Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/3303E3CCC96611F1BA3C6107CF1D38B0.roa
File:                     3303E3CCC96611F1BA3C6107CF1D38B0.roa (raw, json)
Hash identifier:          D4yoN6hf7Ha2jqtw+W3TBz6MDFQzIzcyNt2EOy2P/NQ=
Subject key identifier:   37:C2:CF:C7:D6:D6:DB:26:46:2B:99:58:5E:F8:18:50:DF:A1:6F:71
Certificate issuer:       /CN=F364C81DAR/serialNumber=0D27394E9CDE92155E4599D68410992D708BF244
Certificate serial:       0AD6
Authority key identifier: 0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/3303E3CCC96611F1BA3C6107CF1D38B0.roa
Signing time:             Fri 16 Oct 2026 13:33:41 +0000
ROA not before:           Fri 16 Oct 2026 13:33:35 +0000
ROA not after:            Mon 01 Jan 2029 13:33:35 +0000
asID:                     327822
IP address blocks:        169.255.20.0/22 maxlen: 22
                          169.255.20.0/23 maxlen: 23
                          169.255.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
                          rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2774 (0xad6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364C81DAR, serialNumber=0D27394E9CDE92155E4599D68410992D708BF244
        Validity
            Not Before: Oct 16 13:33:35 2026 GMT
            Not After : Jan  1 13:33:35 2029 GMT
        Subject: CN=6ad227b5-f3bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d9:8b:63:b5:39:b0:2e:ab:6a:ab:45:42:18:
                    88:d9:40:5f:a6:da:2f:d4:10:65:d9:63:17:15:1e:
                    a8:81:0c:7d:cf:93:18:82:ca:3b:b1:44:f9:9f:93:
                    03:19:13:d7:19:1a:fc:64:62:fe:34:9c:7e:0b:6e:
                    54:94:23:6c:3e:b7:f1:fc:24:f1:80:4f:c5:52:34:
                    7d:45:be:0d:78:06:cc:ef:51:0d:0f:83:17:21:db:
                    12:bd:b0:34:82:ec:06:a0:fe:0c:2a:92:9c:f2:c6:
                    e9:62:60:30:68:d1:d8:4e:a7:8d:fb:61:36:7f:2f:
                    21:c1:d2:ee:70:8f:6e:89:cf:86:a7:18:4a:24:1b:
                    9e:9e:07:e3:c2:aa:25:6f:b9:9e:6a:4e:83:2e:33:
                    bf:b7:39:c2:f2:5f:5f:6d:5b:77:7b:da:d9:ff:88:
                    86:37:6a:04:c4:2f:1b:20:52:36:15:b0:7f:7b:8b:
                    10:fa:3d:c3:58:25:9f:09:91:8a:42:51:b4:72:82:
                    bb:78:55:0a:77:8d:62:ef:41:4c:0e:69:2c:80:3b:
                    8a:92:7f:e2:40:9c:56:bb:6f:ad:63:bd:ee:98:36:
                    66:ac:28:1f:39:93:6a:df:db:74:2c:a6:82:37:e7:
                    f9:be:8c:75:7e:e3:5f:90:4f:85:34:8b:ce:17:e4:
                    60:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C2:CF:C7:D6:D6:DB:26:46:2B:99:58:5E:F8:18:50:DF:A1:6F:71
            X509v3 Authority Key Identifier:
                keyid:0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/3303E3CCC96611F1BA3C6107CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.255.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         09:5c:d5:dd:6a:d3:81:27:c8:e7:22:6a:cc:e2:07:6b:57:02:
         6d:30:f2:02:32:2b:62:c5:77:37:b7:ad:8e:32:dd:52:a8:9e:
         b4:86:52:d1:a8:56:a7:81:3a:2b:a1:8d:ad:29:10:2c:18:74:
         35:47:91:dd:22:32:10:99:15:7a:df:8c:17:df:fa:f6:d9:f5:
         88:e3:cc:a2:79:ee:d0:68:d8:55:e2:1d:ef:75:36:9b:33:cb:
         71:5c:c1:5a:cd:87:e8:4b:5e:03:bd:33:d7:80:b0:87:db:65:
         37:c2:cf:29:50:06:fa:d6:3e:20:91:73:07:9b:12:29:7d:d7:
         dc:21:bc:f0:ce:7b:ab:c5:ec:c4:b1:8b:e8:8d:c1:6f:7f:c9:
         e8:4c:0a:87:f5:d5:55:af:e3:6a:d5:af:b7:5e:cd:77:e4:af:
         4f:64:13:c6:89:3d:df:23:34:66:20:32:c7:31:52:f0:63:03:
         52:bd:72:bd:62:59:84:fa:09:c1:8b:45:b0:be:33:49:56:a8:
         96:ef:2a:99:71:6a:d6:f4:93:5c:49:f9:85:20:8a:f6:ac:24:
         a8:74:9e:98:91:a8:b8:10:9f:d2:b4:97:57:da:c1:20:45:a8:
         e5:ca:2c:9f:74:7b:1b:26:21:50:87:ed:35:fa:62:6a:da:e1:
         9b:93:54:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----