Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/3455CE3C6B3911ED8B33D1C3F1222468.roa
File:                     3455CE3C6B3911ED8B33D1C3F1222468.roa (raw, json)
Hash identifier:          toOai8ZBR3vTvdHeg3LaLL6gpVJazukKbGn3v/cuk0k=
Subject key identifier:   B0:C2:4E:40:79:38:F1:36:1A:FA:23:3E:2D:EC:E4:3A:7F:7B:A4:2E
Certificate issuer:       /CN=F36F3412AF/serialNumber=938BE89351A81A42DF847BF3931372D098304446
Certificate serial:       0464
Authority key identifier: 93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/3455CE3C6B3911ED8B33D1C3F1222468.roa
Signing time:             Wed 23 Nov 2022 14:14:55 +0000
ROA not before:           Wed 23 Nov 2022 14:14:51 +0000
ROA not after:            Sat 30 Nov 2030 14:14:51 +0000
asID:                     327987
IP address blocks:        2c0f:6800::/32 maxlen: 34

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F3412AF/serialNumber=938BE89351A81A42DF847BF3931372D098304446
        Validity
            Not Before: Nov 23 14:14:51 2022 GMT
            Not After : Nov 30 14:14:51 2030 GMT
        Subject: CN=637e2adf-c4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4d:de:db:63:8c:75:9d:c1:86:e6:0f:f2:13:
                    81:53:d5:12:5f:40:4b:39:e1:11:02:af:1a:27:45:
                    76:23:e4:fb:0d:b0:9a:73:8c:ec:95:f4:ea:da:cc:
                    35:54:4f:52:d2:8e:14:ac:2d:63:d1:ef:2f:64:c3:
                    4a:76:3d:50:73:03:c6:c2:db:3e:ba:90:09:fe:8a:
                    67:d6:23:59:d3:43:29:8c:a2:47:07:09:ca:be:0e:
                    60:b2:e5:7c:92:0d:e5:11:64:cc:46:9f:54:71:3c:
                    95:12:a0:ed:23:c1:e1:1b:aa:f1:21:8c:9c:90:b4:
                    77:0c:c6:8c:1b:90:c6:e5:4b:81:14:70:2c:c3:ab:
                    ac:5a:67:c1:f7:76:92:78:26:06:fc:92:2f:9e:d4:
                    89:ec:ef:ad:ca:b8:89:1e:97:58:6b:9a:12:60:6b:
                    a0:c7:c5:8e:73:ec:a9:82:c1:eb:3d:fe:52:c3:73:
                    60:e6:99:71:3a:e1:b6:12:5e:26:fd:77:32:94:de:
                    c9:b4:cf:e3:4e:c2:b4:06:37:65:69:84:d7:5c:21:
                    29:c6:49:bc:2f:ba:32:de:24:26:e6:13:d3:6a:63:
                    e8:bf:dd:21:a0:e9:e4:65:40:af:d0:66:68:bc:a1:
                    73:65:d8:eb:68:74:29:69:33:06:b8:7a:3c:61:3f:
                    52:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C2:4E:40:79:38:F1:36:1A:FA:23:3E:2D:EC:E4:3A:7F:7B:A4:2E
            X509v3 Authority Key Identifier:
                keyid:93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/3455CE3C6B3911ED8B33D1C3F1222468.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:6800::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:10:19:31:52:63:37:36:68:e1:a8:3a:5b:de:16:1e:29:2b:
         12:34:2a:24:8b:bc:c4:17:f4:2f:9d:18:c3:0a:37:c6:77:1d:
         87:d2:fe:61:c3:1f:72:ba:91:3b:0e:13:9c:aa:7c:39:c9:a8:
         bd:82:30:b3:ff:11:a2:8f:e8:da:e5:1d:c4:e5:8e:6d:0b:07:
         e0:26:d3:83:bf:e9:8a:9d:21:59:a5:b3:8d:b0:d1:dc:3c:c9:
         85:4b:f8:1a:21:ad:7b:d4:5a:22:0a:a6:e4:b7:43:43:51:4d:
         4b:94:12:11:0d:48:37:32:8f:7d:fa:9e:c2:b6:f7:4d:2c:e5:
         23:70:76:34:fe:63:30:6b:6f:02:1b:b3:ed:0a:04:c5:27:10:
         d8:78:d6:ea:71:a2:2b:c7:67:4a:03:04:f0:ad:35:17:0d:b3:
         78:da:7c:bf:a4:a8:35:40:ed:6a:85:b1:50:7e:00:9d:7c:24:
         20:81:82:6d:8c:58:2d:01:ce:22:ca:6b:f3:63:2a:e4:ae:64:
         09:48:95:31:cf:ff:78:7e:ea:36:fe:77:da:41:fd:55:66:ea:
         39:e4:d1:82:9a:f5:73:88:04:7b:75:a0:c3:c3:b6:d7:19:b8:
         16:c2:ae:87:62:83:c9:dd:0a:b2:11:79:66:82:6b:e0:28:7e:
         bf:6e:00:e8
-----BEGIN CERTIFICATE-----
MIIFhDCCBGygAwIBAgICBGQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAwwKRjM2
RjM0MTJBRjExMC8GA1UEBRMoOTM4QkU4OTM1MUE4MUE0MkRGODQ3QkYzOTMxMzcy
RDA5ODMwNDQ0NjAeFw0yMjExMjMxNDE0NTFaFw0zMDExMzAxNDE0NTFaMBgxFjAU
BgNVBAMMDTYzN2UyYWRmLWM0YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBTd7bY4x1ncGG5g/yE4FT1RJfQEs54RECrxonRXYj5PsNsJpzjOyV9Ora
zDVUT1LSjhSsLWPR7y9kw0p2PVBzA8bC2z66kAn+imfWI1nTQymMokcHCcq+DmCy
5XySDeURZMxGn1RxPJUSoO0jweEbqvEhjJyQtHcMxowbkMblS4EUcCzDq6xaZ8H3
dpJ4Jgb8ki+e1Ins763KuIkel1hrmhJga6DHxY5z7KmCwes9/lLDc2DmmXE64bYS
Xib9dzKU3sm0z+NOwrQGN2VphNdcISnGSbwvujLeJCbmE9NqY+i/3SGg6eRlQK/Q
Zmi8oXNl2OtodClpMwa4ejxhP1IVAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUsMJO
QHk48TYa+iM+LezkOn97pC4wHwYDVR0jBBgwFoAUk4vok1GoGkLfhHvzkxNy0Jgw
REYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYzNDEyL0U4MkM3NzZBMTc3RTExRUE5Q0E3QkMwRUY4QUVBMjI4L2s0dm9r
MUdvR2tMZmhIdnpreE55MEpnd1JFWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2s0dm9rMUdvR2tMZmhIdnpreE55MEpnd1JFWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEF
BQcwC4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJl
cl9yZXBvc2l0b3J5L0YzNkYzNDEyL0U4MkM3NzZBMTc3RTExRUE5Q0E3QkMwRUY4
QUVBMjI4LzM0NTVDRTNDNkIzOTExRUQ4QjMzRDFDM0YxMjIyNDY4LnJvYTA1Bggr
BgEFBQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54
bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAsD2gAMA0GCSqGSIb3DQEB
CwUAA4IBAQChEBkxUmM3NmjhqDpb3hYeKSsSNCoki7zEF/QvnRjDCjfGdx2H0v5h
wx9yupE7DhOcqnw5yai9gjCz/xGij+ja5R3E5Y5tCwfgJtODv+mKnSFZpbONsNHc
PMmFS/gaIa171FoiCqbkt0NDUU1LlBIRDUg3Mo99+p7CtvdNLOUjcHY0/mMwa28C
G7PtCgTFJxDYeNbqcaIrx2dKAwTwrTUXDbN42ny/pKg1QO1qhbFQfgCdfCQggYJt
jFgtAc4iymvzYyrkrmQJSJUxz/94fuo2/nfaQf1VZuo55NGCmvVziAR7daDDw7bX
GbgWwq6HYoPJ3QqyEXlmgmvgKH6/bgDo
-----END CERTIFICATE-----