
         34:db:0b:ac:06:5f:e2:98:73:34:48:3f:f6:4c:b3:16:94:6e:
         5c:c3:24:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----