Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/AE758D00D4CD11EB8D9EBF2EF8AEA228.roa
File:                     AE758D00D4CD11EB8D9EBF2EF8AEA228.roa (raw, json)
Hash identifier:          AOBdcxlDhMloECpYuyvumc0EXau1j2QFtzwgu7UYQFA=
Subject key identifier:   A8:E4:23:42:9F:6D:4C:77:11:5A:09:16:1E:3C:48:90:25:7D:F6:F9
Certificate issuer:       /CN=F362B5D1AF/serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136
Certificate serial:       24
Authority key identifier: A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/AE758D00D4CD11EB8D9EBF2EF8AEA228.roa
Signing time:             Thu 24 Jun 2021 09:22:23 +0000
ROA not before:           Thu 24 Jun 2021 09:22:19 +0000
ROA not after:            Wed 30 Apr 2031 09:22:19 +0000
asID:                     327750
IP address blocks:        2c0f:e9c0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 May 2024 00:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362B5D1AF/serialNumber=A5F8D1BD59220B8753A379D4A33D23BF4232B136
        Validity
            Not Before: Jun 24 09:22:19 2021 GMT
            Not After : Apr 30 09:22:19 2031 GMT
        Subject: CN=60d44ece-a9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:66:d6:e3:b4:be:b3:f8:1f:ad:e6:d9:eb:a3:
                    c6:42:ff:b1:e2:4e:e7:b3:90:11:27:78:61:11:cd:
                    5f:eb:fa:a0:09:8e:77:1c:27:7d:f8:dc:ef:09:32:
                    e7:a5:1f:49:78:ab:e1:a8:ca:b2:70:1b:8e:d0:e5:
                    11:9a:24:49:d0:92:77:e6:4e:02:da:48:89:c5:39:
                    8a:82:3f:e3:3d:75:a5:7e:e4:8b:1a:3d:bf:73:26:
                    99:8b:db:0c:92:9f:c3:b9:4b:06:f4:88:e2:bc:16:
                    06:78:34:0b:ac:53:5e:7b:c2:38:81:f9:80:f8:a8:
                    aa:29:44:48:f5:71:0f:6e:e1:a1:d3:77:a7:93:7a:
                    22:1b:5c:9d:94:c0:69:53:da:5b:6d:2c:fa:7a:43:
                    b9:d6:74:e0:0e:55:db:7f:ac:2a:ef:ea:54:d9:e3:
                    3b:c3:0e:c1:0b:b9:e9:fe:24:67:6b:a9:39:8e:5c:
                    9f:d1:50:e6:25:c1:96:11:9b:ac:d8:79:30:10:5c:
                    9c:8f:28:2e:a5:55:db:f3:92:99:d6:1a:4c:a0:30:
                    bc:8d:1f:42:d2:06:bb:73:99:4c:e0:ed:65:dd:47:
                    88:13:78:ef:ab:d4:07:cf:4e:29:7f:3b:7b:59:4e:
                    ae:62:a7:3d:c2:18:61:bb:e7:3a:63:dc:93:10:f3:
                    7b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:E4:23:42:9F:6D:4C:77:11:5A:09:16:1E:3C:48:90:25:7D:F6:F9
            X509v3 Authority Key Identifier:
                keyid:A5:F8:D1:BD:59:22:0B:87:53:A3:79:D4:A3:3D:23:BF:42:32:B1:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/pfjRvVkiC4dTo3nUoz0jv0IysTY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pfjRvVkiC4dTo3nUoz0jv0IysTY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362B5D1/DB2F37EEC21A11EBB8B33F75F8AEA228/AE758D00D4CD11EB8D9EBF2EF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:e9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:43:06:35:31:45:20:37:06:fe:44:0c:2a:97:3f:d6:dd:a6:
         52:db:50:51:60:d6:cd:0c:79:1b:35:1c:7b:39:74:36:a2:93:
         83:d5:4e:b5:4f:cf:ec:56:7f:12:95:af:d9:e3:e6:ff:d4:4c:
         8a:ef:ca:f7:89:3a:46:d4:b4:64:20:74:d3:08:37:79:58:6c:
         36:34:13:a6:e1:a9:98:44:e5:16:3a:f0:e9:35:a1:f7:f9:eb:
         ac:12:4c:f3:ba:87:98:87:fc:44:f5:3b:9d:28:9f:ae:16:cf:
         33:c8:a8:e3:ba:33:18:39:0f:1b:db:5d:e1:20:6f:f0:2d:0f:
         11:ec:de:17:1b:bc:ca:9a:ff:65:01:f4:47:a8:c9:5d:06:3b:
         99:e1:c2:f3:fd:a6:47:49:0d:f7:05:19:d6:d7:7c:e0:9c:2b:
         e1:fc:ca:a6:f1:8a:43:13:cd:ee:e2:1c:b8:f4:a2:79:ef:4f:
         38:6e:e8:cc:a9:ca:1d:17:71:96:64:ea:06:71:cc:82:de:d8:
         47:08:79:34:74:68:68:00:ab:ab:50:e7:e0:b0:6c:ba:ae:bb:
         04:7b:d9:b2:5d:d3:ba:ce:6c:ae:99:fe:6e:7a:f0:fd:68:4c:
         4d:43:26:c7:99:04:55:6b:9c:fe:7b:cb:65:b6:c6:e7:87:11:
         60:37:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----