Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/C237033624A011EDACDA0690F1222468.roa
File:                     C237033624A011EDACDA0690F1222468.roa (raw, json)
Hash identifier:          D/DHDU6oMRTGaAGz0aykkPymb01YZKRl9kWAaqrzvqM=
Subject key identifier:   4B:69:7A:8C:32:91:1A:4E:12:83:6B:57:C5:AF:3C:E5:69:71:EA:5E
Certificate issuer:       /CN=F3682615AF/serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Certificate serial:       04
Authority key identifier: 5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/C237033624A011EDACDA0690F1222468.roa
Signing time:             Thu 25 Aug 2022 18:07:19 +0000
ROA not before:           Thu 25 Aug 2022 18:07:15 +0000
ROA not after:            Sun 25 Aug 2024 18:07:15 +0000
asID:                     328835
IP address blocks:        2c0f:3a00::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 17 Jun 2024 00:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682615AF/serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
        Validity
            Not Before: Aug 25 18:07:15 2022 GMT
            Not After : Aug 25 18:07:15 2024 GMT
        Subject: CN=6307ba57-97b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b9:b4:c2:fa:82:03:5e:c2:b5:b8:e9:b2:dd:
                    7d:da:c2:d8:04:46:dc:ee:73:0e:74:a9:c7:06:95:
                    10:3a:9b:3e:f8:28:eb:1c:8c:61:37:a6:94:05:81:
                    c2:dc:92:5f:b2:ad:dd:8d:91:dd:a6:8d:dd:0c:7f:
                    7c:8e:a5:a4:90:59:35:e4:87:c3:2a:44:46:bb:ab:
                    68:02:34:24:1f:5d:fc:0e:59:41:70:fd:a6:78:82:
                    ff:5e:1a:22:a3:5e:3e:ad:33:b4:6a:d2:fe:c4:6a:
                    09:c7:81:43:76:07:a3:63:2b:66:c5:88:27:d8:59:
                    8a:1f:91:fc:a7:0b:b0:56:10:0a:df:d7:7c:14:99:
                    a9:14:75:ce:37:1a:4b:00:b7:93:94:e8:97:4b:be:
                    02:26:cf:90:af:93:5a:f9:42:a0:c9:99:e0:4b:b7:
                    0f:c3:1f:55:77:5b:8a:81:13:de:36:c0:dd:54:9e:
                    35:b3:dd:b3:e9:7d:bc:68:14:56:f5:9b:18:e5:66:
                    b1:4f:7e:36:d7:6f:32:6a:f1:bb:d3:4e:05:c5:4a:
                    d9:59:0f:4c:5f:26:2b:eb:77:67:58:0a:3f:e6:d9:
                    7a:ed:ff:d2:dc:88:6b:9a:e7:05:32:5f:04:7e:49:
                    8c:9f:1a:4d:f0:62:32:c2:0a:29:48:d5:ba:0c:64:
                    27:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:69:7A:8C:32:91:1A:4E:12:83:6B:57:C5:AF:3C:E5:69:71:EA:5E
            X509v3 Authority Key Identifier:
                keyid:5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/C237033624A011EDACDA0690F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:3a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:20:8e:a5:45:53:a8:ea:99:f1:cb:6b:2b:88:5f:48:10:3c:
         14:5b:a7:99:c2:12:73:32:7d:00:92:ae:e4:50:46:30:51:28:
         90:3e:18:a7:38:45:dd:6a:a1:bb:42:0e:d6:b0:e4:ba:c4:11:
         17:b6:23:4c:71:5b:bb:27:af:2c:da:60:90:c3:f5:94:28:af:
         1e:47:88:83:d7:91:b3:bc:29:52:4f:d8:34:73:e4:65:0f:70:
         8d:32:6a:12:cb:1a:52:49:04:94:cc:47:45:cd:00:5f:ec:e7:
         c7:f9:31:2f:45:cd:f1:e9:35:4f:6c:17:30:f2:b1:2b:d4:6a:
         32:e9:3e:98:1a:7c:9c:0a:93:f2:e3:55:cd:b1:01:3b:9a:a3:
         19:cb:0d:5a:71:a5:c1:75:10:5c:08:18:ae:2a:cd:9a:1f:68:
         86:80:ea:12:de:d2:99:49:b4:66:80:98:be:1f:82:37:ed:78:
         ab:f5:19:7d:ac:42:80:7d:8f:2a:28:f8:20:64:6f:52:13:d4:
         72:f8:30:22:c9:c2:5a:04:0a:e1:f4:8c:68:f9:92:08:61:8f:
         88:e9:18:17:0e:95:dc:89:be:14:72:91:88:01:bf:c2:40:33:
         50:86:09:2d:88:54:bc:18:ae:af:34:fa:e1:18:d2:b1:21:e1:
         83:71:b9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----