Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE3B36B4F5F311EC823B75BCF1222468.roa
File:                     DE3B36B4F5F311EC823B75BCF1222468.roa (raw, json)
Hash identifier:          0gr2QAwUKbkKYEE6pXPwpRY7LGxyIs9UpbrvyeSYG3c=
Subject key identifier:   66:B2:1C:9B:EA:D5:E4:EE:B1:AE:A0:C4:54:89:23:61:66:43:B8:7C
Certificate issuer:       /CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
Certificate serial:       08C2
Authority key identifier: 09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE3B36B4F5F311EC823B75BCF1222468.roa
Signing time:             Mon 27 Jun 2022 08:33:50 +0000
ROA not before:           Mon 27 Jun 2022 08:33:44 +0000
ROA not after:            Thu 27 Jun 2024 08:33:44 +0000
asID:                     26548
IP address blocks:        154.16.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 26 Apr 2024 12:05:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2242 (0x8c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682B65AF/serialNumber=0940E638283336DE5C8C5A40A4C23B34F3F9CA53
        Validity
            Not Before: Jun 27 08:33:44 2022 GMT
            Not After : Jun 27 08:33:44 2024 GMT
        Subject: CN=62b96b6e-7aac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:43:78:a1:01:86:bc:6b:f9:00:1b:19:ac:82:
                    54:00:67:32:86:61:23:b8:60:db:2d:d5:7b:be:40:
                    02:05:a5:37:a9:f0:55:03:f0:6d:82:12:3b:c0:c9:
                    16:c7:0a:da:1d:66:f7:83:02:1b:92:08:41:6d:db:
                    52:41:75:64:54:72:a6:2a:ac:e2:97:9e:ef:f4:d3:
                    86:e5:13:c0:4b:a4:5b:54:e7:9d:47:66:c1:49:04:
                    80:18:b8:3f:5c:31:95:80:fa:30:e4:7c:03:17:81:
                    c6:f9:e1:65:1f:55:d7:e2:30:4f:17:eb:35:87:0e:
                    1c:1b:17:34:88:da:a4:a1:4a:fc:cc:9b:84:01:0d:
                    dd:43:22:6b:8c:82:57:2a:7e:26:7a:64:81:51:14:
                    62:46:5f:e3:06:05:26:a2:8a:88:43:9d:5e:00:e3:
                    2c:49:fe:83:f3:8c:42:c9:eb:02:f7:aa:6a:3b:b4:
                    2b:4d:48:de:ed:11:bb:98:f5:18:1e:4f:13:19:24:
                    31:85:18:c1:ce:3e:23:75:b5:3c:e0:9e:0f:9e:fb:
                    1c:ae:78:85:28:7e:0c:1a:c6:f4:1b:28:cf:4e:8b:
                    a7:62:e3:5d:51:05:4e:3f:bc:0e:7b:8c:55:49:e9:
                    01:91:02:3b:7b:a4:db:c9:65:db:6c:02:05:0c:99:
                    8c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B2:1C:9B:EA:D5:E4:EE:B1:AE:A0:C4:54:89:23:61:66:43:B8:7C
            X509v3 Authority Key Identifier:
                keyid:09:40:E6:38:28:33:36:DE:5C:8C:5A:40:A4:C2:3B:34:F3:F9:CA:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/CUDmOCgzNt5cjFpApMI7NPP5ylM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CUDmOCgzNt5cjFpApMI7NPP5ylM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682B65/4E851E34DB5511E885B29951F8AEA228/DE3B36B4F5F311EC823B75BCF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.16.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:1c:c9:e6:33:a2:0f:da:9e:78:d1:a4:11:27:cd:18:84:44:
         92:97:6d:02:00:cc:f3:4d:c5:ad:4b:fd:e9:3d:76:2b:a5:34:
         2d:4d:73:2c:a1:98:35:2c:42:11:b9:fe:7b:70:1b:52:ae:cc:
         9f:8b:7e:02:a9:11:7b:9e:dc:50:8d:cf:c4:cb:08:7e:a1:be:
         60:b9:d8:eb:64:f1:37:1b:2e:dd:c1:b5:6f:98:8a:9a:da:f7:
         dc:d8:44:3f:63:29:c3:23:98:11:7c:b7:37:84:bd:98:37:1b:
         c1:61:ed:4b:5b:cb:7e:58:40:32:9a:90:33:6c:a0:32:64:b8:
         e7:0f:e8:65:bd:d0:4a:4c:d5:0c:64:ea:c3:1c:5e:95:7e:ce:
         e7:45:e0:dd:75:c1:71:ed:5d:b4:97:db:d5:98:67:05:d7:dd:
         53:ee:fe:4a:6f:85:c5:ae:7e:f3:70:f8:fc:5d:47:27:70:27:
         68:e3:56:28:15:f5:a7:e5:8b:8b:d6:d1:80:c2:cb:b9:5b:03:
         b3:0e:01:53:a1:50:da:df:19:49:e1:8c:14:5d:11:43:94:6f:
         ef:7b:54:5e:be:58:bb:1d:e0:70:36:12:f2:ce:d7:fd:ce:2e:
         63:c0:47:e5:23:e4:4b:77:5b:bc:a4:e0:50:fb:aa:fe:4e:28:
         20:06:75:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----