Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/5184AD26A33011EFA3900B41762E951A.roa
File:                     5184AD26A33011EFA3900B41762E951A.roa (raw, json)
Hash identifier:          vZEzW20+Dxa0Bltx2ptZesMsOHj6zG5xhOYGhqGHcpk=
Subject key identifier:   CC:10:C4:31:27:2F:E2:65:BE:7D:59:4D:68:D3:36:29:23:2F:C0:4A
Certificate issuer:       /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial:       0F02
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/5184AD26A33011EFA3900B41762E951A.roa
Signing time:             Fri 15 Nov 2024 09:02:19 +0000
ROA not before:           Fri 15 Nov 2024 09:02:15 +0000
ROA not after:            Fri 15 Nov 2030 09:02:15 +0000
asID:                     37301
IP address blocks:        2001:42d0:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3842 (0xf02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
        Validity
            Not Before: Nov 15 09:02:15 2024 GMT
            Not After : Nov 15 09:02:15 2030 GMT
        Subject: CN=67370e1b-61c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:69:25:da:d6:1a:0d:ac:b0:d9:9f:d6:c8:c1:
                    89:da:d7:23:83:18:8c:61:2b:d9:8a:1b:c7:b9:9b:
                    90:bf:6a:0c:ae:1b:3a:b5:d2:4e:53:9c:cf:dc:ea:
                    86:73:45:7e:cb:7d:81:f4:73:de:91:46:05:1a:41:
                    df:28:bb:b0:6e:c7:60:8d:e9:3f:25:e6:89:83:2e:
                    97:ba:5d:23:58:2d:04:58:c5:1e:62:6c:92:45:07:
                    c4:af:cc:f8:ce:8a:7c:48:4a:37:7b:da:e5:ae:47:
                    80:a6:44:7d:e1:49:3a:37:91:e9:d5:4a:1d:c9:11:
                    54:44:fc:ef:32:96:0a:65:36:c8:65:8b:c8:e1:1d:
                    5a:de:a7:97:0e:c2:43:8e:5c:ba:f7:44:42:ce:44:
                    64:ee:ba:4d:70:08:f2:d0:f0:a2:5c:09:c2:50:2e:
                    c7:49:5a:ff:43:25:2a:1b:c8:77:55:90:47:73:04:
                    a7:e9:20:f0:e8:0f:f1:11:3d:60:42:88:68:16:48:
                    c9:a3:9c:6f:f4:47:77:c9:0b:8c:b0:f3:df:40:7b:
                    fd:78:c2:22:f5:3b:07:21:17:9a:36:a6:e1:52:40:
                    dc:22:6f:ca:92:2d:16:b5:ff:e0:c1:ff:c8:f9:e4:
                    5f:dc:71:dc:7d:f8:02:d9:a0:32:68:e5:93:76:74:
                    a7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:10:C4:31:27:2F:E2:65:BE:7D:59:4D:68:D3:36:29:23:2F:C0:4A
            X509v3 Authority Key Identifier:
                keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/5184AD26A33011EFA3900B41762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:42d0:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:23:58:48:a4:b0:4c:6b:29:f7:84:36:6a:9b:08:16:b4:ad:
         86:67:9e:38:6c:f9:14:af:21:be:05:ae:82:b7:e2:dc:aa:d8:
         0a:ab:24:b9:cb:01:34:e8:fc:f2:85:ed:ca:6c:dc:7d:31:5c:
         84:58:5f:27:a9:d9:8d:d4:8c:f3:08:05:5f:b8:3c:d2:27:e2:
         8c:ea:84:74:f2:24:3e:2e:f5:f8:54:ed:64:94:69:c8:b4:c1:
         07:84:36:85:35:6d:3a:03:67:ae:c4:74:f8:be:84:3f:89:36:
         5e:3a:2b:89:0d:64:5c:e5:77:c1:54:dc:c7:84:dc:f4:c2:f5:
         ec:4c:3b:6b:f2:ba:d6:c0:fe:aa:99:69:c8:a8:6d:55:16:f0:
         20:a0:34:57:6c:19:dc:a6:cb:af:c0:36:e6:e4:80:da:b5:75:
         5e:79:43:fa:14:10:16:f1:22:1e:db:2b:e3:38:b0:7a:31:cb:
         6c:50:b5:d8:7e:71:58:5c:b5:6d:1a:f7:63:ad:f9:0a:a1:6b:
         99:aa:47:76:c5:3f:04:8e:44:ca:10:da:0c:6c:16:75:91:28:
         3d:cd:57:1d:fb:5c:d4:d0:9c:df:9a:0a:2f:c6:13:d8:1c:ed:
         41:b8:44:cf:dd:c4:00:75:97:f4:3f:bd:58:e9:91:8d:74:b4:
         53:07:48:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----