Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F83E3FF62E5611EEB16F91534AD9E6FC.roa
File:                     F83E3FF62E5611EEB16F91534AD9E6FC.roa (raw, json)
Hash identifier:          ZMYG7041BbixAYHYsbU0nhfpicFc2jjY+lW8acQjSxU=
Subject key identifier:   6F:E0:99:3F:24:01:DC:32:D3:B1:B0:F0:5A:ED:38:E5:B9:4D:7A:4C
Certificate issuer:       /CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
Certificate serial:       04D3
Authority key identifier: AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F83E3FF62E5611EEB16F91534AD9E6FC.roa
Signing time:             Sat 29 Jul 2023 21:29:16 +0000
ROA not before:           Sat 29 Jul 2023 21:29:12 +0000
ROA not after:            Sat 30 Jul 2033 21:29:12 +0000
asID:                     37119
IP address blocks:        105.172.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1235 (0x4d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D0F50AF/serialNumber=AE98A5FDAD2DC9F4FC1BE47F66857A8C47988102
        Validity
            Not Before: Jul 29 21:29:12 2023 GMT
            Not After : Jul 30 21:29:12 2033 GMT
        Subject: CN=64c584ac-f043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7f:dd:05:7c:31:c2:44:91:b6:07:90:9b:79:
                    2e:1c:b3:4a:e0:eb:47:7d:35:05:cf:ec:c2:26:4c:
                    92:9a:97:52:50:b5:6f:4a:7b:37:3f:38:2f:99:ec:
                    e0:c8:0d:2e:a1:76:89:2a:ff:54:d4:6b:4b:23:37:
                    b7:ba:1a:76:6f:8f:48:7b:df:45:24:d4:dd:1d:82:
                    00:03:6a:ce:cc:a8:57:3e:3f:2c:5f:4c:d1:bd:64:
                    6e:97:55:07:91:3d:a7:09:39:3a:9a:d5:1e:ff:e0:
                    61:df:1e:72:4e:2a:ce:19:76:dd:72:47:83:99:25:
                    0a:2a:bc:aa:1e:bd:22:5a:c0:d2:2f:56:9c:6f:d1:
                    d6:41:33:54:dc:a7:bc:e0:14:a6:a5:e3:6d:a2:0e:
                    78:07:ec:bd:96:0c:ca:a7:45:41:53:0a:f3:62:40:
                    48:0b:d3:c3:0a:d2:76:9d:0b:1c:3c:f2:70:0d:4f:
                    b9:45:ad:fe:51:54:fd:27:42:84:8f:51:48:1d:0d:
                    27:d9:e8:df:5b:68:d6:45:57:e6:63:c5:9a:6c:ec:
                    00:89:d7:a9:11:d9:f4:89:88:92:f2:d7:60:8d:cd:
                    8e:13:b0:0d:8f:f3:ca:8e:e5:4b:53:8b:83:bf:01:
                    7b:b5:9c:81:2e:34:f7:32:d9:0c:c2:12:aa:1a:46:
                    21:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E0:99:3F:24:01:DC:32:D3:B1:B0:F0:5A:ED:38:E5:B9:4D:7A:4C
            X509v3 Authority Key Identifier:
                keyid:AE:98:A5:FD:AD:2D:C9:F4:FC:1B:E4:7F:66:85:7A:8C:47:98:81:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/rpil_a0tyfT8G-R_ZoV6jEeYgQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rpil_a0tyfT8G-R_ZoV6jEeYgQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D0F50/5EAAA6B8258F11EBB70B7C19F8AEA228/F83E3FF62E5611EEB16F91534AD9E6FC.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  105.172.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7f:cf:6e:46:a0:53:6f:73:2d:81:c8:c5:1a:40:5a:19:8f:0f:
         99:0f:49:bb:28:bb:eb:3d:b6:48:88:94:7e:a3:27:7f:91:4d:
         64:79:bb:79:95:79:f7:e8:ef:e9:22:e9:9d:a9:57:43:3b:ff:
         74:b4:c0:92:10:41:b3:f0:c8:c3:06:de:1a:68:7b:6b:34:7c:
         a1:c8:ec:74:ce:d9:e4:3d:29:7f:35:64:0d:98:02:f9:c4:0b:
         bb:38:f9:84:eb:d9:00:ba:db:20:1b:22:63:aa:8b:43:f2:ce:
         70:79:89:ec:d9:00:8b:9b:3a:0e:0a:05:0f:9b:93:c7:9b:1c:
         94:0e:e6:00:78:d7:a6:a2:0d:de:fd:c5:b2:c6:3c:cd:d3:46:
         f0:1a:e9:74:47:ef:b8:bd:ca:b8:b1:2f:da:3b:c1:9e:db:b0:
         1e:fa:f8:9e:0d:71:d4:26:d8:cc:c0:cd:30:25:bd:3f:5d:b0:
         94:3d:e4:b8:95:61:d7:e8:65:80:2d:7d:9e:d5:ad:b9:66:65:
         aa:57:9d:ab:5a:25:de:46:f0:8d:9f:fa:e3:c4:3f:02:ca:d6:
         1f:a7:4e:93:eb:05:73:80:f2:7e:1e:89:be:79:ce:06:9e:a2:
         a8:60:4a:0b:1b:bd:37:49:55:ad:b0:d6:a9:c5:5e:6e:f4:c1:
         5b:b6:1a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----