Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/3E1C62F8ED1111EAAF8C1B4DF8AEA228.roa
File:                     3E1C62F8ED1111EAAF8C1B4DF8AEA228.roa (raw, json)
Hash identifier:          lomY/n2xTdezVmxQEF3P4Y0fMs0z0TPLBTmt8iTOt9E=
Subject key identifier:   0A:E1:0A:FF:B5:66:1C:EE:20:72:89:8C:F5:6F:48:D1:D7:C6:68:CF
Certificate issuer:       /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Certificate serial:       CE
Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/3E1C62F8ED1111EAAF8C1B4DF8AEA228.roa
Signing time:             Wed 02 Sep 2020 11:41:30 +0000
ROA not before:           Wed 02 Sep 2020 11:41:26 +0000
ROA not after:            Thu 02 Sep 2027 11:41:26 +0000
asID:                     327926
IP address blocks:        2c0f:e8e0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
        Validity
            Not Before: Sep  2 11:41:26 2020 GMT
            Not After : Sep  2 11:41:26 2027 GMT
        Subject: CN=5f4f84ea-3639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:54:19:fd:e6:67:41:7b:fd:91:67:3d:aa:3b:
                    dc:67:d4:65:6b:93:1b:c9:9c:69:13:1f:c3:fb:95:
                    ff:7e:c8:0d:01:99:c3:d8:84:e7:6e:65:eb:eb:c4:
                    80:09:1d:46:bb:55:b0:52:64:d2:39:d2:63:59:be:
                    88:44:84:40:d5:52:fd:89:16:fc:30:17:fa:71:62:
                    bc:9d:9a:4a:17:72:d2:96:76:9c:e7:bd:b6:51:47:
                    8d:4b:2c:a5:5d:f9:da:1c:4a:d0:c7:48:3b:a0:60:
                    73:8e:68:8d:99:7e:e8:b4:9e:d6:af:db:43:cf:ad:
                    88:2b:eb:4d:94:76:2c:52:5f:c9:e9:91:be:55:15:
                    35:34:99:3e:85:5d:e5:f5:75:11:44:67:55:6d:33:
                    71:98:b9:2b:ff:43:89:45:ba:36:65:13:3a:59:3b:
                    2e:0e:fc:a8:ba:c7:cb:70:24:fb:93:26:cd:4a:31:
                    b1:00:67:97:93:40:42:cd:45:55:f4:28:e8:c2:5a:
                    a6:28:79:78:fc:23:ca:3b:05:b9:28:2e:0b:f7:9f:
                    a6:21:cd:a8:6c:a5:a0:98:e1:4a:0b:73:ff:53:ce:
                    d1:9e:69:1d:6d:12:4f:8e:7c:5a:0a:b2:58:56:e9:
                    68:e3:b6:d7:c9:3b:43:ff:29:b4:38:f1:59:ec:77:
                    3b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E1:0A:FF:B5:66:1C:EE:20:72:89:8C:F5:6F:48:D1:D7:C6:68:CF
            X509v3 Authority Key Identifier:
                keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/3E1C62F8ED1111EAAF8C1B4DF8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:e8e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:55:11:39:a2:98:45:85:5c:7d:73:10:77:c0:87:6f:b2:eb:
         a1:4e:43:dd:70:cd:df:2f:f2:97:d1:37:13:0a:26:38:ec:e9:
         5c:b8:bf:b8:78:1f:6c:49:a1:9b:6c:7f:35:20:58:ef:ed:bd:
         26:34:8c:99:04:f9:ca:c0:f6:1f:94:c6:c9:bd:4c:92:3e:ec:
         1e:c0:66:eb:eb:4e:fd:0d:13:ec:ef:a2:7b:f1:3c:02:ac:5a:
         5d:21:1d:b9:ad:a3:96:98:b4:f3:2e:8d:dc:3b:7f:3d:35:48:
         b3:5d:71:d0:6f:ee:95:04:ed:cc:6a:4e:93:02:8e:2f:ee:d9:
         8e:80:4c:bc:48:81:ed:33:13:75:00:85:5a:4a:45:92:10:95:
         82:e8:45:8d:3d:13:34:3a:78:c6:ae:62:e0:31:7c:b5:af:5c:
         d1:d9:26:29:0e:84:83:72:7c:94:79:2d:c7:03:66:f0:bf:a5:
         7e:62:17:dc:b1:ba:70:90:44:0d:d7:49:81:bf:b6:80:96:1a:
         bd:ec:cd:bf:c7:c6:25:17:c0:50:ab:d7:b1:63:6d:96:fe:85:
         f8:8e:a3:74:2b:1b:2a:58:ff:48:c1:a9:3c:44:7e:2f:c3:54:
         ba:92:bc:81:a1:07:db:6a:ae:ba:87:02:18:40:98:43:0d:1d:
         4f:41:62:3b
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkE4MERBRjExMC8GA1UEBRMoQUMyRTUyRUU5MkJCQzIwNUEyMzBGRjc3QTE5MDQx
RERENTE0RDhGMDAeFw0yMDA5MDIxMTQxMjZaFw0yNzA5MDIxMTQxMjZaMBgxFjAU
BgNVBAMTDTVmNGY4NGVhLTM2MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCsVBn95mdBe/2RZz2qO9xn1GVrkxvJnGkTH8P7lf9+yA0BmcPYhOduZevr
xIAJHUa7VbBSZNI50mNZvohEhEDVUv2JFvwwF/pxYrydmkoXctKWdpznvbZRR41L
LKVd+docStDHSDugYHOOaI2Zfui0ntav20PPrYgr602UdixSX8npkb5VFTU0mT6F
XeX1dRFEZ1VtM3GYuSv/Q4lFujZlEzpZOy4O/Ki6x8twJPuTJs1KMbEAZ5eTQELN
RVX0KOjCWqYoeXj8I8o7BbkoLgv3n6YhzahspaCY4UoLc/9TztGeaR1tEk+OfFoK
slhW6WjjttfJO0P/KbQ48VnsdzuxAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUCuEK
/7VmHO4gcomM9W9I0dfGaM8wHwYDVR0jBBgwFoAUrC5S7pK7wgWiMP93oZBB3dUU
2PAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJBODBEL0M3MDVEODcyNUEyNDExRUFCOEU5REMwOUY4QUVBMjI4L3JDNVM3
cEs3d2dXaU1QOTNvWkJCM2RVVTJQQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3JDNVM3cEs3d2dXaU1QOTNvWkJCM2RVVTJQQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkJBODBEL0M3MDVEODcyNUEyNDExRUFCOEU5REMwOUY4
QUVBMjI4LzNFMUM2MkY4RUQxMTExRUFBRjhDMUI0REY4QUVBMjI4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD+jgMA0GCSqGSIb3DQEB
CwUAA4IBAQAYVRE5ophFhVx9cxB3wIdvsuuhTkPdcM3fL/KX0TcTCiY47OlcuL+4
eB9sSaGbbH81IFjv7b0mNIyZBPnKwPYflMbJvUySPuwewGbr6079DRPs76J78TwC
rFpdIR25raOWmLTzLo3cO389NUizXXHQb+6VBO3Mak6TAo4v7tmOgEy8SIHtMxN1
AIVaSkWSEJWC6EWNPRM0OnjGrmLgMXy1r1zR2SYpDoSDcnyUeS3HA2bwv6V+Yhfc
sbpwkEQN10mBv7aAlhq97M2/x8YlF8BQq9exY22W/oX4jqN0KxsqWP9Iwak8RH4v
w1S6kryBoQfbaq66hwIYQJhDDR1PQWI7
-----END CERTIFICATE-----