Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/6B11165C5A2511EA988F6E0AF8AEA228.roa
File:                     6B11165C5A2511EA988F6E0AF8AEA228.roa (raw, json)
Hash identifier:          QmpmNvM00XaZiVnJJCoy9azj8Zlhm+EUw7ByMYvzNUk=
Subject key identifier:   22:65:B9:36:54:A5:9C:2B:5F:CB:3F:D4:F9:C5:ED:4A:94:9C:CF:83
Certificate issuer:       /CN=F36BA80DAR/serialNumber=EF7EB7CFCF254C998BD9CE07C0F48E07D61B7C3F
Certificate serial:       02
Authority key identifier: EF:7E:B7:CF:CF:25:4C:99:8B:D9:CE:07:C0:F4:8E:07:D6:1B:7C:3F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7363z88lTJmL2c4HwPSOB9YbfD8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/6B11165C5A2511EA988F6E0AF8AEA228.roa
Signing time:             Fri 28 Feb 2020 12:25:35 +0000
ROA not before:           Fri 28 Feb 2020 12:25:30 +0000
ROA not after:            Fri 28 Feb 2025 12:25:30 +0000
asID:                     327926
IP address blocks:        169.255.28.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.mft
                          rsync://rpki.afrinic.net/repository/arin/7363z88lTJmL2c4HwPSOB9YbfD8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA80DAR/serialNumber=EF7EB7CFCF254C998BD9CE07C0F48E07D61B7C3F
        Validity
            Not Before: Feb 28 12:25:30 2020 GMT
            Not After : Feb 28 12:25:30 2025 GMT
        Subject: CN=5e5906bf-8628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a2:15:50:0d:1c:35:c9:94:c1:de:b3:25:0a:
                    15:e9:72:21:ed:f0:0e:d3:8d:0c:da:30:c4:c6:05:
                    48:29:bb:b1:f0:61:26:bd:de:b7:e0:54:a1:50:b3:
                    07:7a:fb:73:e7:ad:9e:54:50:26:e0:dc:60:0f:8c:
                    f5:fc:7a:86:8e:48:b0:9d:75:b7:64:29:41:d2:f5:
                    49:2d:95:1f:f3:f0:8d:4f:76:c4:cd:7b:26:06:0e:
                    92:05:6c:3f:0f:78:17:03:bf:85:a2:b9:2a:35:64:
                    27:02:ac:ff:47:27:7c:20:99:ae:7c:71:c0:71:0f:
                    b3:7b:e9:22:f6:b7:68:fd:22:00:20:ff:7a:da:a1:
                    9b:a0:35:e0:f7:66:d2:30:5d:cc:fe:47:19:6f:f8:
                    57:39:22:f2:08:61:15:c9:01:79:2d:17:76:a7:51:
                    6b:ad:f5:84:3f:59:6e:8a:ac:31:24:a7:a3:ff:12:
                    7a:2f:c2:26:27:ec:c8:12:a8:f5:88:2e:5f:e3:8e:
                    ef:d4:87:43:06:64:19:f0:6d:08:ee:7b:a4:8e:2b:
                    4d:d5:92:74:bb:0a:d5:02:a5:63:97:02:19:55:ec:
                    27:64:a8:a2:b1:47:b6:bd:cb:1c:1c:a6:6e:6c:db:
                    ae:ed:4e:4d:9e:72:7b:0f:02:7d:79:7a:0e:df:15:
                    c0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:65:B9:36:54:A5:9C:2B:5F:CB:3F:D4:F9:C5:ED:4A:94:9C:CF:83
            X509v3 Authority Key Identifier:
                keyid:EF:7E:B7:CF:CF:25:4C:99:8B:D9:CE:07:C0:F4:8E:07:D6:1B:7C:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/7363z88lTJmL2c4HwPSOB9YbfD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7363z88lTJmL2c4HwPSOB9YbfD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA80D/D81C33865A2411EABDAFF409F8AEA228/6B11165C5A2511EA988F6E0AF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.255.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:3b:af:e0:35:ef:df:b5:0b:2e:49:4b:d0:f4:ee:15:db:6d:
         ee:d1:b7:12:94:c8:35:0a:6d:e0:95:f1:29:f7:86:3c:45:7e:
         dc:c1:98:b7:0e:07:ce:dd:e6:0d:2f:55:bf:8e:2d:fa:32:3c:
         5c:26:9c:45:ae:28:b0:40:28:b6:cc:1a:f0:23:0f:59:5a:f6:
         ad:9f:f8:8a:84:ed:9a:95:79:ae:c0:e2:fc:d8:21:9c:ec:1e:
         c6:68:59:f0:75:de:ed:9b:c1:83:51:5a:4d:66:c1:5a:2f:0f:
         94:8a:e2:ab:1d:9e:37:84:6f:47:e3:17:fe:0b:d3:bb:0b:bf:
         cd:ed:6a:08:a0:0f:38:d6:22:f5:28:12:4c:5c:52:98:09:f7:
         17:37:d3:17:ad:ca:cb:db:75:62:23:49:93:b5:57:b3:b0:92:
         e3:d3:5d:a9:61:d2:4b:5f:f9:26:ac:38:99:3a:56:92:36:56:
         9c:72:ec:30:b0:33:35:b0:c4:e4:cc:5a:62:28:29:c3:a2:ea:
         2a:45:f6:7e:41:4d:07:eb:84:6a:b4:f0:f8:7a:e2:7b:10:dd:
         9b:c4:c7:20:91:b9:be:61:79:58:fe:8a:fa:9a:ad:2a:a2:11:
         ae:60:f1:54:02:d1:e5:c2:e4:55:3f:0c:b9:59:2c:f6:ed:1d:
         ce:fe:05:cc
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
QTgwREFSMTEwLwYDVQQFEyhFRjdFQjdDRkNGMjU0Qzk5OEJEOUNFMDdDMEY0OEUw
N0Q2MUI3QzNGMB4XDTIwMDIyODEyMjUzMFoXDTI1MDIyODEyMjUzMFowGDEWMBQG
A1UEAxMNNWU1OTA2YmYtODYyODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALiiFVANHDXJlMHesyUKFelyIe3wDtONDNowxMYFSCm7sfBhJr3et+BUoVCz
B3r7c+etnlRQJuDcYA+M9fx6ho5IsJ11t2QpQdL1SS2VH/PwjU92xM17JgYOkgVs
Pw94FwO/haK5KjVkJwKs/0cnfCCZrnxxwHEPs3vpIva3aP0iACD/etqhm6A14Pdm
0jBdzP5HGW/4Vzki8ghhFckBeS0XdqdRa631hD9ZboqsMSSno/8Sei/CJifsyBKo
9YguX+OO79SHQwZkGfBtCO57pI4rTdWSdLsK1QKlY5cCGVXsJ2SoorFHtr3LHBym
bmzbru1OTZ5yew8CfXl6Dt8VwIMCAwEAAaOCAmswggJnMB0GA1UdDgQWBBQiZbk2
VKWcK1/LP9T5xe1KlJzPgzAfBgNVHSMEGDAWgBTvfrfPzyVMmYvZzgfA9I4H1ht8
PzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QkE4MEQvRDgxQzMzODY1QTI0MTFFQUJEQUZGNDA5RjhBRUEyMjgvNzM2M3o4
OGxUSm1MMmM0SHdQU09COVliZkQ4LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
NzM2M3o4OGxUSm1MMmM0SHdQU09COVliZkQ4LmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QkE4MEQvRDgxQzMzODY1QTI0MTFFQUJEQUZGNDA5RjhBRUEy
MjgvNkIxMTE2NUM1QTI1MTFFQTk4OEY2RTBBRjhBRUEyMjgucm9hMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQCqf8cMA0GCSqGSIb3DQEBCwUAA4IBAQB/O6/g
Ne/ftQsuSUvQ9O4V223u0bcSlMg1Cm3glfEp94Y8RX7cwZi3DgfO3eYNL1W/ji36
MjxcJpxFriiwQCi2zBrwIw9ZWvatn/iKhO2alXmuwOL82CGc7B7GaFnwdd7tm8GD
UVpNZsFaLw+UiuKrHZ43hG9H4xf+C9O7C7/N7WoIoA841iL1KBJMXFKYCfcXN9MX
rcrL23ViI0mTtVezsJLj012pYdJLX/kmrDiZOlaSNlaccuwwsDM1sMTkzFpiKCnD
ouoqRfZ+QU0H64RqtPD4euJ7EN2bxMcgkbm+YXlY/or6mq0qohGuYPFUAtHlwuRV
Pwy5WSz27R3O/gXM
-----END CERTIFICATE-----