Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/15C50C50FC6B11EB9A564508D8A014CE.roa
File:                     15C50C50FC6B11EB9A564508D8A014CE.roa (raw, json)
Hash identifier:          edvjHiFr4+tEmm64tF6z1Z3h19PfKmEG5a35CcgMLjw=
Subject key identifier:   02:C4:48:FD:88:B5:F6:8D:DB:73:3D:31:94:93:E6:6B:F9:C6:4C:3D
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       06
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/15C50C50FC6B11EB9A564508D8A014CE.roa
Signing time:             Fri 13 Aug 2021 19:18:06 +0000
ROA not before:           Fri 13 Aug 2021 19:18:03 +0000
ROA not after:            Thu 13 Aug 2026 19:18:03 +0000
asID:                     327814
IP address blocks:        196.44.96.0/19 maxlen: 24
                          2c0f:f618::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Aug 13 19:18:03 2021 GMT
            Not After : Aug 13 19:18:03 2026 GMT
        Subject: CN=6116c56e-776b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3a:14:64:3a:81:25:2f:a9:e7:6e:11:ac:14:
                    74:7a:00:8d:31:06:76:11:c7:64:e9:86:7f:15:c3:
                    20:0a:60:0c:a0:96:12:34:38:8b:cf:94:17:5f:3f:
                    a1:f3:66:34:f1:c7:bf:73:32:1f:ab:10:c5:4c:cd:
                    75:ef:95:40:dc:3e:94:89:c1:24:11:ce:96:ef:72:
                    8b:1a:9f:56:35:04:71:eb:3b:45:78:8c:a5:84:a2:
                    fe:b8:15:ab:f5:c2:4c:48:a2:31:f2:7a:20:35:c2:
                    78:12:04:5f:cc:c7:28:25:1e:4e:d6:0e:73:ab:d1:
                    c1:c7:70:81:a7:a5:85:a1:46:d8:e8:f2:5c:e6:1f:
                    ea:4a:14:3b:f3:93:e6:5f:f3:4b:ef:a3:d0:c5:8d:
                    32:1f:59:67:68:33:e2:94:47:bf:19:d0:4f:5d:9f:
                    73:03:b4:ae:d8:9a:02:d7:7e:6f:70:b2:2b:f5:75:
                    d7:b1:75:25:5b:49:3c:a9:bb:53:d2:6c:b3:21:ca:
                    b1:b7:eb:03:b2:36:20:f4:9d:e5:29:d9:3e:3c:3b:
                    b5:1a:02:a4:6a:e7:6b:06:ce:0f:47:66:f8:9a:87:
                    eb:e0:92:56:7f:73:02:94:a5:8c:51:56:80:e4:b0:
                    36:fd:05:97:67:99:3d:1c:20:1e:25:a9:2e:37:93:
                    04:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C4:48:FD:88:B5:F6:8D:DB:73:3D:31:94:93:E6:6B:F9:C6:4C:3D
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/15C50C50FC6B11EB9A564508D8A014CE.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  196.44.96.0/19
                IPv6:
                  2c0f:f618::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:cf:5b:ad:bd:98:94:08:86:cf:12:86:7a:16:aa:72:bf:3e:
         94:24:26:a2:c1:3f:66:ac:3d:8d:f8:61:86:86:ac:88:b3:5a:
         81:d7:54:95:7e:ef:1d:f8:56:2e:be:12:cb:82:7a:f0:b8:6f:
         74:ed:65:1d:b2:f6:b8:4b:f2:6c:24:86:e4:89:9f:5c:d8:2c:
         e4:10:2b:06:d1:b3:15:bf:f9:43:6a:7d:42:ce:ff:ff:df:55:
         e5:b3:21:3f:a9:a3:58:c1:7d:c6:f8:b3:7d:76:92:00:01:6f:
         9e:39:81:25:59:47:d9:98:85:c5:c2:9c:46:d5:3e:e8:c4:f8:
         8e:e0:6e:a2:e8:bd:0d:b9:53:0d:27:8c:31:c7:33:2d:8e:91:
         f5:2c:63:79:ee:9f:7f:56:61:17:af:26:52:f2:17:2f:58:66:
         a4:ce:34:b7:9b:94:d5:23:d0:e6:5e:da:dc:0d:ce:96:5e:6a:
         5c:87:89:e1:b2:fe:43:2e:d7:a3:b1:6a:00:f6:62:f5:b4:5f:
         d3:a0:29:ec:7b:9c:53:ae:b7:fc:49:7b:2b:12:2a:a2:01:cd:
         26:68:78:6f:c0:07:c5:46:9f:cd:c5:3d:ce:81:fe:28:05:b0:
         e2:d3:be:19:7a:47:d4:4a:7a:95:a9:20:64:e0:fc:39:d7:1a:
         cf:7b:d5:be
-----BEGIN CERTIFICATE-----
MIIFkTCCBHmgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDDApGMzZG
MDYyOEFGMTEwLwYDVQQFEyg4NjA1RDc1OTlBMDQwMkY3MEVDMkYyNThENkMxNkJE
MkU0RThEMUZFMB4XDTIxMDgxMzE5MTgwM1oXDTI2MDgxMzE5MTgwM1owGDEWMBQG
A1UEAwwNNjExNmM1NmUtNzc2YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAO46FGQ6gSUvqeduEawUdHoAjTEGdhHHZOmGfxXDIApgDKCWEjQ4i8+UF18/
ofNmNPHHv3MyH6sQxUzNde+VQNw+lInBJBHOlu9yixqfVjUEces7RXiMpYSi/rgV
q/XCTEiiMfJ6IDXCeBIEX8zHKCUeTtYOc6vRwcdwgaelhaFG2OjyXOYf6koUO/OT
5l/zS++j0MWNMh9ZZ2gz4pRHvxnQT12fcwO0rtiaAtd+b3CyK/V117F1JVtJPKm7
U9JssyHKsbfrA7I2IPSd5SnZPjw7tRoCpGrnawbOD0dm+JqH6+CSVn9zApSljFFW
gOSwNv0Fl2eZPRwgHiWpLjeTBCMCAwEAAaOCArQwggKwMB0GA1UdDgQWBBQCxEj9
iLX2jdtzPTGUk+Zr+cZMPTAfBgNVHSMEGDAWgBSGBddZmgQC9w7C8ljWwWvS5OjR
/jAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjA2MjgvRjBDQ0JFN0NGQkEwMTFFQkFCNzg2QzQ5RDhBMDE0Q0UvaGdYWFda
b0VBdmNPd3ZKWTFzRnIwdVRvMGY0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvaGdYWFdab0VBdmNPd3ZKWTFzRnIwdVRvMGY0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB2wYIKwYBBQUHAQsEgc4wgcswgZEGCCsGAQUF
BzALhoGEcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjA2MjgvRjBDQ0JFN0NGQkEwMTFFQkFCNzg2QzQ5RDhB
MDE0Q0UvMTVDNTBDNTBGQzZCMTFFQjlBNTY0NTA4RDhBMDE0Q0Uucm9hMDUGCCsG
AQUFBzANhilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnht
bDAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEBcQsYDANBAIAAjAHAwUALA/2
GDANBgkqhkiG9w0BAQsFAAOCAQEARs9brb2YlAiGzxKGehaqcr8+lCQmosE/Zqw9
jfhhhoasiLNagddUlX7vHfhWLr4Sy4J68LhvdO1lHbL2uEvybCSG5ImfXNgs5BAr
BtGzFb/5Q2p9Qs7//99V5bMhP6mjWMF9xvizfXaSAAFvnjmBJVlH2ZiFxcKcRtU+
6MT4juBuoui9DblTDSeMMcczLY6R9Sxjee6ff1ZhF68mUvIXL1hmpM40t5uU1SPQ
5l7a3A3Oll5qXIeJ4bL+Qy7Xo7FqAPZi9bRf06Ap7HucU663/El7KxIqogHNJmh4
b8AHxUafzcU9zoH+KAWw4tO+GXpH1Ep6lakgZOD8Odcaz3vVvg==
-----END CERTIFICATE-----