Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/4FB77596140B11E5A2B38D4DF8AEA228.roa
File:                     4FB77596140B11E5A2B38D4DF8AEA228.roa (raw, json)
Hash identifier:          JimlfTG8NBWx7heqoH79UwI/Ev9Yx+CffQqt6WoYuyo=
Subject key identifier:   F2:F2:C5:3B:F7:06:14:D8:B0:BE:61:5C:27:96:94:26:76:D0:70:83
Certificate issuer:       /CN=F36D8DFAAF/serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
Certificate serial:       06
Authority key identifier: D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/4FB77596140B11E5A2B38D4DF8AEA228.roa
Signing time:             Tue 16 Jun 2015 09:37:09 +0000
ROA not before:           Tue 16 Jun 2015 09:37:26 +0000
ROA not after:            Mon 16 Jun 2025 09:37:26 +0000
asID:                     37271
IP address blocks:        2c0f:fa90::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8DFAAF/serialNumber=D668BECAF3CB14DB624A3425D666609BF27B52EE
        Validity
            Not Before: Jun 16 09:37:26 2015 GMT
            Not After : Jun 16 09:37:26 2025 GMT
        Subject: CN=557fee45-5e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d1:8a:94:ce:fb:9a:d0:8d:31:d0:df:0e:f1:
                    89:1c:2d:0c:bf:e6:2d:80:b8:5f:78:a8:a1:18:37:
                    02:89:07:80:94:86:15:b0:d6:6a:0b:cc:80:fc:6d:
                    01:13:85:36:40:00:de:1d:61:ef:9b:23:8d:b6:fa:
                    43:ed:bd:ed:a8:82:95:61:8a:1b:43:99:06:a9:4e:
                    23:ab:f8:a4:0f:54:42:81:b7:70:49:ba:73:b2:f6:
                    3b:ef:ec:d3:92:68:1d:ac:a5:5e:46:3a:94:29:2a:
                    6b:50:93:04:f0:1e:37:16:2e:43:d2:ff:ff:f3:49:
                    72:99:b1:f5:52:05:f6:dd:b7:b7:97:ef:ee:72:f4:
                    c4:77:80:d1:cc:57:84:b3:d4:4e:08:a5:31:1c:8d:
                    df:31:80:14:75:40:04:88:21:2e:da:9a:31:0c:a8:
                    e8:04:24:fd:3d:c3:37:8c:bb:90:85:89:25:77:fa:
                    82:d4:3a:29:c4:17:17:cf:8f:b5:4b:ca:0e:79:9d:
                    ce:9c:cf:87:47:cb:b8:cc:bb:c8:eb:65:02:51:ae:
                    9a:38:cf:35:d8:6c:46:76:3f:79:8f:db:cd:f2:ac:
                    15:6d:48:63:b3:b1:fc:35:96:c7:fd:96:23:58:8e:
                    2e:fe:5f:4a:2a:3a:ef:1f:b2:2d:ae:c1:20:e5:35:
                    57:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F2:C5:3B:F7:06:14:D8:B0:BE:61:5C:27:96:94:26:76:D0:70:83
            X509v3 Authority Key Identifier:
                keyid:D6:68:BE:CA:F3:CB:14:DB:62:4A:34:25:D6:66:60:9B:F2:7B:52:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1mi-yvPLFNtiSjQl1mZgm_J7Uu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8DFA/0E9B19BA140A11E5A7F5FC4CF8AEA228/4FB77596140B11E5A2B38D4DF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fa90::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:ac:04:3c:d0:3a:49:f6:3c:18:6b:9e:6a:97:cc:21:db:a6:
         6e:7e:2d:51:7d:74:f3:3e:1e:7e:a7:20:7e:a3:fd:74:46:4b:
         3b:70:ad:f6:ff:4e:1f:6a:7d:01:b1:af:af:bd:ab:bf:aa:40:
         ea:88:9b:f8:1f:8f:d6:67:f0:b2:29:fc:df:6b:1b:64:73:6b:
         37:5f:8a:68:32:05:35:7a:e5:29:0a:ff:d8:3d:63:b7:54:c4:
         c4:5d:9f:26:96:3b:c6:96:c0:5d:07:b7:1d:5b:c2:b7:a5:08:
         ff:09:5c:71:fc:33:9a:f7:43:6d:66:23:d5:c2:3d:e0:ac:c6:
         9d:db:3e:07:44:5c:36:a5:ea:46:e8:7f:46:f3:89:f9:ad:4d:
         23:24:35:c6:8e:26:7e:5c:b8:bb:20:59:04:89:2e:d0:e1:95:
         c3:5a:56:c7:f5:05:7e:a8:19:dd:d3:94:14:48:9d:fd:d5:48:
         11:16:b9:2d:1f:af:b7:10:eb:19:93:1d:63:98:98:5b:8c:56:
         66:02:d7:70:c8:5e:39:75:30:f3:47:de:ae:60:40:a7:5a:88:
         54:98:82:97:d6:d4:60:09:f8:f6:96:d2:3f:eb:cd:98:45:fc:
         8e:6a:04:a1:75:a8:11:a6:5b:29:db:e1:bc:05:b1:91:9a:71:
         b5:f5:82:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----