Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/6D16A902345111EA83C8F660F8AEA228.roa
File:                     6D16A902345111EA83C8F660F8AEA228.roa (raw, json)
Hash identifier:          CEsf8aJnIGJmX6uZlMZKivmaxNidagXwOjPfOH6lI4A=
Subject key identifier:   2D:9C:57:C7:27:17:64:6C:38:88:59:12:41:F6:E9:0B:2A:5F:BA:AE
Certificate issuer:       /CN=F36F144CAR/serialNumber=BFF10D73AA8138DCE36742A766F96523859E487C
Certificate serial:       80
Authority key identifier: BF:F1:0D:73:AA:81:38:DC:E3:67:42:A7:66:F9:65:23:85:9E:48:7C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/6D16A902345111EA83C8F660F8AEA228.roa
Signing time:             Sat 11 Jan 2020 09:04:52 +0000
ROA not before:           Sat 11 Jan 2020 09:04:45 +0000
ROA not after:            Fri 11 Jan 2030 09:04:45 +0000
asID:                     328209
IP address blocks:        160.119.96.0/22 maxlen: 23
                          160.119.98.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.mft
                          rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F144CAR/serialNumber=BFF10D73AA8138DCE36742A766F96523859E487C
        Validity
            Not Before: Jan 11 09:04:45 2020 GMT
            Not After : Jan 11 09:04:45 2030 GMT
        Subject: CN=5e198fb4-e2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6f:99:fe:8f:43:09:d7:a5:4a:12:16:f1:e8:
                    53:69:09:0e:db:13:ee:af:e4:e9:1e:14:9a:ef:8f:
                    92:88:3a:20:05:e4:63:6d:ef:fa:75:61:f9:15:2a:
                    ca:5b:f3:a8:fe:1f:d1:5e:ec:24:d3:a7:b6:13:26:
                    1b:dd:66:cc:23:8e:9e:7e:e3:7a:6f:06:ec:55:bb:
                    a8:4b:65:2b:e3:72:0c:48:7d:c2:3f:e4:b9:89:d5:
                    a0:51:d1:c5:d4:d6:c0:12:0b:e7:f3:ba:a4:13:2f:
                    03:c6:7d:3c:84:a3:35:8f:85:91:b9:51:13:53:de:
                    60:b8:96:5d:38:f4:b3:54:74:82:45:dd:38:9e:c2:
                    0b:32:2f:ad:d5:d3:90:c8:1f:15:67:20:68:ed:cb:
                    a2:79:7c:60:35:c0:de:fe:f5:60:cd:b9:a0:3f:cc:
                    bb:44:79:9a:b1:15:2c:25:9e:8c:00:86:88:7a:84:
                    bb:c7:4c:5b:e5:67:ee:73:6d:d1:90:9a:e0:41:8f:
                    68:98:f1:d8:37:71:0a:a4:42:60:7f:e5:cc:42:0d:
                    f4:d5:15:c2:99:d7:ca:20:3c:08:d1:04:61:ff:6d:
                    ef:01:4b:12:da:3d:d7:e7:c2:67:f0:8d:93:a9:f0:
                    f5:b4:49:fb:84:c2:29:d5:21:81:9f:3b:f3:77:a4:
                    f0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9C:57:C7:27:17:64:6C:38:88:59:12:41:F6:E9:0B:2A:5F:BA:AE
            X509v3 Authority Key Identifier:
                keyid:BF:F1:0D:73:AA:81:38:DC:E3:67:42:A7:66:F9:65:23:85:9E:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/v_ENc6qBONzjZ0KnZvllI4WeSHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/v_ENc6qBONzjZ0KnZvllI4WeSHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F144C/9030157CD2E511E99A4CE368F8AEA228/6D16A902345111EA83C8F660F8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         af:60:d1:c6:a0:ad:df:91:ba:46:cf:84:2d:92:3d:ec:c8:b4:
         c8:ed:3e:58:59:a6:2c:3e:e7:d9:de:d1:85:48:34:e3:36:79:
         a5:4f:5f:bc:f4:3b:3f:cd:87:3e:a0:cf:60:31:a5:ab:09:3b:
         e0:98:09:7d:6e:12:83:a5:a9:04:c1:44:1c:b2:00:25:07:78:
         51:fe:f0:a7:9e:4a:05:a0:88:fa:bd:78:be:6f:24:43:61:93:
         31:79:88:ba:1c:38:93:67:37:13:4b:cf:be:d4:b4:24:4a:2a:
         e1:ac:a0:ff:55:c4:bb:4f:b7:bb:ab:a0:7f:8a:df:ed:8f:b0:
         5c:e4:21:1a:b9:72:3e:b4:b8:9f:ab:3f:1b:31:2a:04:67:64:
         50:fd:52:0a:b9:76:e1:08:fd:88:cf:0f:64:7a:c0:c7:15:82:
         83:d3:cb:31:ea:77:6d:12:1d:c2:82:19:3d:82:b1:c7:9e:b4:
         f3:9f:6e:ab:ee:1d:b9:1b:64:e2:ca:57:9b:17:a5:0f:2d:6d:
         7b:35:50:59:a8:30:2d:e9:21:4d:a8:5a:f8:a7:ba:81:d7:f3:
         b1:d8:f3:21:ef:4a:16:f3:27:47:bc:c9:17:5d:bc:36:27:6b:
         2b:ac:bd:65:2d:20:63:02:a0:82:43:cd:4c:34:0a:86:cb:1c:
         21:f8:7f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----