Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/A122BD06C23211EB87EB0616F8AEA228.roa
File:                     A122BD06C23211EB87EB0616F8AEA228.roa (raw, json)
Hash identifier:          tLtpZOHdatkZusOvIza1WgLkgIkjsRWUedCu9OwEzN8=
Subject key identifier:   CF:C0:E1:A8:6A:1F:29:3B:5A:59:CE:29:9F:00:BF:E8:80:85:7E:F0
Certificate issuer:       /CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
Certificate serial:       01EB
Authority key identifier: AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/A122BD06C23211EB87EB0616F8AEA228.roa
Signing time:             Mon 31 May 2021 17:07:07 +0000
ROA not before:           Mon 31 May 2021 17:07:03 +0000
ROA not after:            Thu 31 May 2035 17:07:03 +0000
asID:                     327926
IP address blocks:        2c0f:e8e0:4090::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 491 (0x1eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA80DAF/serialNumber=AC2E52EE92BBC205A230FF77A19041DDD514D8F0
        Validity
            Not Before: May 31 17:07:03 2021 GMT
            Not After : May 31 17:07:03 2035 GMT
        Subject: CN=60b517bb-f5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:53:71:9b:ff:61:d0:f8:46:dd:12:1a:9b:5d:
                    ec:a3:3f:be:13:2e:81:07:98:2d:5f:fe:a9:7b:e8:
                    05:68:22:2c:01:68:c4:9d:0f:d2:8e:20:3d:bc:a4:
                    0c:70:a6:91:90:eb:38:55:07:46:fb:7f:65:bc:e9:
                    c4:f9:de:e0:c0:cd:56:02:36:40:e2:7d:d1:3a:c9:
                    d7:0b:b1:f5:35:04:21:03:c9:35:6b:04:ce:ff:da:
                    67:a0:9d:a3:e4:b6:da:69:b8:f3:8d:4e:b1:75:9e:
                    f7:20:5a:bb:33:04:7b:71:77:ec:6f:b6:41:ad:6b:
                    ff:ee:55:b7:8c:2b:2e:ef:1c:da:d2:f5:04:5d:06:
                    ab:82:33:33:b6:b5:87:1c:6f:2d:53:ce:47:c2:67:
                    ad:e7:14:25:cc:02:3f:f9:84:27:a7:4c:b9:c1:69:
                    bb:11:07:74:4c:70:9d:30:3e:0a:02:90:f3:e2:f0:
                    b4:11:52:8f:30:bd:03:39:50:d4:d1:44:00:30:5b:
                    ca:4a:18:7a:88:0e:fe:39:6a:89:57:3f:5a:63:55:
                    21:1f:1c:f3:18:08:ff:55:26:1a:dd:b0:88:58:46:
                    a7:74:2f:06:3f:e9:6f:df:b9:2c:5a:aa:b9:16:5a:
                    0e:a5:2c:4f:92:ae:4b:2b:4a:0a:f0:67:20:ea:5c:
                    de:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C0:E1:A8:6A:1F:29:3B:5A:59:CE:29:9F:00:BF:E8:80:85:7E:F0
            X509v3 Authority Key Identifier:
                keyid:AC:2E:52:EE:92:BB:C2:05:A2:30:FF:77:A1:90:41:DD:D5:14:D8:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/rC5S7pK7wgWiMP93oZBB3dUU2PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rC5S7pK7wgWiMP93oZBB3dUU2PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/C705D8725A2411EAB8E9DC09F8AEA228/A122BD06C23211EB87EB0616F8AEA228.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:e8e0:4090::/44

    Signature Algorithm: sha256WithRSAEncryption
         97:20:b4:6a:b7:06:08:7f:59:a3:14:6b:a5:a2:84:ca:82:97:
         12:37:be:e6:94:5d:cf:b3:2c:5c:e0:3a:c1:a0:1f:7e:e0:45:
         41:b9:99:66:b4:2e:4f:3e:31:5a:97:d0:9d:25:78:32:f2:5d:
         53:ce:1b:f0:8d:22:eb:69:81:5c:70:6a:f5:55:f9:32:7b:d3:
         49:6f:2a:78:88:e5:57:c0:e4:04:07:cf:3e:55:bc:27:39:6b:
         a5:f1:07:5c:8c:53:60:d5:b4:40:6e:d8:6a:e8:d1:a9:28:ed:
         52:88:da:51:70:44:bb:60:7c:14:f9:24:f4:6a:5c:0d:82:31:
         d5:62:e7:6d:2d:30:80:db:b9:d4:cf:0a:86:32:11:3a:74:23:
         68:b9:6e:53:38:2c:c2:79:c9:8d:94:17:06:82:cc:e1:a6:0b:
         fe:98:7b:52:df:1a:b8:b2:ea:f0:36:d1:da:d5:7f:be:9e:b9:
         7e:57:c0:f3:bf:8f:d3:54:2f:b8:44:c2:72:b2:1b:2f:d8:a3:
         14:27:32:31:78:b5:75:c7:99:9c:92:d9:d5:0a:65:25:38:ac:
         a1:b9:d7:38:f4:61:35:f9:7c:04:76:46:f2:d6:08:79:ec:b3:
         85:a2:1b:0a:b6:c1:a2:f5:1d:50:94:ed:a5:08:d9:c3:52:53:
         a8:e7:c0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----