Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/BEEEF1CAD21B11F19581B216CF1D38B0.roa
File:                     BEEEF1CAD21B11F19581B216CF1D38B0.roa (raw, json)
Hash identifier:          eYKIXwTHUXfvLU8SLEnE0me5LRRJMnZ2uMrS513ipwc=
Subject key identifier:   90:53:2A:D1:EF:E0:40:06:30:FE:6D:AD:4C:4C:1D:58:5C:3F:B7:AE
Certificate issuer:       /CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Certificate serial:       0770
Authority key identifier: EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/BEEEF1CAD21B11F19581B216CF1D38B0.roa
Signing time:             Tue 27 Oct 2026 15:33:24 +0000
ROA not before:           Tue 27 Oct 2026 15:33:17 +0000
ROA not after:            Sat 27 Oct 2029 15:33:17 +0000
asID:                     328463
IP address blocks:        160.242.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                          rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1904 (0x770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD97CAR, serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
        Validity
            Not Before: Oct 27 15:33:17 2026 GMT
            Not After : Oct 27 15:33:17 2029 GMT
        Subject: CN=6ae0c444-9ac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f1:9f:cf:b9:59:59:ee:c4:31:40:20:29:ae:
                    d3:1e:9d:5c:00:d9:10:aa:25:f4:91:da:ea:66:2b:
                    87:06:5a:27:24:5e:be:67:5d:06:c2:95:b6:82:1c:
                    68:a8:8d:c1:fa:53:3c:b1:26:f7:0c:8c:e6:c6:88:
                    69:a7:17:05:f3:3b:a3:e9:74:40:e6:82:0e:c4:83:
                    90:95:6a:8a:cf:aa:18:10:02:92:0d:5f:c7:7d:eb:
                    b5:d6:bb:3b:20:b5:0a:52:95:06:40:7e:c7:bb:f5:
                    ae:de:ea:5e:42:a8:36:8d:de:b3:f2:88:23:bd:30:
                    b8:29:0d:71:21:c8:43:20:3e:1b:0c:5b:40:81:35:
                    1f:74:75:1a:1f:76:98:89:c6:ce:3e:81:f2:98:3c:
                    70:29:be:0b:74:11:7b:ab:d4:4b:69:4d:b4:dd:3f:
                    d4:4e:52:5c:d4:93:1a:d6:6f:89:4a:a0:20:85:61:
                    9f:a6:4f:72:34:95:5d:57:36:b7:7b:82:e4:7f:17:
                    38:a6:2d:f7:b8:b7:3b:25:fe:46:e5:82:02:ed:32:
                    3a:b8:c6:71:9a:f6:1f:14:14:37:47:66:3f:5d:47:
                    00:64:0d:db:11:1c:99:5a:c5:38:33:77:22:b6:82:
                    6e:6f:51:f0:c4:4f:d6:e1:8e:e6:fc:f0:89:49:ec:
                    2a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:53:2A:D1:EF:E0:40:06:30:FE:6D:AD:4C:4C:1D:58:5C:3F:B7:AE
            X509v3 Authority Key Identifier:
                keyid:EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/BEEEF1CAD21B11F19581B216CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:03:d6:e2:17:ba:19:7f:c0:12:11:a2:44:01:9c:e0:d9:db:
         cf:d4:39:21:4e:27:9c:77:6e:30:63:c1:ba:1a:3c:b3:ce:20:
         fb:f7:6b:10:a5:f2:bb:45:b7:50:20:ad:9f:cd:dc:2f:99:bb:
         e2:7a:41:f3:5d:f0:48:bd:f3:d2:fb:e8:cd:63:b2:fb:f5:bd:
         68:95:09:a4:2a:08:e7:ee:57:0a:da:74:b3:df:4a:04:38:a7:
         18:40:f1:e9:df:21:d4:c5:2f:e0:fa:bd:39:f8:4d:5b:dd:84:
         54:d9:e3:b0:85:19:20:fc:78:3e:30:2a:f8:d1:3c:83:b8:54:
         3d:0f:7c:6f:6a:47:67:b8:68:94:92:0c:bc:6b:43:38:c1:bb:
         ce:91:1a:af:83:c2:40:34:ea:2a:da:7f:ed:14:6b:42:70:1e:
         3a:bc:c0:e9:ec:cb:69:44:b1:6b:44:5f:15:36:b8:8c:61:15:
         fe:7e:cf:7e:1b:b2:2e:4c:0b:98:cf:4d:ed:fb:e1:56:bd:a2:
         52:d5:53:22:7e:8b:7f:02:1d:3d:dc:21:3e:2e:d0:79:24:3c:
         52:30:36:7e:6e:70:5a:f5:f7:67:c2:9b:8f:93:eb:03:9a:d9:
         f9:1e:c6:98:1f:a4:96:f0:29:56:45:13:52:1b:e9:74:7a:20:
         49:32:5e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----