Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642481/49C6DDECBE5011F1A6E473A1CE1D38B0/DA14890CBE5111F18095F3AACE1D38B0.roa
File:                     DA14890CBE5111F18095F3AACE1D38B0.roa (raw, json)
Hash identifier:          0+yei3Xs4ULiwrkHPgwJYkCbJi13KqGBkzRNvSn6k4Q=
Subject key identifier:   64:E5:83:30:F8:20:02:51:D7:EB:8E:65:31:50:2D:69:97:E0:DC:E4
Certificate issuer:       /CN=F3642481AR/serialNumber=77ED8BB2515733B51E939142A0DBD72ADDADFC8E
Certificate serial:       02
Authority key identifier: 77:ED:8B:B2:51:57:33:B5:1E:93:91:42:A0:DB:D7:2A:DD:AD:FC:8E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/d-2LslFXM7Uek5FCoNvXKt2t_I4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642481/49C6DDECBE5011F1A6E473A1CE1D38B0/DA14890CBE5111F18095F3AACE1D38B0.roa
Signing time:             Fri 02 Oct 2026 11:10:19 +0000
ROA not before:           Fri 02 Oct 2026 11:10:15 +0000
ROA not after:            Wed 02 Oct 2030 11:10:15 +0000
asID:                     328258
IP address blocks:        160.20.112.0/22 maxlen: 22
                          160.20.112.0/24 maxlen: 24
                          160.20.113.0/24 maxlen: 24
                          160.20.114.0/24 maxlen: 24
                          160.20.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642481/49C6DDECBE5011F1A6E473A1CE1D38B0/d-2LslFXM7Uek5FCoNvXKt2t_I4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642481/49C6DDECBE5011F1A6E473A1CE1D38B0/d-2LslFXM7Uek5FCoNvXKt2t_I4.mft
                          rsync://rpki.afrinic.net/repository/arin/d-2LslFXM7Uek5FCoNvXKt2t_I4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642481AR, serialNumber=77ED8BB2515733B51E939142A0DBD72ADDADFC8E
        Validity
            Not Before: Oct  2 11:10:15 2026 GMT
            Not After : Oct  2 11:10:15 2030 GMT
        Subject: CN=6abf911b-3dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:9a:11:d2:d2:d0:cd:02:fe:0c:48:e8:f4:
                    29:b0:f5:06:99:d1:1f:b8:ed:6a:e4:4e:bb:c3:89:
                    49:22:90:e6:c2:6b:ed:bc:01:8b:69:bc:2d:89:38:
                    ef:b3:96:e6:6f:09:7d:64:2f:8b:32:7c:98:42:cc:
                    71:67:5b:a9:c4:6c:e3:47:de:6c:2c:95:6f:d4:40:
                    78:e0:f6:38:42:a2:50:5c:65:0c:84:dc:8a:f6:33:
                    8e:a3:3f:d9:3d:a5:4e:af:33:6b:00:58:ec:13:d1:
                    ed:84:6e:27:b2:6a:75:13:af:ce:4a:e8:11:2d:50:
                    04:65:b6:fa:fe:f5:28:16:df:e9:85:f5:e1:d6:bf:
                    d1:01:dc:c5:ee:34:a0:53:28:f3:13:d6:85:12:b3:
                    c0:2a:29:15:00:dc:f1:28:88:43:4c:99:3d:6e:5f:
                    80:b7:ab:45:69:0a:11:8e:58:7a:5c:d0:16:b0:55:
                    ec:67:57:ae:8b:e9:0d:0e:ba:63:00:bf:56:ae:75:
                    75:d4:df:80:23:eb:04:05:f8:c3:b9:bf:8a:8e:91:
                    8e:42:30:0e:54:ce:6f:a0:55:92:a1:02:a0:00:66:
                    e2:23:d8:96:5a:bb:9a:ac:bb:aa:f3:96:eb:37:c9:
                    f5:db:4b:e5:8f:1c:fa:e0:5d:89:b4:37:67:5f:86:
                    0a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:E5:83:30:F8:20:02:51:D7:EB:8E:65:31:50:2D:69:97:E0:DC:E4
            X509v3 Authority Key Identifier:
                keyid:77:ED:8B:B2:51:57:33:B5:1E:93:91:42:A0:DB:D7:2A:DD:AD:FC:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642481/49C6DDECBE5011F1A6E473A1CE1D38B0/d-2LslFXM7Uek5FCoNvXKt2t_I4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/d-2LslFXM7Uek5FCoNvXKt2t_I4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642481/49C6DDECBE5011F1A6E473A1CE1D38B0/DA14890CBE5111F18095F3AACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:05:00:1e:e4:76:fb:1f:f2:4d:15:ab:f8:49:34:04:fd:68:
         e0:4b:f8:2d:36:8d:1a:36:62:dc:b0:e9:66:99:a8:21:bc:4b:
         67:0f:fd:90:9e:1e:1c:fd:61:c5:15:3a:42:ca:f8:2c:f2:56:
         4a:b7:a1:ca:bc:f8:8a:22:92:83:2c:eb:36:66:a4:d8:95:d7:
         62:81:a4:19:a4:f1:56:dd:06:9d:03:a2:bd:05:13:e1:3b:63:
         a4:62:f6:1c:a9:8d:5a:b8:7f:e7:7d:19:41:74:cb:7f:cb:3f:
         79:9d:4f:bc:ad:9e:7a:c7:87:15:1e:63:2a:f0:50:c6:3f:27:
         a2:a9:5a:81:a9:65:19:5d:80:ff:ba:22:9d:e3:f8:3b:05:f7:
         82:36:2a:43:d3:e1:6c:91:99:06:4d:66:cd:79:da:a8:81:c4:
         82:5f:0c:f9:33:cd:4e:75:72:b4:a6:a6:6e:1c:e7:ee:04:4e:
         b2:6a:40:48:e4:3f:05:47:f1:11:37:c1:b5:3b:9a:51:2c:b8:
         d9:9c:b2:86:8f:bf:7b:6f:c9:8a:a2:41:43:3a:b2:29:1e:06:
         16:0a:8a:0f:d4:6b:18:b9:a7:8b:36:b8:93:8f:6e:ec:43:a5:
         51:90:0d:f7:56:79:ea:72:1a:02:0c:9b:5f:09:2d:47:8b:d6:
         02:e3:ec:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----