Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/765417BC1D2E11ECAAEDBE7DD8A014CE.roa
File:                     765417BC1D2E11ECAAEDBE7DD8A014CE.roa (raw, json)
Hash identifier:          5WWbRjD6pDmOSLHf/PFuJbjWXS0clYQDxfYvXXSTerE=
Subject key identifier:   93:F8:58:23:42:82:5D:86:90:43:B3:0B:1C:58:A6:84:02:C2:2A:ED
Certificate issuer:       /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial:       0CA8
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/765417BC1D2E11ECAAEDBE7DD8A014CE.roa
Signing time:             Tue 02 May 2023 06:50:33 +0000
ROA not before:           Fri 24 Sep 2021 11:56:30 +0000
ROA not after:            Thu 24 Sep 2026 11:56:30 +0000
asID:                     37301
IP address blocks:        2001:42d0:a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 03 Jun 2024 00:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3240 (0xca8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
        Validity
            Not Before: Sep 24 11:56:30 2021 GMT
            Not After : Sep 24 11:56:30 2026 GMT
        Subject: CN=6450b2b9-a0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:11:b2:29:f1:e7:59:db:d4:92:81:5e:8f:
                    50:61:d7:52:c7:e6:a1:3b:0f:0f:ba:5c:0d:9e:1c:
                    5f:74:c3:1f:5d:f1:7c:9f:64:69:f3:99:4e:c8:13:
                    f4:8f:b9:ae:45:be:5c:b5:da:ed:43:f6:f3:72:e9:
                    e3:7a:98:59:91:f3:76:cd:83:3c:2c:16:5e:43:bb:
                    b1:cc:22:20:ae:16:34:8f:80:d8:15:01:50:52:dc:
                    62:c7:84:cb:82:64:b9:78:a3:72:91:9d:dc:fc:d4:
                    0f:57:69:be:5c:7c:61:0c:bd:0f:9a:36:0a:15:5d:
                    d7:7d:e0:f7:bd:a4:9a:83:55:93:92:5c:07:85:12:
                    c1:79:25:67:41:4c:28:7c:fd:ea:24:fe:78:a5:85:
                    fa:89:b0:c7:e0:6d:84:1b:0a:07:1a:4f:1a:63:a4:
                    4c:27:ff:57:4a:28:4f:66:d5:17:17:73:9a:47:a1:
                    88:18:00:ad:f1:e6:4f:92:6f:4d:de:78:e0:b8:36:
                    50:e6:e1:3f:17:48:1f:41:3e:25:ee:c9:3f:48:1c:
                    ef:79:d4:03:09:01:31:38:26:b7:24:35:a0:76:01:
                    a2:51:1e:58:de:64:90:3c:a0:4c:e8:01:37:40:6e:
                    7e:c5:e2:67:7a:38:92:a8:e5:26:2f:e5:02:65:86:
                    ae:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F8:58:23:42:82:5D:86:90:43:B3:0B:1C:58:A6:84:02:C2:2A:ED
            X509v3 Authority Key Identifier:
                keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/765417BC1D2E11ECAAEDBE7DD8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:42d0:a::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:d5:c0:08:64:e4:7b:b5:4a:59:1f:b8:15:6b:2a:1d:d6:1c:
         43:a6:cd:31:7b:be:e6:aa:9b:ad:13:8f:20:8b:9c:7e:eb:16:
         04:5d:b9:82:39:2d:7a:b0:10:89:ac:51:95:33:ea:9d:67:eb:
         f3:04:32:cd:ee:87:76:d4:62:f7:65:db:8a:94:08:0e:15:d5:
         be:f1:f2:ee:9c:2b:3e:61:37:b2:4d:e1:70:27:eb:80:9c:bf:
         1e:36:87:61:7f:bf:c3:66:20:c3:a1:cd:d5:ae:81:3b:d9:ee:
         9c:f7:de:2a:af:db:41:12:fe:39:1b:e6:cc:9b:df:91:2e:6d:
         dc:c4:79:47:1e:62:ca:7b:3b:88:eb:28:10:b0:d0:10:fc:71:
         d9:8f:1b:24:33:b1:6c:af:92:e2:98:eb:00:23:9f:29:74:31:
         9a:c9:7e:44:3d:50:9b:4d:be:bd:3b:01:1c:f3:f8:4f:82:f2:
         9d:bc:ec:06:b5:04:e7:86:07:6f:67:b4:6f:c5:60:a1:9f:9d:
         62:07:31:ae:36:18:35:cf:41:ff:7b:45:6b:69:44:01:e7:7e:
         76:37:1e:a7:9e:2f:3d:43:3c:12:32:51:f1:7c:f4:fc:39:94:
         4e:1d:05:20:12:50:55:4d:cb:7f:9a:03:76:2d:ac:44:b5:83:
         dc:76:cb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----