Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CC310B4E890C11E9A4E3BF61F8AEA228.roa
File:                     CC310B4E890C11E9A4E3BF61F8AEA228.roa (raw, json)
Hash identifier:          ihADbR6U+GfVQt9LE7QygTkif7rJadS5w63IsgC6psc=
Subject key identifier:   20:82:68:A4:6A:76:49:F0:AB:A9:63:AD:35:21:B3:F5:2F:36:89:7E
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       02
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CC310B4E890C11E9A4E3BF61F8AEA228.roa
Signing time:             Fri 07 Jun 2019 10:12:47 +0000
ROA not before:           Fri 07 Jun 2019 10:12:23 +0000
ROA not after:            Thu 07 Jun 2029 10:12:23 +0000
asID:                     37564
IP address blocks:        165.49.0.0/16 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Jun  7 10:12:23 2019 GMT
            Not After : Jun  7 10:12:23 2029 GMT
        Subject: CN=5cfa389f-133c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5f:e7:5d:3e:42:c0:ef:37:9a:fd:b5:44:b8:
                    8a:ef:1f:1e:4f:81:c6:9c:f1:05:52:43:a3:ea:c5:
                    4e:17:ff:86:aa:f3:8f:fe:b7:14:cb:cb:e4:84:2b:
                    c9:e4:f2:bc:48:c5:f7:94:66:54:4e:9a:b6:81:40:
                    75:ee:fb:2d:47:73:b6:85:31:05:cc:04:79:55:49:
                    cb:f0:59:58:0c:d3:00:79:58:4d:f0:d9:9b:12:12:
                    83:96:25:18:64:8f:f7:4f:f1:dd:90:33:46:d8:f4:
                    39:82:c4:e8:ad:9f:dc:46:ee:b6:fc:d0:ab:a1:0e:
                    ca:13:a6:a2:ff:4f:26:6e:e9:91:0c:a1:6e:f0:53:
                    8f:09:59:c5:c2:eb:b2:ef:67:ee:ec:6a:a9:f4:6c:
                    97:88:79:99:c2:21:5f:83:be:5d:77:97:3e:4a:59:
                    ea:45:bc:d8:f4:13:90:26:74:07:72:3f:e0:af:7d:
                    d2:92:dc:e4:98:a6:36:dd:69:45:b5:23:a7:d1:e6:
                    6a:00:c5:06:fe:a2:98:dd:71:07:d7:7a:7a:d5:8c:
                    de:14:80:2b:57:aa:7d:e3:8a:1f:0d:69:a9:23:23:
                    19:58:fe:a4:b9:76:5e:1d:11:39:89:26:4e:55:41:
                    76:bd:77:46:29:92:d5:41:65:92:32:d1:1e:48:aa:
                    df:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:82:68:A4:6A:76:49:F0:AB:A9:63:AD:35:21:B3:F5:2F:36:89:7E
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CC310B4E890C11E9A4E3BF61F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         16:bc:62:d8:1e:2e:18:21:f4:1e:32:5e:ac:59:8f:ef:36:0b:
         56:3d:b7:cf:ab:19:58:5c:af:25:fd:20:9e:e5:da:e0:ac:10:
         79:29:24:d4:dd:45:2f:d9:6e:3a:8d:40:27:1b:85:66:c5:2e:
         23:7b:96:13:d5:36:17:25:c7:60:60:4a:7b:58:c6:02:59:b5:
         e2:7c:a5:85:82:58:70:a6:b5:d0:a9:90:d4:bb:84:a9:d8:a0:
         b7:18:fa:30:68:8c:ba:e1:79:8d:39:7d:08:25:5e:18:83:da:
         dd:32:cf:b5:0c:bf:b7:18:8b:90:f1:17:65:1a:f8:0e:95:92:
         3c:c1:78:c8:3d:a1:0f:af:b3:03:c7:53:3b:c7:c7:5b:47:4b:
         d0:c0:8a:fa:6b:00:dd:ef:b8:86:6e:9c:a7:67:a6:6d:fc:b1:
         26:de:91:e3:ad:ce:c8:a1:c4:66:a3:63:bd:e9:b0:0d:c2:10:
         29:3c:11:5a:cc:47:f3:75:ec:bb:53:ae:1f:9d:13:1e:a9:6c:
         3f:11:7a:86:7d:17:82:9b:7e:14:0c:9b:c2:d8:24:ac:cb:06:
         ed:fd:14:55:86:29:e5:ee:6f:35:b0:35:d5:9f:ef:a5:ae:32:
         a4:23:00:35:c0:d9:0b:77:9e:1c:9a:06:9f:9a:f9:44:60:17:
         3c:3e:30:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----