Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/1136047ACBDA11F1B347B101CF1D38B0.roa
File:                     1136047ACBDA11F1B347B101CF1D38B0.roa (raw, json)
Hash identifier:          moxdxcUELpu7elLC6Ukvw99IdBHL0GM1+0nuhlj22bQ=
Subject key identifier:   A3:76:5E:EE:EB:92:B8:CD:A0:64:D4:52:3E:49:0B:D4:07:2F:FD:00
Certificate issuer:       /CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Certificate serial:       0762
Authority key identifier: EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/1136047ACBDA11F1B347B101CF1D38B0.roa
Signing time:             Mon 19 Oct 2026 16:28:08 +0000
ROA not before:           Tue 20 Oct 2026 16:28:02 +0000
ROA not after:            Wed 31 Oct 2029 16:28:02 +0000
asID:                     328463
IP address blocks:        160.242.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                          rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1890 (0x762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD97CAR, serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
        Validity
            Not Before: Oct 20 16:28:02 2026 GMT
            Not After : Oct 31 16:28:02 2029 GMT
        Subject: CN=6ad64518-57dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:bc:fa:7b:04:47:bb:bd:a1:64:bc:dd:76:
                    34:31:d1:c4:62:70:d6:a8:cf:fc:76:fe:a3:40:47:
                    0a:d4:e3:2c:01:21:30:3c:5d:d3:1e:e3:43:0b:91:
                    0a:f6:ff:7b:31:97:25:dd:81:c0:db:35:cb:d7:e7:
                    ac:33:a3:71:f1:b9:82:96:18:89:e4:71:9a:08:87:
                    d5:1e:65:e0:d7:34:da:c6:08:ba:9b:ad:aa:43:ce:
                    20:75:1e:97:45:42:e0:fc:35:38:b7:78:36:e1:83:
                    0f:68:92:c4:f1:fc:a3:20:43:eb:9a:e9:87:2e:83:
                    02:92:17:55:f7:88:dd:e3:24:c6:53:7f:ad:f3:a2:
                    ea:59:b4:51:d4:5b:80:34:54:9d:e9:93:5d:89:91:
                    b9:66:ed:6d:d2:8a:d3:2c:36:97:d5:c6:dc:ff:0f:
                    a5:d9:54:54:14:5e:93:f2:c3:8b:3e:43:f7:e8:1c:
                    23:d1:e0:85:f8:23:a6:cc:a8:de:1f:1a:a3:ca:b3:
                    dc:31:29:96:1f:3e:0c:96:a4:39:57:5a:41:cc:ef:
                    50:af:42:d2:1f:b9:8d:28:1a:8e:02:76:aa:c4:02:
                    70:2b:6a:95:86:cb:b4:fd:0a:5b:9b:50:1c:ea:66:
                    71:57:5e:f1:b7:21:51:88:4b:cb:b6:62:be:39:4d:
                    08:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:76:5E:EE:EB:92:B8:CD:A0:64:D4:52:3E:49:0B:D4:07:2F:FD:00
            X509v3 Authority Key Identifier:
                keyid:EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/1136047ACBDA11F1B347B101CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:23:e4:51:4c:e8:f8:81:ec:2e:8d:03:7b:56:9f:2e:25:62:
         9f:33:32:7a:6f:82:c0:56:c6:68:99:ed:80:3c:cb:3c:01:98:
         0e:f0:69:e7:01:e8:ab:b3:45:de:40:de:73:7f:7d:37:cf:8b:
         da:49:53:93:b9:1b:cc:c9:c2:f9:45:8e:0a:f5:f3:f3:52:36:
         89:cb:29:48:2e:4a:8e:46:1f:0a:01:21:6c:1a:dd:6c:3f:34:
         a1:15:f2:da:52:6e:b0:18:b8:a8:8d:66:8a:72:89:3b:38:89:
         e2:e3:78:f4:27:f0:f9:67:64:3a:0a:73:f2:f8:b1:d8:ed:ab:
         bc:53:ee:ba:b7:4e:fa:4a:89:ea:ed:a6:54:d3:2f:b5:77:f9:
         f9:dc:4e:5a:8d:f7:ab:c6:da:e7:d8:6e:16:4a:d5:74:33:e6:
         ae:c8:f7:a5:3a:53:96:6e:58:fd:fc:15:08:97:c8:17:28:2a:
         02:8d:61:1e:67:e1:a9:98:8f:03:9d:82:11:a2:26:27:f4:ed:
         8f:93:55:13:ce:17:4f:34:2c:2e:cd:fa:78:29:ee:be:d1:e2:
         92:37:85:87:31:51:c1:b5:ff:75:2e:56:29:f2:2a:59:2c:92:
         3d:7b:82:e0:a9:5e:ea:f8:ee:71:b0:32:a5:c7:8c:d8:33:a1:
         70:34:67:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----