Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/2B65FB2AD6D211EEB37BA597775412E6.roa
File:                     2B65FB2AD6D211EEB37BA597775412E6.roa (raw, json)
Hash identifier:          Bvui73HfKgjdOcok6Nt8x7LxjIr2l6LT4gkZ7CmIht4=
Subject key identifier:   1A:EA:54:14:2A:D4:FF:E0:2A:8A:F7:B4:AD:F8:E4:61:2E:EC:B7:0A
Certificate issuer:       /CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
Certificate serial:       04D8
Authority key identifier: 6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/2B65FB2AD6D211EEB37BA597775412E6.roa
Signing time:             Thu 29 Feb 2024 07:14:25 +0000
ROA not before:           Thu 29 Feb 2024 07:14:21 +0000
ROA not after:            Tue 28 Feb 2034 07:14:21 +0000
asID:                     20011
IP address blocks:        168.210.88.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.mft
                          rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240 (0x4d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216AR/serialNumber=6C602A26FB2C46670722DFC73F72FC4B6A73EBC4
        Validity
            Not Before: Feb 29 07:14:21 2024 GMT
            Not After : Feb 28 07:14:21 2034 GMT
        Subject: CN=65e02ed1-2a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d6:99:1e:1a:d8:2a:8d:fc:81:b8:7f:27:e7:
                    81:e5:7a:ca:09:43:ed:2d:1e:05:56:54:99:00:e4:
                    8b:0c:4b:50:f6:fc:10:32:81:da:88:cb:15:a4:97:
                    c2:a0:92:b2:4c:94:3f:2f:5f:8b:18:d0:c2:f6:30:
                    88:da:4c:a8:e8:5f:b1:48:47:a2:a4:ed:81:f7:ca:
                    a6:a7:61:62:31:3d:32:eb:61:38:8b:71:9c:b4:b4:
                    7d:3c:07:d0:56:39:8b:f8:47:3f:39:81:5f:a9:ed:
                    6a:e9:46:70:27:ee:87:d7:dc:17:e7:5a:fd:53:30:
                    1b:ef:f9:df:d0:32:45:8f:45:d9:a2:6c:88:74:c3:
                    ef:00:14:b4:c8:a0:d6:b5:9b:7e:94:1a:70:e4:1d:
                    0e:2b:79:b1:50:60:55:fe:e5:ad:9c:bf:a5:78:3e:
                    61:5d:6f:50:b1:dc:f0:7f:5e:22:d2:74:d3:39:8f:
                    49:6b:69:3a:b4:47:f7:cb:9b:0e:eb:91:f4:b1:62:
                    20:42:ab:42:c1:35:ef:23:ec:eb:6a:e0:db:2d:9f:
                    f0:62:d7:fe:6b:90:4f:3f:33:82:1e:c4:f4:da:7f:
                    9a:75:84:d1:60:89:d1:0b:c9:d4:09:67:a3:51:18:
                    5d:a3:2f:b3:57:60:7f:f2:85:1e:1b:2a:94:f5:5b:
                    6e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EA:54:14:2A:D4:FF:E0:2A:8A:F7:B4:AD:F8:E4:61:2E:EC:B7:0A
            X509v3 Authority Key Identifier:
                keyid:6C:60:2A:26:FB:2C:46:67:07:22:DF:C7:3F:72:FC:4B:6A:73:EB:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/bGAqJvssRmcHIt_HP3L8S2pz68Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bGAqJvssRmcHIt_HP3L8S2pz68Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/51AB2D5E87D511EB93B75247F8AEA228/2B65FB2AD6D211EEB37BA597775412E6.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.210.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3c:9f:6b:6e:19:06:18:a1:ba:3c:4b:6b:d8:54:72:97:74:7f:
         14:7c:b3:76:40:4a:0e:2a:65:45:2d:64:24:f4:97:cd:5b:da:
         87:77:72:f0:4e:32:d1:9e:44:50:ca:a9:5c:34:94:ab:d0:b5:
         c5:87:c5:ef:2f:c6:6f:e1:c1:84:6c:89:f2:e3:b4:ea:ff:8c:
         89:a4:8f:38:3e:79:48:04:c3:39:b5:bf:58:4c:ff:82:85:a3:
         23:ad:c4:11:96:8a:92:2c:11:dc:bc:77:64:ae:83:31:92:87:
         00:42:af:c7:21:fe:e9:77:4c:f2:8a:57:48:8f:29:dd:ff:2c:
         4e:a8:3e:a6:39:77:dc:aa:83:ae:b3:bd:cb:ca:da:74:ec:25:
         57:44:2e:8a:23:62:de:4f:66:24:2b:26:03:55:72:4e:e2:05:
         66:3d:aa:93:33:d0:b9:2d:48:3b:37:2e:60:41:b1:de:7e:1a:
         98:f5:88:24:e7:aa:c8:3f:e0:af:80:b4:6b:11:bf:78:7c:ee:
         df:e8:69:28:b4:91:9f:fb:a7:16:5f:1b:7f:44:f2:22:e8:d3:
         14:53:fa:15:d2:3a:75:b0:30:e7:7d:13:cd:70:6d:cf:d8:a8:
         fe:ab:ad:ca:3c:3b:0d:aa:61:12:d6:34:7b:e1:8a:57:a8:dc:
         b0:7b:0d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----