Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/F4F619028E0211E9836DD54BF8AEA228.roa
File:                     F4F619028E0211E9836DD54BF8AEA228.roa (raw, json)
Hash identifier:          5eedoqh8u9s0o56WadCa/4hoIr3cwpS8Z0VWv5q2rOI=
Subject key identifier:   5B:99:81:81:14:7A:1F:23:8B:88:73:C9:E3:D8:F0:D6:12:98:EE:26
Certificate issuer:       /CN=F36F56CAAF/serialNumber=83F62F001AACD00B53F660EA2C66109BBBB99E64
Certificate serial:       02
Authority key identifier: 83:F6:2F:00:1A:AC:D0:0B:53:F6:60:EA:2C:66:10:9B:BB:B9:9E:64
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g_YvABqs0AtT9mDqLGYQm7u5nmQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/F4F619028E0211E9836DD54BF8AEA228.roa
Signing time:             Thu 13 Jun 2019 17:44:56 +0000
ROA not before:           Thu 13 Jun 2019 17:44:51 +0000
ROA not after:            Mon 30 Jun 2025 17:44:51 +0000
asID:                     328037
IP address blocks:        2c0f:f0c8::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g_YvABqs0AtT9mDqLGYQm7u5nmQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 27 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F56CAAF/serialNumber=83F62F001AACD00B53F660EA2C66109BBBB99E64
        Validity
            Not Before: Jun 13 17:44:51 2019 GMT
            Not After : Jun 30 17:44:51 2025 GMT
        Subject: CN=5d028b98-34de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:8e:49:dd:ca:ab:b8:3c:1f:88:41:4c:a4:
                    31:20:a6:df:dd:72:b1:1e:2f:6d:ce:5f:a0:5c:b2:
                    0e:44:17:d5:38:74:65:7b:bc:f1:8c:24:6b:3b:71:
                    a9:34:f3:a1:a2:0e:4c:da:0f:6a:ef:25:91:aa:5e:
                    0e:ee:f7:7d:b4:fc:ba:76:35:1a:d9:b4:5a:58:4f:
                    87:29:b7:80:ac:5f:0e:6d:11:e7:66:78:14:dd:91:
                    53:b0:3f:bb:91:9b:20:64:3e:8b:c8:8f:2f:8b:c2:
                    86:f3:15:dd:06:b4:9b:31:cb:ef:3f:38:cd:4b:b1:
                    63:d7:51:1a:df:85:ba:78:2d:67:af:eb:93:8a:a3:
                    22:08:f6:c7:9c:a9:47:07:82:f4:fb:9e:01:23:72:
                    3c:37:ab:ff:9a:f8:91:51:86:f9:68:78:88:be:40:
                    c9:d1:38:0c:a2:5a:ae:da:b6:7d:c0:8b:fd:df:5a:
                    4d:e0:4e:4b:c4:32:a8:29:e3:46:f9:01:96:11:e6:
                    b6:e8:78:5c:e7:07:e8:ae:3b:e4:ad:b9:c4:a9:db:
                    3a:84:aa:d9:c3:26:1b:5c:ee:51:70:95:6d:09:09:
                    51:d8:3d:25:a0:aa:a6:70:0f:96:4f:72:6a:0f:ec:
                    6a:37:07:0e:89:50:4a:98:e1:08:5e:82:f2:b5:b2:
                    14:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:99:81:81:14:7A:1F:23:8B:88:73:C9:E3:D8:F0:D6:12:98:EE:26
            X509v3 Authority Key Identifier:
                keyid:83:F6:2F:00:1A:AC:D0:0B:53:F6:60:EA:2C:66:10:9B:BB:B9:9E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/g_YvABqs0AtT9mDqLGYQm7u5nmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g_YvABqs0AtT9mDqLGYQm7u5nmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F56CA/FAC2D5CA8E0011E99071444AF8AEA228/F4F619028E0211E9836DD54BF8AEA228.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:f0c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:75:4d:f8:67:50:2f:91:9e:31:7f:1a:7e:8c:3e:3a:30:d1:
         b7:64:5d:4d:a2:68:2d:c0:7f:e8:9d:c1:81:b9:d5:3a:d1:68:
         3f:35:cb:07:c1:7f:8a:2f:b3:4c:84:cb:33:2b:93:a9:d5:7c:
         82:2e:e7:c8:0b:80:19:f8:da:80:52:74:ff:cd:33:3c:7f:cc:
         42:8b:62:58:be:45:11:42:98:a1:18:ec:a4:55:66:bc:08:a3:
         85:65:78:d2:f4:09:23:2b:b1:45:87:a6:02:d2:2a:8d:a1:be:
         e9:0c:58:5c:82:da:45:69:07:45:f4:d8:5f:d5:1c:67:4b:88:
         a5:e3:ca:60:fd:8c:61:34:f4:6a:6d:6f:2e:cd:52:93:e9:49:
         c4:24:84:7b:38:b0:2c:64:e7:e2:91:3e:22:d1:fd:b0:aa:6d:
         9a:bc:00:19:52:ec:d6:bc:d4:4b:92:eb:73:d2:e1:bf:be:c3:
         17:95:9d:5e:ff:fe:cf:ce:31:8a:62:51:f4:19:a0:d0:89:36:
         d5:7d:10:97:9e:65:11:bd:62:00:1e:8e:a6:2a:89:09:0e:25:
         4d:0b:de:26:8a:7b:d9:dc:b4:67:f0:0f:69:43:a8:b9:f3:b1:
         68:b6:b2:ac:a8:b3:85:d2:11:1f:0d:c1:38:27:ec:3b:af:64:
         f7:db:2a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----