Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8ECC1EE22E5311EE916586494AD9E6FC.roa
File:                     8ECC1EE22E5311EE916586494AD9E6FC.roa (raw, json)
Hash identifier:          ODyQu3bF5aMw+kFybMIM1Ynxdz/eaZrwWUD9xU28wO4=
Subject key identifier:   39:E1:9E:55:3C:37:D9:FE:9B:71:D6:9B:2B:BE:D6:B2:03:CC:F0:51
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04C7
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8ECC1EE22E5311EE916586494AD9E6FC.roa
Signing time:             Sat 29 Jul 2023 21:04:51 +0000
ROA not before:           Sat 29 Jul 2023 21:04:47 +0000
ROA not after:            Sat 30 Jul 2033 21:04:47 +0000
asID:                     37119
IP address blocks:        105.172.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1223 (0x4c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 29 21:04:47 2023 GMT
            Not After : Jul 30 21:04:47 2033 GMT
        Subject: CN=64c57ef3-60f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f0:bc:12:17:59:67:a5:d1:cd:42:dc:dd:07:
                    6c:44:60:ea:8c:9b:1b:13:05:e5:94:84:b4:df:a2:
                    6b:78:28:10:dd:be:9b:b8:cc:81:ed:2d:24:4a:b2:
                    2d:a3:02:49:72:3a:31:a0:8d:a4:41:50:10:f1:35:
                    a1:1f:38:72:c2:c8:2c:43:d8:37:81:54:29:7d:e8:
                    8d:02:a0:55:ae:e0:71:b1:bc:66:ed:8c:df:9d:97:
                    dc:3e:c5:51:f5:3d:38:02:f2:b0:e9:61:47:3b:53:
                    ae:61:c4:41:2d:83:53:81:eb:63:ef:3e:7d:53:64:
                    19:eb:97:26:1a:d2:df:38:16:b0:ab:85:93:65:e3:
                    5a:37:5b:d8:06:5b:be:87:ec:b2:bb:69:bc:70:bd:
                    f8:c0:bf:e5:a5:68:49:84:00:49:ee:87:55:76:5c:
                    5e:74:3e:2c:71:37:1c:0d:ba:c2:09:d6:cb:09:b1:
                    26:af:54:b9:1f:09:f8:3e:38:b7:a4:3d:6f:7e:97:
                    7b:1b:7c:0a:ad:38:4c:8c:2f:7f:4f:57:65:a9:51:
                    fc:ff:da:ad:45:af:69:da:c2:ee:22:44:d8:90:1b:
                    2c:67:5f:83:6b:90:a8:6a:f3:85:98:a1:f7:3e:39:
                    11:82:34:86:cf:38:08:40:51:fe:4a:1a:e6:fa:9c:
                    10:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E1:9E:55:3C:37:D9:FE:9B:71:D6:9B:2B:BE:D6:B2:03:CC:F0:51
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/8ECC1EE22E5311EE916586494AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.172.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4b:9c:a1:c1:0c:43:37:95:b5:06:a6:50:1a:af:32:3e:f5:2e:
         3c:07:bf:39:fc:71:8c:ff:99:2d:f7:cd:03:bb:4e:ba:0a:b6:
         37:12:65:90:f2:1a:ed:5c:43:04:df:d3:35:d2:11:78:d5:f2:
         41:51:6a:2b:7c:fb:29:f5:db:82:e0:98:14:23:4e:78:dd:e9:
         57:b7:b0:cd:18:9f:ae:fc:6b:4e:63:ff:29:ff:bd:7b:fc:48:
         8c:07:26:9e:3c:22:f1:6e:3c:6e:7a:c3:c4:f2:22:36:11:fb:
         7a:0d:06:69:48:21:d0:0a:10:6f:0f:4f:cc:8b:a1:d8:68:4e:
         10:0a:1f:fa:e7:10:6f:31:39:6c:cf:a1:ee:80:2f:d8:4e:32:
         e1:a3:0f:64:30:b5:cc:17:ec:39:42:c1:59:17:15:57:4a:09:
         28:42:3a:02:35:5c:6f:f6:06:4b:b2:09:69:9c:fd:27:dd:9a:
         11:e8:95:6e:db:ae:52:c9:91:96:39:32:93:56:38:79:ee:a9:
         79:e2:26:ec:9e:d0:10:1a:0f:55:5c:c7:af:ce:7f:60:d5:ad:
         7b:c0:62:a7:e5:32:cb:8e:5b:86:1a:13:04:67:86:a4:b6:a0:
         04:83:5d:2a:c5:2a:23:31:84:10:e5:cd:0a:c0:cc:dd:a3:96:
         d9:d0:a1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----