Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/838063702E5A11EE987CD45D4AD9E6FC.roa
File:                     838063702E5A11EE987CD45D4AD9E6FC.roa (raw, json)
Hash identifier:          EkY5YCpjnLg9Y5yryXGCIXSmuXV8PTXgRGPPC9suNOU=
Subject key identifier:   6D:A7:EC:AE:0B:DC:E5:65:C9:55:40:E7:BF:B9:0B:93:DE:F8:32:B5
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04E7
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/838063702E5A11EE987CD45D4AD9E6FC.roa
Signing time:             Sat 29 Jul 2023 21:54:38 +0000
ROA not before:           Sat 29 Jul 2023 21:54:35 +0000
ROA not after:            Sat 30 Jul 2033 21:54:35 +0000
asID:                     37119
IP address blocks:        105.173.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1255 (0x4e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 29 21:54:35 2023 GMT
            Not After : Jul 30 21:54:35 2033 GMT
        Subject: CN=64c58a9e-1374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:bc:08:de:d0:85:af:a2:72:c3:e4:f4:12:64:
                    16:98:ec:22:58:0b:9c:82:95:00:ef:c4:f0:1c:04:
                    de:d1:1c:72:82:9a:75:f7:59:68:a2:0a:fd:ca:37:
                    c5:20:50:5e:0e:84:ea:59:ad:8b:ad:b2:65:10:7e:
                    74:6f:58:22:03:7a:b1:fd:15:c9:3d:14:b5:5f:5d:
                    60:52:33:93:2f:6d:99:a1:86:d8:f1:4a:03:5c:f1:
                    f5:71:53:b2:68:f6:6f:57:78:75:de:56:85:c5:9c:
                    c7:b5:5f:e4:65:c5:4d:02:34:46:2b:e5:e5:4c:57:
                    08:62:32:92:31:2c:0b:12:4c:7e:00:c9:11:d4:60:
                    03:02:82:8a:d2:23:0a:fc:6f:cc:f8:f2:2a:24:cd:
                    39:99:80:ea:25:74:a6:fd:06:ec:f8:70:7e:70:81:
                    c3:54:49:d0:8c:76:21:da:1f:38:af:07:7a:2f:c2:
                    b8:21:74:c4:a4:62:03:a9:c3:d2:84:0d:11:08:43:
                    8b:ca:21:b8:06:d1:df:86:2a:6e:4e:f8:56:47:ec:
                    f9:8f:da:79:1f:36:97:c4:67:82:c7:43:0c:f7:49:
                    27:30:f5:53:41:84:a6:6f:24:be:92:ac:03:6b:bc:
                    23:fc:98:05:c0:8b:e1:06:49:e8:d9:b0:38:e9:30:
                    ae:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A7:EC:AE:0B:DC:E5:65:C9:55:40:E7:BF:B9:0B:93:DE:F8:32:B5
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/838063702E5A11EE987CD45D4AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.173.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:5f:66:06:89:ce:6b:2e:b1:6a:ef:a0:9a:73:80:6f:44:0a:
         e0:9a:66:e6:70:9c:4c:67:9f:e1:2d:1e:9c:67:22:bb:53:f2:
         3f:b9:d3:f3:47:32:45:ef:9d:b0:b2:cc:2d:f1:69:8a:d4:bb:
         11:f0:05:d1:cc:94:50:94:62:5c:51:4d:02:a4:e3:e3:75:6e:
         78:75:bc:4d:a5:9d:ce:04:b1:3e:5a:ff:4c:d0:d4:1b:a3:62:
         7f:fb:98:d0:bf:04:6a:d7:d2:d3:14:56:87:98:a0:0a:18:04:
         af:fa:71:45:85:a8:f3:6b:8d:0e:69:73:d9:69:09:6e:97:53:
         dd:d2:de:e8:d4:f5:66:83:e3:9e:cd:d7:a8:49:59:3c:89:dd:
         9b:0a:f9:0f:43:23:36:f5:98:f9:52:d2:7a:85:a9:7c:08:d6:
         96:41:24:ab:d0:b8:0c:61:1c:b8:38:1f:43:89:68:e9:2d:55:
         70:02:94:17:72:b7:fe:fa:10:a5:30:14:71:fa:b5:aa:df:7e:
         e3:2f:42:fb:bc:ac:34:6b:c5:22:8c:1b:e2:a2:2d:42:0a:06:
         e2:6b:6a:f4:fb:0d:3d:ea:7e:b7:13:db:2b:21:9c:58:4b:3c:
         c7:ae:3f:d3:69:51:a2:be:bd:f0:b1:2e:17:b3:32:0b:08:b4:
         6b:94:75:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----