Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/FFFD6E52B03411F19F2D32E6CE1D38B0.roa
File:                     FFFD6E52B03411F19F2D32E6CE1D38B0.roa (raw, json)
Hash identifier:          Va63pqJ3CMpQhpi8Ld4p5aHiyR85A5tdFO5Lva8PMsw=
Subject key identifier:   C8:8F:AE:95:18:77:89:1E:C9:D1:2A:11:EE:5A:54:35:A0:6F:25:FF
Certificate issuer:       /CN=F36894B8AR/serialNumber=AC7213B3B2E870FB5373C3294023B50BE55DE60C
Certificate serial:       02
Authority key identifier: AC:72:13:B3:B2:E8:70:FB:53:73:C3:29:40:23:B5:0B:E5:5D:E6:0C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rHITs7LocPtTc8MpQCO1C-Vd5gw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/FFFD6E52B03411F19F2D32E6CE1D38B0.roa
Signing time:             Mon 14 Sep 2026 12:08:31 +0000
ROA not before:           Mon 14 Sep 2026 12:08:26 +0000
ROA not after:            Sun 14 Sep 2036 12:08:26 +0000
asID:                     328223
IP address blocks:        160.119.156.0/24 maxlen: 24
                          160.119.157.0/24 maxlen: 24
                          160.119.158.0/24 maxlen: 24
                          160.119.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.mft
                          rsync://rpki.afrinic.net/repository/arin/rHITs7LocPtTc8MpQCO1C-Vd5gw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36894B8AR, serialNumber=AC7213B3B2E870FB5373C3294023B50BE55DE60C
        Validity
            Not Before: Sep 14 12:08:26 2026 GMT
            Not After : Sep 14 12:08:26 2036 GMT
        Subject: CN=6aa7e3bf-867b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2d:3b:06:84:1d:88:9b:af:c9:8c:63:8f:44:
                    b0:70:40:30:34:ee:b3:af:16:b0:ac:71:74:83:5a:
                    2e:9a:45:96:78:65:de:c6:ce:fe:fd:ba:19:8b:96:
                    2e:95:81:2f:3e:68:0a:55:69:5a:84:fd:dd:89:d9:
                    05:88:dc:04:53:1a:cf:5a:1b:9e:c0:37:72:aa:d9:
                    c6:84:62:89:77:a4:df:b7:f1:63:4d:a5:4d:cb:39:
                    77:2a:18:9e:72:23:da:8d:00:a0:62:8a:a3:ff:4a:
                    2a:82:02:1a:09:d3:41:f2:be:00:18:e1:dd:ce:f3:
                    e1:90:15:40:29:33:3d:c3:14:d9:5a:78:6f:bc:73:
                    91:5c:15:9c:9e:03:cc:d1:25:ca:30:98:2b:f0:a3:
                    44:11:7a:57:66:50:b1:e3:22:e7:83:cd:d5:c1:84:
                    d0:fd:67:b2:98:4f:64:55:23:65:17:12:bd:72:f5:
                    de:db:06:72:a7:aa:f3:dc:de:0c:8f:ac:56:3f:39:
                    81:e1:65:72:91:c1:36:6c:8a:06:3e:db:62:d1:95:
                    bc:91:f0:06:0d:1a:5d:99:4d:cf:bf:f4:56:a0:05:
                    62:a5:d4:f7:66:09:4e:1c:c3:43:a7:1d:73:7e:e3:
                    31:24:43:2c:40:e3:86:38:0a:77:a0:26:02:81:ae:
                    00:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8F:AE:95:18:77:89:1E:C9:D1:2A:11:EE:5A:54:35:A0:6F:25:FF
            X509v3 Authority Key Identifier:
                keyid:AC:72:13:B3:B2:E8:70:FB:53:73:C3:29:40:23:B5:0B:E5:5D:E6:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/rHITs7LocPtTc8MpQCO1C-Vd5gw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHITs7LocPtTc8MpQCO1C-Vd5gw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36894B8/8EF30AC2B03011F1806610CBCE1D38B0/FFFD6E52B03411F19F2D32E6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:0b:f1:9b:f8:38:09:75:55:c0:a4:af:b2:11:40:70:ea:5e:
         1e:81:ac:8c:f6:a7:db:f2:b5:8f:e5:2a:64:46:28:9d:b7:e6:
         82:74:1d:c7:64:d2:fe:d1:58:e0:89:7f:ad:7a:0d:ea:ed:ee:
         ca:2a:dc:f5:6e:04:79:d2:1d:eb:fc:12:de:92:62:a7:1a:84:
         6e:cd:63:54:57:9c:30:f3:88:ab:18:e9:8d:08:d9:92:e9:72:
         c6:ec:d3:9f:7a:91:1a:fa:c7:a6:9f:c7:68:fc:c1:2f:9e:e7:
         9a:3d:43:d6:71:a2:a4:4c:cf:46:9a:af:e3:19:05:4f:69:a3:
         01:98:e3:e7:ac:23:97:0e:b2:b4:ad:4e:d2:07:c6:c6:3d:26:
         54:5b:20:95:7e:30:fb:19:d7:60:21:be:f9:ab:33:58:11:fc:
         b8:bb:3e:aa:4f:e2:ac:3e:1b:82:ed:d5:3c:b9:17:53:f5:a8:
         1e:c6:ab:27:24:93:e4:c1:bd:f1:53:db:a0:55:37:44:69:71:
         cf:2d:27:27:94:93:c6:8c:69:68:3f:db:ab:f4:ba:c5:84:72:
         72:be:ea:8c:a3:b1:ba:50:62:f6:6c:22:75:64:af:b4:eb:2f:
         af:f5:45:4a:fe:d3:80:b9:5b:64:37:c0:3c:3f:bb:af:b5:5a:
         d7:30:47:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----