Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/93BEE2E806AE11EA96835D44F8AEA228.roa
File:                     93BEE2E806AE11EA96835D44F8AEA228.roa (raw, json)
Hash identifier:          ympYrU6cVzeM/Zo6Ql2gUr5WY/OKcA1alTUO/oYBqs8=
Subject key identifier:   F1:48:AD:7D:86:2B:90:4B:EA:EE:EB:9A:D5:F8:E3:28:6C:32:57:A8
Certificate issuer:       /CN=F36A15D5AF/serialNumber=8DD7238F0137B158F53C7BE0FF0D2E5819F3EB7F
Certificate serial:       5D
Authority key identifier: 8D:D7:23:8F:01:37:B1:58:F5:3C:7B:E0:FF:0D:2E:58:19:F3:EB:7F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jdcjjwE3sVj1PHvg_w0uWBnz638.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/93BEE2E806AE11EA96835D44F8AEA228.roa
Signing time:             Thu 14 Nov 2019 07:15:46 +0000
ROA not before:           Thu 14 Nov 2019 07:15:41 +0000
ROA not after:            Mon 31 Dec 2029 07:15:41 +0000
asID:                     37722
IP address blocks:        2c0f:ec30::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jdcjjwE3sVj1PHvg_w0uWBnz638.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A15D5AF/serialNumber=8DD7238F0137B158F53C7BE0FF0D2E5819F3EB7F
        Validity
            Not Before: Nov 14 07:15:41 2019 GMT
            Not After : Dec 31 07:15:41 2029 GMT
        Subject: CN=5dccff22-37ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:21:55:63:71:6f:f9:df:27:dc:a7:a3:74:56:
                    f8:84:e7:59:de:a6:2a:cb:17:2d:48:9b:e0:6c:5d:
                    43:9a:c2:6b:1f:f2:a2:4e:92:fa:5a:97:87:c1:96:
                    21:11:1c:af:97:8b:de:51:f9:08:83:97:43:cc:92:
                    82:c6:98:2f:30:a1:cd:f5:29:f0:ad:9e:3f:22:b5:
                    b7:38:df:96:c1:80:e9:cd:98:60:4d:ee:b1:3b:6a:
                    b2:f2:8a:1a:c3:c2:18:8d:fe:f7:3d:bb:57:aa:02:
                    da:d8:06:07:9c:16:b1:35:f0:3f:09:23:4a:e4:40:
                    35:6d:d4:42:af:ff:9e:51:68:76:8b:f1:be:c6:8d:
                    01:dc:73:ce:f2:1e:16:a9:e4:9a:43:ea:cd:c3:75:
                    b2:ea:c3:0f:a6:40:69:c5:99:8b:c4:1d:9c:d7:9c:
                    18:e3:ee:b0:e4:49:8d:ec:9a:39:4d:66:7e:03:65:
                    d3:b9:0c:67:d3:62:be:0a:e6:67:7d:77:2d:a0:3f:
                    3a:1f:a3:d5:fe:ec:94:cc:98:71:50:9c:2c:78:32:
                    90:db:5f:bf:2d:3d:2c:4d:83:50:90:da:41:6b:74:
                    52:85:75:54:97:08:e1:02:07:07:55:b1:95:e8:df:
                    ea:31:c9:51:06:07:d5:b6:7c:9c:18:5e:c0:f0:f9:
                    5a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:48:AD:7D:86:2B:90:4B:EA:EE:EB:9A:D5:F8:E3:28:6C:32:57:A8
            X509v3 Authority Key Identifier:
                keyid:8D:D7:23:8F:01:37:B1:58:F5:3C:7B:E0:FF:0D:2E:58:19:F3:EB:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jdcjjwE3sVj1PHvg_w0uWBnz638.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/93BEE2E806AE11EA96835D44F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ec30::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:6c:ba:d8:5d:4d:25:87:b2:cd:8e:0a:f1:5d:25:f1:50:ec:
         92:79:16:2d:4f:08:e0:9b:00:bd:f1:8a:d4:45:59:72:38:d5:
         3b:13:9d:28:b7:76:82:7e:52:1a:8f:96:a3:55:14:cc:15:25:
         a4:c9:4c:a6:5b:1c:71:15:0b:fc:fd:85:b1:a8:97:2e:e3:c0:
         70:9c:c4:6f:d7:58:5c:a9:4f:67:61:13:8f:b3:0e:48:0c:34:
         d0:8f:4c:c5:25:e5:e8:86:41:68:27:3a:c2:f3:c1:9f:02:b3:
         5d:ec:aa:e0:19:99:2f:61:18:97:ba:d1:96:73:9c:04:03:f8:
         09:76:7b:b4:36:0b:a8:45:fc:8e:ad:5c:ad:81:63:b9:c5:76:
         c2:b5:43:26:8a:fe:ba:d6:0b:14:e5:f0:56:6f:d4:72:e0:ec:
         7e:df:37:23:f2:59:08:1d:a7:c7:ba:95:de:e3:5f:14:e6:3d:
         25:ee:cd:18:4f:a3:16:bf:84:a5:2d:e5:73:e2:45:78:7b:66:
         84:8d:ad:74:6c:09:9c:52:7b:d5:88:77:82:40:e9:1d:1d:5a:
         25:e6:10:b1:f3:ab:77:ed:f1:76:c7:b6:a2:50:93:6c:af:60:
         10:b3:2e:a8:78:2b:61:8d:e9:2e:cd:73:b9:8d:ca:ae:2a:bd:
         81:16:8b:67
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIBXTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZB
MTVENUFGMTEwLwYDVQQFEyg4REQ3MjM4RjAxMzdCMTU4RjUzQzdCRTBGRjBEMkU1
ODE5RjNFQjdGMB4XDTE5MTExNDA3MTU0MVoXDTI5MTIzMTA3MTU0MVowGDEWMBQG
A1UEAxMNNWRjY2ZmMjItMzdmZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMAhVWNxb/nfJ9yno3RW+ITnWd6mKssXLUib4GxdQ5rCax/yok6S+lqXh8GW
IREcr5eL3lH5CIOXQ8ySgsaYLzChzfUp8K2ePyK1tzjflsGA6c2YYE3usTtqsvKK
GsPCGI3+9z27V6oC2tgGB5wWsTXwPwkjSuRANW3UQq//nlFodovxvsaNAdxzzvIe
FqnkmkPqzcN1surDD6ZAacWZi8QdnNecGOPusORJjeyaOU1mfgNl07kMZ9Nivgrm
Z313LaA/Oh+j1f7slMyYcVCcLHgykNtfvy09LE2DUJDaQWt0UoV1VJcI4QIHB1Wx
lejf6jHJUQYH1bZ8nBhewPD5WnsCAwEAAaOCAm8wggJrMB0GA1UdDgQWBBTxSK19
hiuQS+ru65rV+OMobDJXqDAfBgNVHSMEGDAWgBSN1yOPATexWPU8e+D/DS5YGfPr
fzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTE1RDUvRjZGMkFGMzZDM0U1MTFFOTlEQTUwRTcwRjhBRUEyMjgvamRjamp3
RTNzVmoxUEh2Z193MHVXQm56NjM4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvamRjamp3RTNzVmoxUEh2Z193MHVXQm56NjM4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTE1RDUvRjZGMkFGMzZDM0U1MTFFOTlEQTUwRTcwRjhB
RUEyMjgvOTNCRUUyRTgwNkFFMTFFQTk2ODM1RDQ0RjhBRUEyMjgucm9hMCAGCCsG
AQUFBwEHAQH/BBEwDzANBAIAAjAHAwUALA/sMDANBgkqhkiG9w0BAQsFAAOCAQEA
NGy62F1NJYeyzY4K8V0l8VDsknkWLU8I4JsAvfGK1EVZcjjVOxOdKLd2gn5SGo+W
o1UUzBUlpMlMplsccRUL/P2FsaiXLuPAcJzEb9dYXKlPZ2ETj7MOSAw00I9MxSXl
6IZBaCc6wvPBnwKzXeyq4BmZL2EYl7rRlnOcBAP4CXZ7tDYLqEX8jq1crYFjucV2
wrVDJor+utYLFOXwVm/UcuDsft83I/JZCB2nx7qV3uNfFOY9Je7NGE+jFr+EpS3l
c+JFeHtmhI2tdGwJnFJ71Yh3gkDpHR1aJeYQsfOrd+3xdse2olCTbK9gELMuqHgr
YY3pLs1zuY3Kriq9gRaLZw==
-----END CERTIFICATE-----