Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/E3D5D52AD28A11ECB4D0B0C0F1222468.roa
File:                     E3D5D52AD28A11ECB4D0B0C0F1222468.roa (raw, json)
Hash identifier:          MgA7cMYgIRFHAgD+dSaQaOo5eOVm+neEzUW6GLOT448=
Subject key identifier:   46:1E:84:CD:B4:B2:13:EA:6F:B9:0D:C4:2A:CF:74:B6:08:FA:0B:A1
Certificate issuer:       /CN=F36E94D7AF/serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Certificate serial:       06
Authority key identifier: 6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/E3D5D52AD28A11ECB4D0B0C0F1222468.roa
Signing time:             Fri 13 May 2022 07:04:11 +0000
ROA not before:           Fri 13 May 2022 07:04:07 +0000
ROA not after:            Thu 13 May 2032 07:04:07 +0000
asID:                     328510
IP address blocks:        2c0f:ede8::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E94D7AF/serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
        Validity
            Not Before: May 13 07:04:07 2022 GMT
            Not After : May 13 07:04:07 2032 GMT
        Subject: CN=627e02eb-2a6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b0:22:bd:a0:24:f4:43:e0:d0:3e:88:d0:c4:
                    f6:d1:41:dd:c0:30:36:c5:28:0c:1d:d7:83:6c:15:
                    40:1d:52:47:0a:83:e2:4a:7b:ca:d7:87:65:20:19:
                    77:10:06:c8:dd:e0:27:53:0a:55:68:f8:65:81:70:
                    fb:fb:50:71:7b:da:e3:08:0e:fe:ed:ab:1a:24:5c:
                    d6:44:32:aa:b9:fe:75:73:83:9d:19:92:3d:12:be:
                    94:2f:70:71:f8:82:81:19:5f:98:9c:9a:b2:05:82:
                    29:4d:04:3f:b6:f6:c7:99:be:63:5a:cb:36:16:3f:
                    92:b7:da:e6:f3:4a:24:e8:f2:c5:16:bc:d8:14:a0:
                    cf:8f:a5:85:9e:fe:46:60:ad:30:c4:8b:7b:46:00:
                    8b:03:f3:27:75:0b:7b:91:dd:4d:d4:5b:95:08:7f:
                    69:0e:aa:c6:d2:78:c1:74:23:9d:78:a6:6b:5b:3d:
                    01:d9:5f:90:11:ba:66:56:ee:a6:36:42:24:12:38:
                    31:9c:90:f5:bf:e4:3e:8f:f5:bf:c2:09:55:53:ee:
                    85:d5:b2:12:87:ab:b7:bc:53:c4:ad:2a:59:73:6b:
                    e7:f3:e8:0d:45:35:49:70:28:94:42:dd:83:cd:6a:
                    60:32:bf:a4:a3:8d:ab:3c:3d:55:b1:28:58:dd:4f:
                    41:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1E:84:CD:B4:B2:13:EA:6F:B9:0D:C4:2A:CF:74:B6:08:FA:0B:A1
            X509v3 Authority Key Identifier:
                keyid:6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/E3D5D52AD28A11ECB4D0B0C0F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:ede8::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:15:49:9b:9d:ce:e8:2b:98:ef:b3:8e:09:39:d2:06:24:ff:
         a2:ed:11:b4:ca:cc:8b:51:74:2f:6d:f0:49:81:28:6c:be:cb:
         98:0f:37:24:84:ff:fa:a1:46:2e:5d:71:10:d1:a8:28:7c:09:
         bf:51:51:9c:fd:3a:c0:16:28:18:0f:e0:5f:99:25:94:9b:99:
         02:9a:59:88:c0:dc:0d:fe:ef:95:37:9f:33:3c:33:1b:fd:c3:
         d4:9c:e9:d6:a1:63:f9:82:bb:ad:cb:4a:c6:ab:14:20:5a:77:
         02:ee:a0:de:de:9a:ea:df:00:0b:3d:6f:0a:60:a8:c9:fb:56:
         56:02:d6:97:ab:f1:bb:7a:34:5f:96:1a:18:d2:14:8e:65:af:
         6b:c5:bb:8e:ea:46:97:cc:e1:57:2d:ee:83:0b:54:6e:c2:b2:
         45:8b:46:d4:16:f8:7e:4f:53:7d:f2:d1:be:83:5f:01:c9:ef:
         e7:d1:dc:17:68:f7:ea:5f:2f:ff:06:38:41:81:05:42:e8:f6:
         dd:88:61:56:9b:00:d1:93:bf:2d:7f:1f:5f:e1:9f:54:99:4d:
         a8:4f:d3:bf:c3:51:7a:87:20:f0:89:cd:a5:06:78:5a:6c:5a:
         a4:f3:78:a8:ab:b8:75:40:80:60:0f:dd:9f:5d:ec:bb:f8:ec:
         5e:e6:a0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----