Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/814579C86CE911EF85E83D4A762E951A.roa
File:                     814579C86CE911EF85E83D4A762E951A.roa (raw, json)
Hash identifier:          WSMHvmfrebvZyPeTKkiJfGDVjGOqRuVOVPrPw3GW1Bs=
Subject key identifier:   D0:3A:85:55:AE:CB:D7:1B:FE:DD:91:28:39:7B:6F:80:26:BE:EA:62
Certificate issuer:       /CN=F36364C2AF/serialNumber=5EE80C7E888C71B3102418780BD6E10A52D17088
Certificate serial:       0398
Authority key identifier: 5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/814579C86CE911EF85E83D4A762E951A.roa
Signing time:             Sat 07 Sep 2024 07:19:22 +0000
ROA not before:           Sat 07 Sep 2024 07:19:19 +0000
ROA not after:            Mon 07 Sep 2026 07:19:19 +0000
asID:                     328974
IP address blocks:        2c0f:5f00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 920 (0x398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36364C2AF/serialNumber=5EE80C7E888C71B3102418780BD6E10A52D17088
        Validity
            Not Before: Sep  7 07:19:19 2024 GMT
            Not After : Sep  7 07:19:19 2026 GMT
        Subject: CN=66dbfe7a-d6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:8d:66:d1:6e:e0:61:91:d3:97:a5:dd:71:ad:
                    fe:2c:7e:e1:bb:ec:f7:ea:5f:39:72:c5:c1:c6:39:
                    a3:14:e4:2e:d3:84:bd:03:e4:93:e2:85:12:38:dc:
                    ed:b6:bc:fb:f5:2a:f6:35:62:95:08:a1:76:11:51:
                    df:19:28:1c:ac:7b:ed:bc:f4:e6:35:35:e2:79:88:
                    54:a7:7e:96:3f:09:e9:b8:e3:04:db:0b:8b:51:49:
                    f5:11:fe:08:55:d5:83:fd:17:dc:e6:07:af:51:06:
                    d8:17:56:8d:05:d5:c0:f4:00:a2:1a:a4:b7:94:64:
                    32:82:8d:f1:08:e2:4d:87:57:d9:61:2c:dd:f8:73:
                    63:3b:a8:9e:1d:d8:57:22:43:66:b0:13:fe:07:74:
                    13:49:3c:fc:82:c9:0e:3a:bc:61:56:7c:a8:30:98:
                    df:4e:ec:e2:63:81:ac:a8:af:46:14:3f:52:7e:24:
                    28:62:5f:85:68:43:97:3a:ca:45:19:0d:ba:19:50:
                    8d:25:e3:c3:b9:1f:8e:af:d8:9e:01:64:fc:e1:ff:
                    78:13:0b:14:c0:82:02:2f:bd:c3:54:ab:e6:13:b1:
                    15:43:44:80:55:8a:5f:78:19:2b:51:18:23:a0:06:
                    99:3a:f6:2c:63:30:61:0a:98:a4:46:f2:b7:fc:90:
                    8b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:3A:85:55:AE:CB:D7:1B:FE:DD:91:28:39:7B:6F:80:26:BE:EA:62
            X509v3 Authority Key Identifier:
                keyid:5E:E8:0C:7E:88:8C:71:B3:10:24:18:78:0B:D6:E1:0A:52:D1:70:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/XugMfoiMcbMQJBh4C9bhClLRcIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XugMfoiMcbMQJBh4C9bhClLRcIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36364C2/643B7A54B58411ECB7CFC7755A40D577/814579C86CE911EF85E83D4A762E951A.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:5f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:54:8b:8a:4c:46:52:7a:0d:b7:77:2a:8d:95:9e:b4:0c:d3:
         28:67:0d:4a:a7:c7:bf:1e:35:4d:3b:87:a2:59:63:bc:d3:c5:
         c5:1c:3f:b3:4d:f2:f7:1f:cb:18:6c:cf:9c:ec:7e:c9:01:a8:
         4c:05:c5:67:2d:1b:a8:d4:f1:be:ee:e6:60:b3:42:aa:d1:c0:
         66:cb:10:81:12:52:a2:fa:fe:09:48:87:79:be:12:d8:64:18:
         8d:33:b6:34:67:10:ed:19:8b:44:c7:f3:b9:7c:61:d2:d5:98:
         b1:42:06:ac:aa:2f:be:ad:68:6f:b9:21:64:9b:28:1a:c1:9e:
         d2:aa:d8:59:d3:bc:9d:85:7e:3e:fa:20:5c:50:13:20:da:b3:
         df:67:8f:c8:0e:1b:98:e7:d2:6d:ec:86:7b:25:3c:f9:87:1a:
         22:6f:00:dd:70:43:c7:23:16:15:17:08:39:49:85:b1:eb:ff:
         43:00:ca:4a:0f:b8:3c:e5:c9:86:1c:a0:d6:39:d2:6c:da:58:
         e6:e4:a2:b0:8b:96:8c:0d:5b:5d:3a:09:6f:3e:7a:d7:a1:f3:
         c4:e4:ec:ee:66:4d:4c:ed:62:6d:8a:13:77:b1:22:bb:f5:17:
         61:af:96:5e:19:19:b0:ed:60:25:45:90:87:80:f2:ef:a0:cb:
         b5:07:58:4e
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICA5gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzY0QzJBRjExMC8GA1UEBRMoNUVFODBDN0U4ODhDNzFCMzEwMjQxODc4MEJENkUx
MEE1MkQxNzA4ODAeFw0yNDA5MDcwNzE5MTlaFw0yNjA5MDcwNzE5MTlaMBgxFjAU
BgNVBAMTDTY2ZGJmZTdhLWQ2ZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCjWbRbuBhkdOXpd1xrf4sfuG77PfqXzlyxcHGOaMU5C7ThL0D5JPihRI4
3O22vPv1KvY1YpUIoXYRUd8ZKByse+289OY1NeJ5iFSnfpY/Cem44wTbC4tRSfUR
/ghV1YP9F9zmB69RBtgXVo0F1cD0AKIapLeUZDKCjfEI4k2HV9lhLN34c2M7qJ4d
2FciQ2awE/4HdBNJPPyCyQ46vGFWfKgwmN9O7OJjgayor0YUP1J+JChiX4VoQ5c6
ykUZDboZUI0l48O5H46v2J4BZPzh/3gTCxTAggIvvcNUq+YTsRVDRIBVil94GStR
GCOgBpk69ixjMGEKmKRG8rf8kIuXAgMBAAGjggKmMIICojAdBgNVHQ4EFgQU0DqF
Va7L1xv+3ZEoOXtvgCa+6mIwHwYDVR0jBBgwFoAUXugMfoiMcbMQJBh4C9bhClLR
cIgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM2NEMyLzY0M0I3QTU0QjU4NDExRUNCN0NGQzc3NTVBNDBENTc3L1h1Z01m
b2lNY2JNUUpCaDRDOWJoQ2xMUmNJZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1h1Z01mb2lNY2JNUUpCaDRDOWJoQ2xMUmNJZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNjM2NEMyLzY0M0I3QTU0QjU4NDExRUNCN0NGQzc3NTVB
NDBENTc3LzgxNDU3OUM4NkNFOTExRUY4NUU4M0Q0QTc2MkU5NTFBLnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD18AMA0GCSqGSIb3DQEB
CwUAA4IBAQCaVIuKTEZSeg23dyqNlZ60DNMoZw1Kp8e/HjVNO4eiWWO808XFHD+z
TfL3H8sYbM+c7H7JAahMBcVnLRuo1PG+7uZgs0Kq0cBmyxCBElKi+v4JSId5vhLY
ZBiNM7Y0ZxDtGYtEx/O5fGHS1ZixQgasqi++rWhvuSFkmygawZ7SqthZ07ydhX4+
+iBcUBMg2rPfZ4/IDhuY59Jt7IZ7JTz5hxoibwDdcEPHIxYVFwg5SYWx6/9DAMpK
D7g85cmGHKDWOdJs2ljm5KKwi5aMDVtdOglvPnrXofPE5OzuZk1M7WJtihN3sSK7
9Rdhr5ZeGRmw7WAlRZCHgPLvoMu1B1hO
-----END CERTIFICATE-----