Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/2258DA46D9E611ED9991A6FC2F6D8C1D.roa
File:                     2258DA46D9E611ED9991A6FC2F6D8C1D.roa (raw, json)
Hash identifier:          zJWQpnOJZG73raUB2XV36ffD+zWbugbvO1hLTY3gu00=
Subject key identifier:   B3:B1:9E:6D:4E:DD:EA:97:7E:8C:71:76:62:EC:AC:56:30:8E:07:C0
Certificate issuer:       /CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Certificate serial:       AE
Authority key identifier: C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/2258DA46D9E611ED9991A6FC2F6D8C1D.roa
Signing time:             Thu 13 Apr 2023 10:29:56 +0000
ROA not before:           Thu 13 Apr 2023 10:29:52 +0000
ROA not after:            Wed 13 Apr 2033 10:29:52 +0000
asID:                     37783
IP address blocks:        196.60.58.0/24 maxlen: 24
                          2001:43f8:11f0::/64 maxlen: 64

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
        Validity
            Not Before: Apr 13 10:29:52 2023 GMT
            Not After : Apr 13 10:29:52 2033 GMT
        Subject: CN=6437d9a4-41fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:0f:94:1d:5e:db:34:5f:fc:02:ff:a8:88:
                    30:5c:69:bf:73:a3:cb:fa:1e:c1:8d:a9:d7:8a:be:
                    ef:d8:28:01:91:4e:af:08:45:01:fd:38:8c:c7:28:
                    71:c3:00:79:b4:d3:61:eb:b2:7c:cf:8f:31:df:47:
                    5d:f5:e8:63:a9:7b:7d:87:b1:ba:6f:40:12:34:98:
                    f1:e0:2a:a8:1d:a4:60:c6:0b:61:d6:6f:08:fc:75:
                    df:06:79:35:df:df:9b:2d:f3:32:4a:5c:f0:41:d6:
                    b4:62:fe:0c:c6:28:6b:e6:e3:2e:86:8c:0d:13:10:
                    e1:f9:bf:09:62:bb:bf:8c:eb:42:ff:29:80:3f:69:
                    da:e6:06:d4:38:22:69:13:14:7b:67:b8:f5:9b:4b:
                    d7:8e:cf:e0:e8:f1:29:f9:46:96:89:f1:7f:9b:8c:
                    e5:53:31:0d:40:a6:c1:b4:c1:94:05:0e:f7:b4:ed:
                    ac:81:a6:17:95:3b:a8:e4:d2:39:ba:f9:26:5b:29:
                    8e:a6:ba:07:41:fe:a2:16:f2:b8:e2:dc:c6:a8:60:
                    1f:a4:f3:97:62:57:3e:c5:3b:0f:45:9d:12:6d:8a:
                    43:5c:75:ab:cc:8e:be:af:e5:de:e4:52:8c:bc:03:
                    f7:8e:f1:9e:7b:5b:c7:f0:19:72:0e:2b:39:56:ab:
                    92:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B1:9E:6D:4E:DD:EA:97:7E:8C:71:76:62:EC:AC:56:30:8E:07:C0
            X509v3 Authority Key Identifier:
                keyid:C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/2258DA46D9E611ED9991A6FC2F6D8C1D.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.60.58.0/24
                IPv6:
                  2001:43f8:11f0::/64

    Signature Algorithm: sha256WithRSAEncryption
         28:b3:22:f4:54:b2:4b:34:c2:52:ba:a8:63:f1:21:cd:72:08:
         53:31:80:9c:9a:eb:72:c0:8d:72:ad:fe:e1:2d:26:8c:d4:d1:
         22:32:e7:5d:ff:13:0d:93:c1:e8:aa:66:b3:14:a8:e5:33:03:
         da:02:ba:c9:c2:2b:9b:19:45:f6:e3:a8:1b:69:be:32:ca:10:
         6d:f8:a3:92:80:87:c6:37:1d:ea:d4:cb:b6:41:63:01:7f:99:
         e5:d5:51:e9:d5:01:c5:9c:73:7d:b6:4b:88:7e:f0:e1:ac:0a:
         71:59:3e:95:df:e0:47:37:69:02:88:b8:80:fb:58:64:ae:11:
         fb:db:9f:09:32:56:cd:b0:21:31:50:91:40:96:2e:97:bd:29:
         df:ff:f3:0d:9b:bc:ee:61:d0:28:5d:19:0e:df:6a:2f:88:01:
         db:77:74:5f:8f:00:d9:9f:e5:35:1e:42:f5:2f:12:a6:fb:06:
         8a:19:be:a4:ae:cc:26:5e:36:b1:bb:35:f9:63:7e:d2:a4:02:
         ac:1b:0b:2d:af:95:27:d3:e8:db:d9:9a:3a:4c:1b:1d:14:a2:
         fa:ce:5c:2b:d6:9c:fe:4e:61:6b:80:10:9d:5f:79:8b:3a:e3:
         62:14:a2:2a:ef:fc:63:a3:5e:ab:b0:f5:00:c1:c1:3f:80:8a:
         34:b3:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----