Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/26F67BB07BAA11E9BE7E693EF8AEA228.roa
File:                     26F67BB07BAA11E9BE7E693EF8AEA228.roa (raw, json)
Hash identifier:          DK8y/9PW04BeUw4LJYq44qLXk52z7s29lnBHY4Y4J/k=
Subject key identifier:   58:27:B9:BC:8B:8E:5C:61:E7:35:64:E0:7E:89:9D:10:09:F8:AF:CB
Certificate issuer:       /CN=F36D5C19AR/serialNumber=56EF7707F7CBB80D82AEAC605540FD6A3B313D95
Certificate serial:       02
Authority key identifier: 56:EF:77:07:F7:CB:B8:0D:82:AE:AC:60:55:40:FD:6A:3B:31:3D:95
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Vu93B_fLuA2CrqxgVUD9ajsxPZU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/26F67BB07BAA11E9BE7E693EF8AEA228.roa
Signing time:             Tue 21 May 2019 09:23:54 +0000
ROA not before:           Tue 21 May 2019 09:23:46 +0000
ROA not after:            Thu 31 May 2029 09:23:46 +0000
asID:                     37497
IP address blocks:        129.205.32.0/19 maxlen: 30

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.mft
                          rsync://rpki.afrinic.net/repository/arin/Vu93B_fLuA2CrqxgVUD9ajsxPZU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D5C19AR/serialNumber=56EF7707F7CBB80D82AEAC605540FD6A3B313D95
        Validity
            Not Before: May 21 09:23:46 2019 GMT
            Not After : May 31 09:23:46 2029 GMT
        Subject: CN=5ce3c3aa-b039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:ab:11:6a:4f:63:5f:32:5c:4e:38:2e:a0:
                    ec:63:fd:59:19:e8:39:5c:34:40:a0:7a:56:49:f5:
                    a3:79:5d:26:7f:18:71:d8:0f:87:48:29:3e:46:d9:
                    3f:53:77:09:4d:56:50:fa:25:0f:ff:a2:ad:f4:95:
                    36:5c:1a:4f:6a:9d:a4:6e:3a:9e:b0:42:2f:e7:f1:
                    2e:d4:6f:60:33:86:b4:ad:b5:46:d3:2c:6f:22:e3:
                    85:10:24:56:ff:6b:04:e2:48:5e:c7:aa:54:68:e2:
                    fd:b8:59:42:b2:02:b5:b6:6c:f0:cf:a1:78:74:31:
                    76:0e:46:fe:df:e7:8b:2d:35:c6:8f:aa:74:4b:5e:
                    27:c6:a3:4a:16:44:e0:cc:3f:47:01:57:49:ad:72:
                    dc:ad:50:a7:5d:30:cf:97:61:c0:0b:0f:1e:7f:18:
                    48:44:2d:b5:d5:d4:be:ba:22:80:eb:9b:96:ae:06:
                    62:9e:3b:6b:94:71:93:fb:e6:3f:18:01:63:a1:54:
                    cf:fa:27:1a:40:02:b4:3b:e8:38:41:2b:46:2b:b9:
                    7e:bf:ce:8a:6c:86:95:97:73:2a:4b:86:bf:8a:7b:
                    d0:46:08:97:ec:30:2b:1e:c7:6a:65:93:86:94:b9:
                    43:98:e8:26:95:d4:19:f3:d4:b1:8c:32:dc:a6:11:
                    c5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:27:B9:BC:8B:8E:5C:61:E7:35:64:E0:7E:89:9D:10:09:F8:AF:CB
            X509v3 Authority Key Identifier:
                keyid:56:EF:77:07:F7:CB:B8:0D:82:AE:AC:60:55:40:FD:6A:3B:31:3D:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/Vu93B_fLuA2CrqxgVUD9ajsxPZU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Vu93B_fLuA2CrqxgVUD9ajsxPZU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5C19/854EE3EE7BA711E9902C653CF8AEA228/26F67BB07BAA11E9BE7E693EF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.205.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ca:79:6b:88:32:ce:2d:97:d2:eb:00:59:da:36:c3:e4:a5:d7:
         e3:b7:11:df:77:22:45:01:12:9c:e3:17:8b:c8:b8:76:3b:78:
         df:ef:93:95:14:78:bd:b1:4a:af:94:dc:3a:ea:62:4f:78:c1:
         16:95:9e:6f:5e:8c:20:c8:3a:8b:b1:ed:8d:27:d7:59:3a:b8:
         d4:d3:33:7c:2d:ad:7b:08:f1:e8:12:83:fc:fd:83:01:7c:52:
         1b:c9:c2:d4:29:11:57:0e:b0:eb:22:15:c2:f4:0b:0f:f3:ea:
         b4:a9:80:ff:24:ad:94:34:24:0f:02:10:8d:26:b1:06:9e:d9:
         d7:66:99:b7:9d:4a:e6:44:35:0f:a2:79:60:8c:b4:c4:b9:f2:
         06:12:7d:aa:bf:ca:25:70:54:68:0d:90:95:55:47:81:43:1a:
         ee:7f:3e:2f:ca:57:e2:5c:cb:99:4f:aa:59:58:06:b1:12:87:
         8e:0d:75:83:e7:bd:c0:7e:76:2e:75:2f:bd:66:2f:56:77:1a:
         0c:73:da:37:52:1d:dd:bc:7a:76:96:0d:d5:e5:56:0a:c3:3f:
         f2:f8:5d:03:6a:02:4c:6b:72:8c:b2:ba:00:04:63:5d:03:9f:
         00:b0:21:e1:85:7d:cd:1d:1e:ab:82:9f:2a:8b:68:9f:be:31:
         93:9d:18:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----