Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/6BE29F76D4D911EB8763AE3EF8AEA228.roa
File:                     6BE29F76D4D911EB8763AE3EF8AEA228.roa (raw, json)
Hash identifier:          X6fENjfD/CbaGp5w9cKC1jdpjMT1u+e4NgCmYHUQ1mc=
Subject key identifier:   4B:19:1F:56:33:8E:BE:2E:E0:31:A0:39:C3:18:A6:46:D7:08:86:C6
Certificate issuer:       /CN=F36A0CB0AF/serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
Certificate serial:       26
Authority key identifier: E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/6BE29F76D4D911EB8763AE3EF8AEA228.roa
Signing time:             Thu 24 Jun 2021 10:46:25 +0000
ROA not before:           Thu 24 Jun 2021 10:46:20 +0000
ROA not after:            Wed 30 Apr 2031 10:46:20 +0000
asID:                     327750
IP address blocks:        2c0f:e908::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A0CB0AF/serialNumber=E10522573457FAD9CB5A6F5C19D68CCE6D6E9C23
        Validity
            Not Before: Jun 24 10:46:20 2021 GMT
            Not After : Apr 30 10:46:20 2031 GMT
        Subject: CN=60d46281-39cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:39:fc:00:35:c2:87:3f:0d:75:cc:5c:16:22:
                    e6:8c:d6:42:2d:37:51:cf:88:bd:c5:f2:ea:3a:bc:
                    ad:59:c3:b0:c2:68:fe:99:f6:9d:08:49:58:82:f8:
                    43:70:7d:ff:5f:dc:51:98:0e:97:c4:7a:fe:9e:38:
                    36:a3:b6:f6:84:0a:25:5b:cf:aa:57:0b:37:52:59:
                    1c:d1:d3:01:fd:2d:ca:b9:b2:01:f0:45:da:ba:06:
                    52:37:de:65:07:0e:7c:d3:17:db:83:b9:6d:16:f2:
                    c9:05:90:36:8c:a8:37:45:da:04:7d:1f:6c:c9:29:
                    1d:67:83:a6:e7:75:ed:9c:fb:5d:b9:09:c3:e4:c0:
                    10:91:d4:b5:91:06:ce:72:14:ac:db:07:3d:bc:3c:
                    7d:a1:06:43:22:a8:df:cc:99:fc:39:9d:1f:ba:6c:
                    ab:a3:8b:be:30:b5:42:c3:53:2b:40:7b:38:30:58:
                    39:21:18:41:c3:c5:26:64:31:52:3d:c1:88:19:d7:
                    04:aa:d9:e1:46:fd:75:4d:9f:f4:be:1e:c9:1a:33:
                    72:c7:64:38:6a:03:31:37:a5:e7:c0:28:a0:b3:54:
                    00:49:ec:1b:d2:0a:1e:1d:e7:81:0c:46:45:81:a5:
                    fc:e9:e9:5b:f7:96:fc:52:22:53:73:e0:f2:d5:9f:
                    e0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:19:1F:56:33:8E:BE:2E:E0:31:A0:39:C3:18:A6:46:D7:08:86:C6
            X509v3 Authority Key Identifier:
                keyid:E1:05:22:57:34:57:FA:D9:CB:5A:6F:5C:19:D6:8C:CE:6D:6E:9C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/4QUiVzRX-tnLWm9cGdaMzm1unCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4QUiVzRX-tnLWm9cGdaMzm1unCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0CB0/182F4984C21811EB994E4271F8AEA228/6BE29F76D4D911EB8763AE3EF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:e908::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:35:99:9e:de:c0:b5:91:ef:46:8a:3e:9f:b4:8c:25:4b:8d:
         24:c5:82:54:4f:d5:7d:b4:9a:b8:37:7b:2d:63:4d:14:da:1b:
         de:d1:f1:1c:11:c3:ce:0c:64:27:fb:a6:6f:02:9a:75:da:59:
         5c:bd:84:74:48:3f:6a:2a:d5:54:0c:00:fd:1b:b8:89:0c:36:
         1d:07:c2:b8:05:ed:44:f3:f0:1a:1a:0d:c1:a4:1f:42:0c:88:
         69:3a:fc:c7:c9:09:29:70:0c:75:13:ef:c1:36:4f:e5:f4:e0:
         b7:b6:b8:dc:00:f7:a6:75:1d:5c:1f:62:cb:40:31:82:fc:f7:
         ec:34:c9:c0:32:78:2a:00:1b:71:39:f8:86:c8:1d:29:7c:b4:
         35:ad:7c:be:9c:d0:e0:aa:a4:d4:e7:02:20:03:54:7d:5b:0e:
         e5:fe:e6:51:2d:d0:67:f8:28:fb:76:d1:c9:1c:86:6c:bb:ee:
         8a:47:bf:cf:e7:56:2c:91:b3:bb:82:c3:c9:d9:c2:36:a9:b4:
         1e:52:b0:4e:85:32:cc:59:dd:83:79:47:05:c7:66:04:9f:a9:
         ff:e7:d1:47:bb:92:d6:d6:f9:fe:14:43:36:51:de:0c:75:36:
         16:b7:b6:ff:99:95:65:15:43:3d:99:07:ba:7e:62:d4:7b:e0:
         3b:e1:9c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----