Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5AE7B02E2CBD11EEBCD432784AD9E6FC.roa
File:                     5AE7B02E2CBD11EEBCD432784AD9E6FC.roa (raw, json)
Hash identifier:          M8GK0UefUo47aqXcbE5wrUYkZlTSfNoSSE8dUkKNNp8=
Subject key identifier:   4D:1B:26:7D:16:67:87:69:50:D6:D6:23:96:3F:E1:8E:E5:07:0E:3D
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       0491
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5AE7B02E2CBD11EEBCD432784AD9E6FC.roa
Signing time:             Thu 27 Jul 2023 20:37:08 +0000
ROA not before:           Sun 30 Jul 2023 20:37:04 +0000
ROA not after:            Sat 30 Jul 2033 20:37:04 +0000
asID:                     37119
IP address blocks:        105.168.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1169 (0x491)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 30 20:37:04 2023 GMT
            Not After : Jul 30 20:37:04 2033 GMT
        Subject: CN=64c2d574-6135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1c:2f:e2:a3:f9:8c:74:b9:1e:fb:b8:62:18:
                    2f:13:3d:27:62:f3:cf:1d:0d:1b:51:b7:82:8f:9a:
                    ae:cc:aa:ac:c9:15:37:db:de:9f:28:76:e6:47:22:
                    c2:2d:68:89:bd:a4:15:00:1a:a7:06:7c:9c:8f:42:
                    e5:1b:36:c7:2b:7a:81:5b:46:72:61:e9:66:a1:e1:
                    4d:f8:00:67:49:3f:4d:14:35:b7:d0:91:e2:48:38:
                    bd:d5:e8:65:2c:56:30:00:d8:11:32:08:60:81:65:
                    15:cf:b8:56:cb:26:f9:bf:7a:a8:ff:9c:e5:54:ad:
                    94:96:d7:87:af:4f:05:18:c8:bf:9e:c2:34:b8:64:
                    ed:ac:5f:9f:01:aa:a4:84:63:e6:a1:b0:f4:0e:c8:
                    75:16:35:1c:c6:c9:8b:a7:67:e1:04:84:1a:eb:68:
                    8c:1a:1f:f1:88:8e:9a:e6:1d:f0:84:71:91:95:7f:
                    6b:88:69:8f:41:77:a9:66:c6:ed:1c:c1:4c:63:e9:
                    a6:3a:dc:bc:4f:1e:79:84:c5:fd:ea:13:7e:f5:2b:
                    3c:6b:5b:ed:be:d1:7c:b0:f6:f9:8b:90:46:9a:39:
                    ed:47:98:85:81:6c:c0:d9:2f:3d:76:ae:d7:68:52:
                    75:42:25:ad:3f:1f:95:ae:67:fc:f1:f1:95:5d:64:
                    d5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1B:26:7D:16:67:87:69:50:D6:D6:23:96:3F:E1:8E:E5:07:0E:3D
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/5AE7B02E2CBD11EEBCD432784AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.168.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:f3:36:12:9c:01:ae:ce:7e:e2:26:bf:51:9c:6b:af:7d:2f:
         2e:96:b4:0c:3d:49:f2:b5:98:55:71:dd:b3:02:50:6b:e3:90:
         ba:fe:e9:5a:03:db:17:95:bb:ec:14:0f:74:29:0e:58:39:3a:
         e9:0c:86:fc:d4:80:71:27:36:5c:be:5e:88:97:4e:24:21:4a:
         f6:30:c8:fa:6c:51:8b:0e:2f:2c:9c:f6:3f:b3:20:c3:26:8c:
         56:87:2d:f3:5e:b8:04:6a:30:41:27:d3:a0:65:46:3e:48:81:
         8b:17:ae:30:d9:16:90:4d:d7:f1:40:08:1a:13:fb:28:a8:9e:
         ed:8e:eb:5d:cd:c9:1c:d5:4c:8b:cb:13:72:ba:d2:75:91:20:
         99:47:77:4a:84:7e:03:9e:44:94:f5:28:6c:77:49:54:bc:04:
         4f:6f:b2:f4:07:b0:94:c6:bd:2b:e7:0b:1d:38:d4:c8:71:fe:
         e6:24:72:19:1f:07:5d:ec:9e:58:2a:d4:09:c4:6e:a8:18:8d:
         cc:cb:71:ba:4f:67:37:3d:6f:98:45:42:e8:77:ad:16:91:b7:
         ac:6f:54:5a:4b:d7:bf:ae:24:92:70:3a:e9:67:2f:b8:ca:62:
         ec:42:95:9b:7c:95:f5:55:06:9b:31:e3:d6:f3:d0:eb:41:58:
         0e:a1:23:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----