Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/377FE0182E5A11EEBAD4235D4AD9E6FC.roa
File:                     377FE0182E5A11EEBAD4235D4AD9E6FC.roa (raw, json)
Hash identifier:          OD1ZCDLkvNzf6Sx1oBZQWzF7QRB62MCnGk8KnzctnFE=
Subject key identifier:   50:F6:32:86:0E:9D:59:90:DC:E2:19:9A:F9:CE:4E:93:B8:34:FF:14
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04E5
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/377FE0182E5A11EEBAD4235D4AD9E6FC.roa
Signing time:             Sat 29 Jul 2023 21:52:31 +0000
ROA not before:           Sat 29 Jul 2023 21:52:25 +0000
ROA not after:            Sat 30 Jul 2033 21:52:25 +0000
asID:                     37119
IP address blocks:        105.173.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 May 2024 00:05:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253 (0x4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 29 21:52:25 2023 GMT
            Not After : Jul 30 21:52:25 2033 GMT
        Subject: CN=64c58a1f-a084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a2:f7:95:ab:b9:4c:ab:c6:74:d8:2a:89:71:
                    59:55:e2:a2:59:9c:c4:9a:32:eb:9b:47:49:10:1e:
                    1f:dd:df:98:0e:ae:dc:33:1d:7e:65:07:d3:02:78:
                    9c:0f:7d:e5:58:c9:9e:7e:41:bf:d7:ca:72:65:09:
                    08:d3:fe:84:92:52:1c:96:31:fc:1b:fc:cd:80:52:
                    12:d1:23:5b:42:28:15:d8:49:58:02:12:8e:77:a5:
                    ef:36:ed:73:33:e7:87:25:b9:86:2d:62:48:fe:a9:
                    38:66:b4:74:e8:5d:f7:68:3e:29:10:a2:30:47:e6:
                    3c:98:e1:65:35:cb:b7:6c:74:ca:f5:f6:c0:01:7a:
                    00:94:47:7b:76:75:50:d2:e7:49:96:81:c8:fc:51:
                    9b:c4:87:60:3c:b8:3d:27:6f:8e:10:d6:19:a3:c0:
                    6b:ca:cc:08:4b:c1:e9:99:55:f8:66:f9:0e:95:9a:
                    30:73:d8:86:64:86:89:a6:2e:15:01:c7:0f:99:d4:
                    83:12:50:e4:42:03:83:98:e3:c5:0a:f6:69:0f:45:
                    f3:2b:14:e1:ff:fa:09:71:46:72:08:9a:7a:94:39:
                    fe:a2:a6:85:5d:5b:4f:86:1a:ee:cf:a8:18:39:cb:
                    18:8d:99:34:13:98:72:ea:51:86:74:4d:a4:3b:9e:
                    fe:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F6:32:86:0E:9D:59:90:DC:E2:19:9A:F9:CE:4E:93:B8:34:FF:14
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/377FE0182E5A11EEBAD4235D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.173.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         20:e6:a2:31:b1:e7:bb:c9:0e:4a:03:11:51:5a:e6:1b:28:39:
         a4:78:9a:13:87:17:d9:f3:70:43:30:09:5e:93:18:f7:da:aa:
         31:c3:2e:f8:43:b5:48:43:ad:d5:31:21:ad:69:5e:e9:70:f8:
         ce:05:67:91:60:38:30:04:91:2a:a0:75:03:1d:d6:5c:7e:de:
         eb:ff:6c:2f:53:24:35:58:57:7a:10:ad:8e:27:eb:94:f2:21:
         95:34:ce:3d:a0:1e:c4:67:53:5a:52:d2:7c:1d:64:39:af:11:
         7f:97:2c:1a:5d:5f:53:75:f2:32:7a:72:9a:eb:c4:d1:4d:a6:
         1a:be:68:65:0c:62:cf:1a:03:cc:5a:21:b8:ec:f2:ee:e5:f7:
         23:f9:c1:b4:ad:9d:66:f0:33:35:1b:77:ca:bb:5d:69:74:59:
         62:7a:05:73:79:67:6e:e8:aa:11:f3:9a:5f:89:72:7e:4a:bd:
         37:b0:fe:31:01:7b:6d:a8:67:a3:85:69:76:6c:75:36:81:ba:
         65:80:47:fe:c8:a3:23:2b:64:0d:02:b9:7e:45:9c:ad:ea:36:
         d2:27:86:ab:7f:a3:4d:29:67:a9:4d:13:48:85:9e:c2:04:b3:
         ae:2c:2e:35:a8:20:ab:4a:08:33:48:19:77:e0:2c:a4:09:8c:
         ee:c5:d6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----