Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/F47A6EFAD1FD11F1A1F7C3D8CE1D38B0.roa
File:                     F47A6EFAD1FD11F1A1F7C3D8CE1D38B0.roa (raw, json)
Hash identifier:          nJMw0jDhfUQ9MIEZ9B8cpiQCrvIR1zCE9zeLYVXhPUk=
Subject key identifier:   71:31:C7:44:80:29:BF:16:D8:86:05:DA:1E:E2:40:1A:7D:3F:5F:9C
Certificate issuer:       /CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Certificate serial:       076E
Authority key identifier: EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/F47A6EFAD1FD11F1A1F7C3D8CE1D38B0.roa
Signing time:             Tue 27 Oct 2026 12:00:09 +0000
ROA not before:           Tue 27 Oct 2026 12:00:04 +0000
ROA not after:            Sat 27 Oct 2029 12:00:04 +0000
asID:                     24691
IP address blocks:        160.242.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                          rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1902 (0x76e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD97CAR, serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
        Validity
            Not Before: Oct 27 12:00:04 2026 GMT
            Not After : Oct 27 12:00:04 2029 GMT
        Subject: CN=6ae09249-a99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:db:17:45:57:2f:df:6d:61:63:1d:ca:c1:8d:
                    3a:6e:f7:35:4c:57:10:a8:ef:cd:97:3d:72:f2:7e:
                    c5:b9:43:38:e7:43:d6:05:0e:63:2d:8d:e1:e6:1e:
                    3e:1b:46:6e:17:98:13:e0:49:40:b3:5e:f1:8f:45:
                    81:29:6f:6b:0c:47:eb:8c:04:90:0c:2c:bb:03:46:
                    21:ea:1e:7b:bd:d6:e5:71:7c:d7:d7:39:1b:26:7f:
                    ab:0c:d1:7b:d9:2a:d4:93:aa:43:78:2c:2d:fd:93:
                    5d:2b:64:7d:51:09:c9:5a:bb:d1:cb:5a:23:d7:12:
                    5a:6e:c2:b8:12:c3:60:2a:57:c5:63:fe:80:3c:48:
                    cb:bb:cd:44:22:50:17:55:fa:66:01:98:4f:fb:98:
                    9d:d2:7f:3d:82:79:2c:72:35:10:22:15:40:60:c3:
                    4e:34:d3:d8:9c:07:93:58:3d:4a:a8:b6:78:4b:5b:
                    d5:1b:5d:1f:39:43:a1:a5:26:9e:27:cd:e4:9d:6f:
                    c1:9a:6c:ee:e6:24:70:26:9d:04:74:0a:35:9a:df:
                    51:84:5d:4a:8f:93:20:3f:f3:08:b2:7c:67:81:9a:
                    5d:76:89:9c:91:d9:e0:ca:f6:ed:49:60:6d:38:a7:
                    92:37:ca:5c:b9:5f:20:93:33:4b:16:bf:e5:c9:15:
                    78:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:31:C7:44:80:29:BF:16:D8:86:05:DA:1E:E2:40:1A:7D:3F:5F:9C
            X509v3 Authority Key Identifier:
                keyid:EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/F47A6EFAD1FD11F1A1F7C3D8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.242.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:07:63:6f:3a:c8:5d:ee:cb:c2:e2:e6:fa:86:f4:9a:09:de:
         d8:22:78:71:50:07:9e:95:7d:fe:e6:c0:04:39:9a:e4:94:51:
         b2:36:49:21:9a:f3:69:ef:b0:b1:e2:b0:b6:ec:05:76:34:7b:
         17:1f:74:99:f5:83:2a:96:c0:0f:8b:d8:fb:9f:0e:b3:80:cd:
         f6:a1:c4:30:2e:a5:49:60:f6:a0:33:ac:25:14:09:20:13:eb:
         db:b0:82:2b:d3:17:6f:8e:6e:e6:1f:41:5a:ee:36:3e:68:32:
         d1:6c:ea:5c:21:11:bf:27:d7:fb:75:db:a1:d6:a2:b8:bb:6c:
         92:49:ae:1d:19:22:b2:a5:f8:28:10:e5:63:81:ad:c0:42:05:
         46:fc:8d:48:80:06:fa:7b:cd:73:18:7d:37:4d:c1:b8:f6:a6:
         44:04:33:07:fb:ad:ab:cc:5b:cb:98:ed:63:10:2d:53:c9:d3:
         e8:c1:46:02:be:11:82:d2:9b:4c:13:47:d0:51:e8:a6:c9:29:
         90:b7:0f:52:cb:90:3e:a1:d4:7f:c0:d0:b5:15:46:ee:d7:3c:
         e8:84:b9:0b:f9:85:c5:ac:31:4b:0b:2b:97:f6:94:ba:4a:86:
         81:6b:58:fe:44:ee:99:ef:9a:e8:e2:b8:f3:24:12:b9:cd:ed:
         cb:cd:f3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----