Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/B808257A97E111ED9E450A7DF1222468.roa
File:                     B808257A97E111ED9E450A7DF1222468.roa (raw, json)
Hash identifier:          cAtOc/GhRwVJqkbF1v2sZelm06tLlTbFvHsrx/k9FKo=
Subject key identifier:   EE:18:96:0C:F2:2E:AB:F5:A9:48:38:F7:7E:92:25:63:74:E9:FE:13
Certificate issuer:       /CN=F36BE2EDRI/serialNumber=81067BA09AC67344F02CD4E64B6BF5E4CD73B810
Certificate serial:       73
Authority key identifier: 81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/B808257A97E111ED9E450A7DF1222468.roa
Signing time:             Tue 02 May 2023 10:37:31 +0000
ROA not before:           Thu 19 Jan 2023 10:11:46 +0000
ROA not after:            Sat 31 Dec 2033 10:11:46 +0000
asID:                     33779
IP address blocks:        80.88.12.0/22 maxlen: 27

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
                          rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDRI/serialNumber=81067BA09AC67344F02CD4E64B6BF5E4CD73B810
        Validity
            Not Before: Jan 19 10:11:46 2023 GMT
            Not After : Dec 31 10:11:46 2033 GMT
        Subject: CN=6450e7ea-b96f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:bc:21:5a:dd:93:d0:68:bc:4c:31:32:f9:
                    6a:b0:ff:d9:10:64:41:6c:55:75:5a:25:6c:60:f2:
                    dd:37:bf:5c:b3:04:07:97:87:ad:3c:a6:31:f7:db:
                    f1:c7:96:b3:db:2a:0d:67:e5:6e:cb:3d:28:d0:68:
                    65:ef:7b:8e:cc:c7:97:ad:08:68:46:80:6c:5a:7d:
                    d4:23:d4:40:ce:79:d7:d6:ba:70:21:e9:41:3d:7b:
                    8d:a9:4c:87:6e:15:22:13:7e:dd:8b:31:6b:73:d7:
                    9a:d7:aa:1c:ca:fd:e3:82:d4:01:b7:f6:14:9e:de:
                    3a:c9:f7:0b:e4:c8:76:82:dd:ea:cd:41:de:47:7b:
                    43:0f:0b:b4:6b:12:10:70:de:de:a9:91:b5:64:84:
                    19:e8:ef:f6:a0:33:52:05:00:45:e9:d2:0d:c9:89:
                    fe:ca:66:94:73:e8:56:e6:24:f2:f0:39:c2:7c:ea:
                    e3:76:c1:f7:45:7c:67:52:e6:38:1a:c0:08:96:d4:
                    eb:a9:a8:d1:11:12:ec:5d:db:18:59:f6:6d:be:93:
                    2f:bf:a0:05:3b:58:5a:91:96:98:0a:ed:37:5e:40:
                    aa:09:54:00:c4:93:09:a6:f0:25:bc:73:76:38:8d:
                    94:e2:20:65:59:a7:94:69:39:c0:61:05:a8:a7:84:
                    93:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:18:96:0C:F2:2E:AB:F5:A9:48:38:F7:7E:92:25:63:74:E9:FE:13
            X509v3 Authority Key Identifier:
                keyid:81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/B808257A97E111ED9E450A7DF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  80.88.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a8:f7:2e:2d:e3:2d:43:f4:03:22:b4:81:8c:71:dc:50:2b:7a:
         c2:ea:d6:85:f5:94:d3:d2:9d:b9:ea:f7:9c:e9:28:82:03:d7:
         9d:9e:e6:48:e4:e2:71:d6:36:3b:cd:b0:e9:e4:1b:43:84:73:
         60:ca:59:8c:a6:c8:c1:55:2b:94:1b:9e:2f:6d:2f:95:4e:58:
         b1:bb:44:d0:a9:72:e8:31:bd:83:e5:89:1c:c0:ed:5e:c7:05:
         13:7a:8f:91:3f:2e:3c:45:f6:81:2e:ac:5c:ce:b5:a7:e4:00:
         0e:d7:85:de:30:60:f0:dc:57:0a:e3:6f:f7:e7:b7:11:de:0e:
         14:6c:df:3f:f3:70:eb:a4:54:d2:01:41:fc:9c:31:0b:b6:35:
         cc:d3:4b:e5:45:0f:7d:d7:57:e0:6b:29:3b:cb:e3:70:9f:34:
         5f:5f:3e:6e:df:ba:6e:46:33:7a:89:08:5a:6a:13:7d:73:08:
         f9:97:63:23:ae:3e:e5:23:11:f1:53:e9:b3:b5:b6:5d:ed:01:
         84:38:b8:e3:fd:de:9b:f7:70:80:90:bc:ea:c6:cb:f5:e6:4d:
         38:3d:50:58:e9:a3:82:44:1f:57:04:f9:ff:74:f0:d5:f4:81:
         e4:23:41:e3:bc:75:fd:64:08:a3:c6:ba:5b:21:be:d4:8c:e7:
         d8:79:7f:29
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBczANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZC
RTJFRFJJMTEwLwYDVQQFEyg4MTA2N0JBMDlBQzY3MzQ0RjAyQ0Q0RTY0QjZCRjVF
NENENzNCODEwMB4XDTIzMDExOTEwMTE0NloXDTMzMTIzMTEwMTE0NlowGDEWMBQG
A1UEAxMNNjQ1MGU3ZWEtYjk2ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALcJvCFa3ZPQaLxMMTL5arD/2RBkQWxVdVolbGDy3Te/XLMEB5eHrTymMffb
8ceWs9sqDWflbss9KNBoZe97jszHl60IaEaAbFp91CPUQM5519a6cCHpQT17jalM
h24VIhN+3Ysxa3PXmteqHMr944LUAbf2FJ7eOsn3C+TIdoLd6s1B3kd7Qw8LtGsS
EHDe3qmRtWSEGejv9qAzUgUARenSDcmJ/spmlHPoVuYk8vA5wnzq43bB90V8Z1Lm
OBrACJbU66mo0RES7F3bGFn2bb6TL7+gBTtYWpGWmArtN15AqglUAMSTCabwJbxz
djiNlOIgZVmnlGk5wGEFqKeEk3sCAwEAAaOCAqIwggKeMB0GA1UdDgQWBBTuGJYM
8i6r9alIOPd+kiVjdOn+EzAfBgNVHSMEGDAWgBSBBnugmsZzRPAs1OZLa/XkzXO4
EDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QkUyRUQvMDYzMjRDRDg5N0RGMTFFREE3MTlGOUYyRjEyMjI0NjgvZ1FaN29K
ckdjMFR3TE5UbVMydjE1TTF6dUJBLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L3JpcGUv
Z1FaN29KckdjMFR3TE5UbVMydjE1TTF6dUJBLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUFBzAL
hoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QkUyRUQvMDYzMjRDRDg5N0RGMTFFREE3MTlGOUYyRjEyMjI0
NjgvQjgwODI1N0E5N0UxMTFFRDlFNDUwQTdERjEyMjI0Njgucm9hMDUGCCsGAQUF
BzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAlBYDDANBgkqhkiG9w0BAQsFAAOC
AQEAqPcuLeMtQ/QDIrSBjHHcUCt6wurWhfWU09Kduer3nOkoggPXnZ7mSOTicdY2
O82w6eQbQ4RzYMpZjKbIwVUrlBueL20vlU5YsbtE0Kly6DG9g+WJHMDtXscFE3qP
kT8uPEX2gS6sXM61p+QADteF3jBg8NxXCuNv9+e3Ed4OFGzfP/Nw66RU0gFB/Jwx
C7Y1zNNL5UUPfddX4GspO8vjcJ80X18+bt+6bkYzeokIWmoTfXMI+ZdjI64+5SMR
8VPps7W2Xe0BhDi44/3em/dwgJC86sbL9eZNOD1QWOmjgkQfVwT5/3Tw1fSB5CNB
47x1/WQIo8a6WyG+1Izn2Hl/KQ==
-----END CERTIFICATE-----