Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/E0AED0C023E811EF9BBAC6FC7CDC24C2.roa
File:                     E0AED0C023E811EF9BBAC6FC7CDC24C2.roa (raw, json)
Hash identifier:          iuXA2clKKN5IZryEGcnlHcWmmUdsp1OKN5dda7PrN1E=
Subject key identifier:   53:C3:1E:D4:E3:6E:33:8D:1F:73:7E:B8:9C:BB:4F:53:A5:FF:91:9D
Certificate issuer:       /CN=F369671EAF/serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
Certificate serial:       077F
Authority key identifier: 23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/E0AED0C023E811EF9BBAC6FC7CDC24C2.roa
Signing time:             Thu 06 Jun 2024 09:40:58 +0000
ROA not before:           Thu 06 Jun 2024 09:40:55 +0000
ROA not after:            Thu 01 Jun 2034 09:40:55 +0000
asID:                     37172
IP address blocks:        2c0f:ee28::/32 maxlen: 33

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1919 (0x77f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369671EAF/serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
        Validity
            Not Before: Jun  6 09:40:55 2024 GMT
            Not After : Jun  1 09:40:55 2034 GMT
        Subject: CN=6661842a-158d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:37:fd:a5:e0:7d:a5:dc:f7:3b:10:b6:b9:50:
                    25:07:7a:5b:dc:4b:ec:b5:0a:33:37:94:3c:ce:9f:
                    6a:16:b2:0c:a7:c5:5b:d8:b2:55:3a:7d:0d:f7:2a:
                    0b:86:9f:e2:31:90:4e:4d:2e:cc:00:3c:1f:6a:fc:
                    61:d5:e4:81:04:a0:8a:28:b0:61:cf:26:c5:e3:30:
                    a3:e2:38:61:b7:36:c6:e8:8f:fd:e5:e4:6f:73:d7:
                    95:d8:fb:eb:2f:99:b7:0d:9b:0e:13:0f:8e:0b:1c:
                    ef:44:4b:d3:b4:ae:4a:22:ec:ad:0e:bd:38:89:d7:
                    57:65:de:26:00:10:73:6b:b5:fa:06:f3:75:02:14:
                    4b:4f:af:b4:bb:5b:82:50:4d:0d:54:4f:a6:dd:b0:
                    9c:c4:d2:36:d4:d0:57:42:f3:fe:13:ce:09:9a:63:
                    54:be:7e:ea:63:61:34:f0:13:12:ee:92:11:20:08:
                    c8:9c:16:43:35:4d:90:6a:72:50:57:20:f9:e7:f9:
                    73:23:06:64:61:36:d3:bf:52:47:72:2d:50:4b:10:
                    6f:d5:63:ff:6d:65:e4:e0:4f:8b:58:3b:a4:73:d4:
                    79:fb:ce:25:df:d5:21:5b:6e:0d:b9:35:38:7d:be:
                    3f:39:1a:8d:75:a9:2c:2b:42:74:3a:94:c4:07:2f:
                    3c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C3:1E:D4:E3:6E:33:8D:1F:73:7E:B8:9C:BB:4F:53:A5:FF:91:9D
            X509v3 Authority Key Identifier:
                keyid:23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/E0AED0C023E811EF9BBAC6FC7CDC24C2.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ee28::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:70:66:82:b9:64:8e:5a:87:50:a7:f3:29:2d:da:da:04:10:
         29:4e:aa:fa:0a:53:8e:2e:75:7b:7e:44:91:f0:39:48:37:c4:
         2e:77:35:c3:e5:ea:42:5d:59:9c:e2:3b:54:88:16:bf:cb:8b:
         9b:51:e1:36:24:67:2f:5c:97:af:3f:b6:d1:1d:d0:eb:e4:8e:
         72:94:68:34:a5:ca:ef:96:c2:b5:63:06:07:91:3f:73:53:a4:
         89:0e:8b:10:ba:96:03:28:97:b6:8a:ff:78:f6:51:50:99:6e:
         b5:0a:61:d1:b1:19:2c:80:ca:28:13:83:39:a4:df:53:83:4f:
         3a:67:5a:52:e1:4f:72:fa:f2:f9:a5:39:f0:b1:16:92:c1:f1:
         0e:e5:53:8f:46:cb:8c:8a:5a:59:9b:65:7a:89:6d:6d:da:9c:
         56:86:02:4d:f5:71:43:c5:41:f7:df:72:7e:1b:26:ec:16:4c:
         b0:e3:f4:27:b7:88:8b:71:5f:e7:a5:dd:1a:d5:70:9c:8f:ea:
         11:e2:3e:77:a7:f0:ec:d0:e6:3d:ce:5c:c7:0b:7c:4c:d6:e2:
         84:84:bf:55:6d:ca:a4:ab:fe:80:ad:1d:d4:de:70:e3:a6:a5:
         02:c3:45:10:aa:ae:3c:c8:6b:5c:9c:a3:73:f8:c2:7f:2d:78:
         4d:e6:51:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----