Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/C0C63010DDB211EC88CB7ED5F1222468.roa
File:                     C0C63010DDB211EC88CB7ED5F1222468.roa (raw, json)
Hash identifier:          VYAYQQDHoVJLrUXBxDOc6MdKCzBNkadHBFZwQyasmoU=
Subject key identifier:   B7:E1:10:61:D1:F3:6B:6B:D4:6C:83:41:BE:C0:27:07:E2:60:C2:42
Certificate issuer:       /CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
Certificate serial:       0294
Authority key identifier: 90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/C0C63010DDB211EC88CB7ED5F1222468.roa
Signing time:             Fri 27 May 2022 11:47:15 +0000
ROA not before:           Fri 27 May 2022 11:47:11 +0000
ROA not after:            Fri 23 May 2025 11:47:11 +0000
asID:                     37239
IP address blocks:        2c0f:fe78::/32 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 19 Jun 2024 00:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 660 (0x294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F2B14AF/serialNumber=90E899936DF9E68B9A7505BFBE63B8AFA0A77AE9
        Validity
            Not Before: May 27 11:47:11 2022 GMT
            Not After : May 23 11:47:11 2025 GMT
        Subject: CN=6290ba43-77a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0e:ba:17:0a:43:38:b1:7f:25:9b:0f:dc:20:
                    02:77:40:29:dd:0a:cf:05:a1:7a:1a:e2:80:49:d8:
                    c5:12:c0:51:97:90:fa:33:81:48:ae:34:9a:9f:00:
                    3a:ac:41:15:d0:a3:17:88:c2:39:d1:bb:bf:3f:95:
                    db:d6:61:de:c0:0b:b6:42:28:31:a8:2c:3f:da:da:
                    74:09:b1:58:a9:47:b1:b2:a2:2e:87:02:e4:a1:ca:
                    0f:7e:d7:6b:24:6b:78:92:11:49:62:33:f5:ee:ed:
                    93:5d:2a:ad:5a:22:92:8a:8c:53:bd:87:10:8f:ec:
                    6b:bf:9e:7f:a0:4b:83:53:5f:f3:7f:22:cc:33:92:
                    68:db:f9:22:2d:04:04:1f:09:e2:84:00:3f:af:8e:
                    ca:29:0c:d0:c6:c0:a8:f8:e8:7a:63:e5:f8:a5:44:
                    ff:dc:f1:48:4c:f4:02:43:10:a1:4c:f9:ff:0d:08:
                    8b:11:c6:1b:a0:4c:97:81:be:90:f6:2c:b6:45:6a:
                    73:90:e0:ab:d2:5e:2f:01:d7:67:51:50:7e:02:3c:
                    5a:c0:07:b2:a6:e0:e0:63:6b:c6:21:72:4d:28:cf:
                    f4:6c:be:5f:0d:e2:2e:56:2a:f8:b1:ca:7a:3e:26:
                    6b:0c:d0:56:b5:ff:55:b1:76:6b:10:dc:9d:31:86:
                    e3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:E1:10:61:D1:F3:6B:6B:D4:6C:83:41:BE:C0:27:07:E2:60:C2:42
            X509v3 Authority Key Identifier:
                keyid:90:E8:99:93:6D:F9:E6:8B:9A:75:05:BF:BE:63:B8:AF:A0:A7:7A:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/kOiZk2355ouadQW_vmO4r6Cneuk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOiZk2355ouadQW_vmO4r6Cneuk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F2B14/43F81B58ED1C11EA9F838C55F8AEA228/C0C63010DDB211EC88CB7ED5F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:fe78::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:06:d4:5a:cf:e2:ba:ef:ce:fe:82:a2:89:8f:c6:d4:dd:7f:
         67:f1:04:19:c2:93:0e:3c:f6:f1:b6:dc:69:aa:79:28:30:51:
         23:9c:69:5c:8c:1f:c8:66:d4:a4:17:bd:5b:e1:a4:28:c6:cf:
         03:04:f4:a4:8f:07:a9:2d:a3:cc:a2:3d:df:6f:fd:fc:21:80:
         44:15:d9:01:78:d0:61:60:b8:2c:bb:38:33:c7:11:00:08:60:
         df:39:0c:2d:6e:77:34:c4:6a:bf:ad:81:26:8e:e1:8d:ec:57:
         41:8a:c3:01:6d:10:94:b5:8b:9f:0f:c7:6b:d7:26:a0:98:e7:
         c3:bd:04:e6:86:3f:1a:67:4d:f4:25:3a:20:25:99:9f:35:08:
         a3:f6:db:e0:e9:21:6e:b0:95:f1:6f:b2:72:f0:4a:89:b8:ee:
         5b:e2:2b:b7:13:1a:62:f2:8d:f3:30:12:77:3e:1b:6a:e2:30:
         60:f7:10:52:23:1e:d7:77:f4:a6:3c:54:0f:07:a2:60:0c:ff:
         ec:0a:e6:5e:45:c5:c7:e2:47:3b:bf:bd:64:8f:3d:2f:81:ca:
         9e:37:5b:d2:48:2b:9a:32:5d:ea:74:54:2c:d1:47:ee:22:c5:
         3f:5b:30:7c:75:34:e8:8e:9e:ad:e0:d4:ec:40:36:3f:c1:aa:
         f8:c1:f3:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----