Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/A6850988591311ED87D1119BF1222468.roa
File:                     A6850988591311ED87D1119BF1222468.roa (raw, json)
Hash identifier:          DJ0ttIRjyFZsO+ByjtKNR+0uS2OUuFVRGFcfV6teVbE=
Subject key identifier:   71:08:E4:E5:3D:75:E8:FD:28:75:6C:B0:07:21:3F:A2:68:8B:DF:57
Certificate issuer:       /CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
Certificate serial:       09
Authority key identifier: 83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/A6850988591311ED87D1119BF1222468.roa
Signing time:             Mon 31 Oct 2022 12:00:45 +0000
ROA not before:           Mon 31 Oct 2022 12:00:41 +0000
ROA not after:            Thu 31 Oct 2024 12:00:41 +0000
asID:                     328474
IP address blocks:        2c0f:ed60::/32 maxlen: 54

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 18 May 2024 00:04:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E7CAF/serialNumber=83DD126E5E585FFA93F5F1FF5DEEF6FFFDBBFFA6
        Validity
            Not Before: Oct 31 12:00:41 2022 GMT
            Not After : Oct 31 12:00:41 2024 GMT
        Subject: CN=635fb8ed-7aaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:79:0d:22:4d:65:0b:af:5f:fa:a7:0d:67:00:
                    4a:57:00:26:2c:5e:95:1a:2b:e9:a9:40:2a:9d:b1:
                    14:ed:f4:83:d5:06:6a:bb:ec:03:95:2b:1d:60:37:
                    10:d8:77:2a:34:4d:a6:87:46:5f:54:0d:95:d3:cd:
                    42:93:5e:d6:ba:d7:01:28:80:e5:73:f0:48:49:8d:
                    aa:68:33:12:19:7e:7c:d7:59:ae:05:98:ec:1f:87:
                    c6:0c:5f:35:b4:3c:06:28:29:df:51:e0:45:33:ee:
                    32:be:98:01:28:0e:44:12:75:70:f5:a2:e7:8b:18:
                    f0:8c:24:9a:62:4d:2c:4d:f4:05:b8:f6:65:dd:38:
                    e7:93:0a:d2:cd:c8:cd:bd:a4:28:06:95:33:f5:8e:
                    d4:98:41:3e:e6:2f:3f:7d:5b:02:25:52:6b:5d:fd:
                    bf:cf:8d:d8:36:b2:d8:88:bf:26:28:23:3a:58:c0:
                    55:57:94:d2:c7:06:d2:f3:82:aa:ee:d0:47:44:33:
                    53:62:9c:81:c5:e2:25:17:21:96:a0:12:6c:dc:2c:
                    b5:27:ec:8e:0f:fb:83:08:87:9a:bd:ae:4f:7f:3f:
                    a4:65:dc:78:01:db:e3:33:dc:b8:70:98:03:db:98:
                    4e:78:c5:15:73:dc:ac:9a:22:30:ad:f2:18:03:86:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:08:E4:E5:3D:75:E8:FD:28:75:6C:B0:07:21:3F:A2:68:8B:DF:57
            X509v3 Authority Key Identifier:
                keyid:83:DD:12:6E:5E:58:5F:FA:93:F5:F1:FF:5D:EE:F6:FF:FD:BB:FF:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/g90Sbl5YX_qT9fH_Xe72__27_6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g90Sbl5YX_qT9fH_Xe72__27_6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E7C/2BD3F1B6590111EDA097F2F0F1222468/A6850988591311ED87D1119BF1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ed60::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:0c:93:8c:e3:b5:fd:4c:aa:f9:74:ed:62:e6:7e:e3:45:97:
         b4:94:b0:ce:6e:65:25:18:d8:b6:89:86:af:cc:a2:a1:75:69:
         b1:12:c8:eb:f8:4c:ec:03:36:fe:a9:34:5b:c5:3c:fa:4c:7a:
         26:51:bc:ea:a9:31:30:81:6b:7c:ba:5f:d5:b4:2b:ba:14:dd:
         f9:61:38:08:e3:17:b1:a7:6d:f3:c4:25:33:6a:70:ca:d2:99:
         49:c5:45:2f:1b:c8:6b:95:4c:1c:e9:2f:64:2f:2f:e2:f2:22:
         ff:4d:9b:1f:13:92:d4:73:ac:ff:d8:12:d6:66:d4:2a:7d:5b:
         ed:cf:4d:9b:c5:1f:9e:6d:15:ec:99:9e:8b:3e:48:e1:64:03:
         f2:cc:ef:73:85:b2:79:d0:41:80:35:be:9e:ac:16:0e:65:35:
         5c:15:63:79:6d:f1:ec:f5:74:0c:b9:51:c1:29:9e:73:a0:3b:
         40:c3:d1:70:99:e1:b2:25:1a:83:16:31:fe:be:dc:9b:6a:21:
         1b:91:e3:61:73:ed:88:c9:f7:a7:60:7a:4c:7a:5b:0b:8f:a2:
         5c:82:43:18:31:e3:76:cf:db:34:23:1c:20:32:e2:f4:ee:14:
         33:a4:1c:a3:68:6e:4e:39:db:60:1c:33:95:b2:6e:cb:28:d1:
         74:c2:1f:54
-----BEGIN CERTIFICATE-----
MIIFgzCCBGugAwIBAgIBCTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZD
NkU3Q0FGMTEwLwYDVQQFEyg4M0REMTI2RTVFNTg1RkZBOTNGNUYxRkY1REVFRjZG
RkZEQkJGRkE2MB4XDTIyMTAzMTEyMDA0MVoXDTI0MTAzMTEyMDA0MVowGDEWMBQG
A1UEAwwNNjM1ZmI4ZWQtN2FhYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALx5DSJNZQuvX/qnDWcASlcAJixelRor6alAKp2xFO30g9UGarvsA5UrHWA3
ENh3KjRNpodGX1QNldPNQpNe1rrXASiA5XPwSEmNqmgzEhl+fNdZrgWY7B+Hxgxf
NbQ8Bigp31HgRTPuMr6YASgORBJ1cPWi54sY8IwkmmJNLE30Bbj2Zd0455MK0s3I
zb2kKAaVM/WO1JhBPuYvP31bAiVSa139v8+N2Day2Ii/JigjOljAVVeU0scG0vOC
qu7QR0QzU2KcgcXiJRchlqASbNwstSfsjg/7gwiHmr2uT38/pGXceAHb4zPcuHCY
A9uYTnjFFXPcrJoiMK3yGAOGk9UCAwEAAaOCAqYwggKiMB0GA1UdDgQWBBRxCOTl
PXXo/Sh1bLAHIT+iaIvfVzAfBgNVHSMEGDAWgBSD3RJuXlhf+pP18f9d7vb//bv/
pjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzZFN0MvMkJEM0YxQjY1OTAxMTFFREEwOTdGMkYwRjEyMjI0NjgvZzkwU2Js
NVlYX3FUOWZIX1hlNzJfXzI3XzZZLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZzkwU2JsNVlYX3FUOWZIX1hlNzJfXzI3XzZZLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZFN0MvMkJEM0YxQjY1OTAxMTFFREEwOTdGMkYwRjEy
MjI0NjgvQTY4NTA5ODg1OTEzMTFFRDg3RDExMTlCRjEyMjI0Njgucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACwP7WAwDQYJKoZIhvcNAQEL
BQADggEBABcMk4zjtf1Mqvl07WLmfuNFl7SUsM5uZSUY2LaJhq/MoqF1abESyOv4
TOwDNv6pNFvFPPpMeiZRvOqpMTCBa3y6X9W0K7oU3flhOAjjF7GnbfPEJTNqcMrS
mUnFRS8byGuVTBzpL2QvL+LyIv9Nmx8TktRzrP/YEtZm1Cp9W+3PTZvFH55tFeyZ
nos+SOFkA/LM73OFsnnQQYA1vp6sFg5lNVwVY3lt8ez1dAy5UcEpnnOgO0DD0XCZ
4bIlGoMWMf6+3JtqIRuR42Fz7YjJ96dgekx6WwuPolyCQxgx43bP2zQjHCAy4vTu
FDOkHKNobk4522AcM5Wybsso0XTCH1Q=
-----END CERTIFICATE-----