Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3629FF7/0577768ECD3611F1BA813BEBCE1D38B0/570C2BF8CD5311F1BAFBFDA7CE1D38B0.roa
File:                     570C2BF8CD5311F1BAFBFDA7CE1D38B0.roa (raw, json)
Hash identifier:          w0ItD5bjnmr7oMXp0G1SFF5ORIj9n6GNyFaQyjYLltw=
Subject key identifier:   C3:E4:98:AD:15:00:FF:C1:DE:FE:C7:6D:81:52:09:6F:01:C0:BE:85
Certificate issuer:       /CN=F3629FF7AR/serialNumber=BF99E2F6F7DD5145FD5422E78074CBE5F44FEE28
Certificate serial:       03
Authority key identifier: BF:99:E2:F6:F7:DD:51:45:FD:54:22:E7:80:74:CB:E5:F4:4F:EE:28
Authority info access:    rsync://rpki.afrinic.net/repository/arin/v5ni9vfdUUX9VCLngHTL5fRP7ig.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/0577768ECD3611F1BA813BEBCE1D38B0/570C2BF8CD5311F1BAFBFDA7CE1D38B0.roa
Signing time:             Wed 21 Oct 2026 13:28:45 +0000
ROA not before:           Wed 21 Oct 2026 13:28:40 +0000
ROA not after:            Sun 21 Oct 2029 13:28:40 +0000
asID:                     37055
IP address blocks:        169.255.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/0577768ECD3611F1BA813BEBCE1D38B0/v5ni9vfdUUX9VCLngHTL5fRP7ig.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/0577768ECD3611F1BA813BEBCE1D38B0/v5ni9vfdUUX9VCLngHTL5fRP7ig.mft
                          rsync://rpki.afrinic.net/repository/arin/v5ni9vfdUUX9VCLngHTL5fRP7ig.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629FF7AR, serialNumber=BF99E2F6F7DD5145FD5422E78074CBE5F44FEE28
        Validity
            Not Before: Oct 21 13:28:40 2026 GMT
            Not After : Oct 21 13:28:40 2029 GMT
        Subject: CN=6ad8be0d-3502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:54:1e:4e:72:d0:b8:98:9f:f4:ce:42:1c:
                    f2:c4:61:44:0d:3c:79:38:e7:1a:d3:8e:7a:d8:93:
                    e6:89:c9:6a:ca:36:60:e7:6a:85:6a:5e:f0:38:5c:
                    6e:d2:25:d9:d8:a1:25:a3:1f:9d:c9:25:b8:ef:7c:
                    9d:3b:29:21:d5:e3:33:1b:25:57:f7:0e:8b:b5:53:
                    2a:77:a4:e1:d1:8a:3b:a6:d6:46:ab:df:02:ab:c7:
                    7c:78:c7:2b:aa:5e:21:9e:42:e2:aa:14:14:f6:ae:
                    ea:f9:08:78:39:98:9f:a5:d1:90:ee:99:9b:a6:c5:
                    e9:78:c1:bc:f7:41:21:b2:2e:98:52:95:d8:0a:33:
                    ce:9d:d4:0c:93:90:25:05:85:11:c5:cc:3a:55:1d:
                    45:1a:15:81:fa:e3:01:8b:8a:92:7a:e3:df:5f:c6:
                    2d:94:23:4d:a0:92:11:e2:f9:5f:c6:f9:bc:2a:60:
                    6e:37:94:a8:38:95:80:4c:a3:67:0a:72:a2:2e:92:
                    9b:01:9d:61:ca:ef:ed:14:99:99:ff:f6:10:0f:fd:
                    b5:31:5e:36:35:4c:3f:8e:a3:ba:5b:d4:73:ed:aa:
                    cc:9f:59:32:96:31:7a:19:f5:15:c5:e7:66:1d:19:
                    90:20:c7:96:fb:40:2c:3a:b8:db:10:64:dd:14:a9:
                    11:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E4:98:AD:15:00:FF:C1:DE:FE:C7:6D:81:52:09:6F:01:C0:BE:85
            X509v3 Authority Key Identifier:
                keyid:BF:99:E2:F6:F7:DD:51:45:FD:54:22:E7:80:74:CB:E5:F4:4F:EE:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/0577768ECD3611F1BA813BEBCE1D38B0/v5ni9vfdUUX9VCLngHTL5fRP7ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/v5ni9vfdUUX9VCLngHTL5fRP7ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629FF7/0577768ECD3611F1BA813BEBCE1D38B0/570C2BF8CD5311F1BAFBFDA7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.255.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:51:3b:91:2c:3a:9a:dc:cc:f2:48:ee:1e:9f:51:dc:73:d3:
         23:f2:29:1f:30:d9:ef:86:c1:46:12:56:dd:b5:87:e0:00:a0:
         d3:93:03:bf:bb:ec:ec:10:7b:31:a5:b0:03:28:49:a4:ef:b4:
         d9:19:9f:df:1d:af:b0:6c:d9:1b:0a:6f:81:13:e1:e3:22:4f:
         91:84:61:77:39:e8:3e:0d:de:03:34:26:f3:15:4c:5c:82:b7:
         7f:46:5e:d5:93:01:0c:6e:45:c3:11:dd:65:ea:cf:94:9c:c0:
         a4:ef:55:0a:02:01:fd:f8:1c:52:a8:95:07:19:b1:0e:5b:7b:
         65:a0:12:92:32:a3:f5:ea:bc:8e:ea:c5:c0:5d:f1:01:81:93:
         6c:00:45:f5:30:12:b9:a4:c5:99:fe:0b:5c:40:12:42:85:ce:
         37:d3:85:92:a3:dc:46:48:1f:f5:3e:88:e2:b0:64:91:f4:d4:
         c2:d6:53:07:09:40:dd:4b:f1:57:80:e9:89:97:88:3d:5b:dc:
         33:f5:c8:ae:3c:70:bc:58:73:c9:06:81:f0:0b:3a:04:b9:91:
         f8:42:0e:91:8b:24:e5:6c:65:cd:22:14:cd:c2:8e:af:f6:4b:
         bb:98:b2:88:03:6b:a3:ce:77:72:45:b3:40:91:54:d5:e1:b8:
         d6:3e:52:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----