Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/7A355BC68F0B11F18943BABECE1D38B0.roa
File:                     7A355BC68F0B11F18943BABECE1D38B0.roa (raw, json)
Hash identifier:          2ubq4sMEm46CJiJODGDm/vq6M6X+F9Um31l0CCYbLJo=
Subject key identifier:   30:D9:BB:E6:FE:5C:B1:92:D6:DF:FF:44:77:7D:5D:99:90:06:5E:BB
Certificate issuer:       /CN=F36A2F84AR/serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1
Certificate serial:       0760
Authority key identifier: DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/7A355BC68F0B11F18943BABECE1D38B0.roa
Signing time:             Mon 03 Aug 2026 07:18:09 +0000
ROA not before:           Mon 03 Aug 2026 07:18:05 +0000
ROA not after:            Sun 15 Oct 2028 07:18:05 +0000
asID:                     328252
IP address blocks:        156.0.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
                          rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1888 (0x760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2F84AR, serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1
        Validity
            Not Before: Aug  3 07:18:05 2026 GMT
            Not After : Oct 15 07:18:05 2028 GMT
        Subject: CN=6a7040b0-5913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:7b:ed:75:1b:fc:84:f2:23:83:30:e9:d4:
                    18:e8:5a:bc:2e:bb:80:25:8b:ac:63:56:90:2f:bf:
                    2d:82:36:81:17:ce:b1:d7:16:43:fa:1e:6b:53:17:
                    a1:3e:68:6d:9e:d7:8c:37:1b:21:19:df:fb:8d:a8:
                    c2:85:ed:85:f2:67:57:16:6c:bb:c2:17:19:9f:52:
                    0f:33:a2:d4:83:5e:e0:b4:80:7a:98:0c:1d:5a:7d:
                    7d:91:e8:c1:48:13:13:9b:7a:81:e6:d1:f5:bc:b3:
                    ef:b7:b5:dd:32:41:da:c3:c2:83:c4:43:e7:8d:9a:
                    03:ad:0d:f2:83:43:a4:36:3d:21:b9:27:25:ff:f1:
                    49:dd:99:98:29:b7:cf:05:10:db:ff:6a:5c:00:c4:
                    eb:71:40:ff:8a:02:4c:a8:97:1f:b7:c9:b0:29:60:
                    90:9e:62:86:98:d1:f3:f7:cb:44:12:d3:f9:56:5c:
                    91:d1:e3:a9:3f:4f:9d:44:d2:13:a0:c2:7f:5a:2b:
                    9f:24:d4:ae:e1:e9:6c:e1:ae:98:2f:eb:16:2a:31:
                    62:e1:24:16:3d:ed:f1:d9:13:a7:22:f5:f5:51:43:
                    e2:c9:3c:6a:7c:26:f7:81:47:da:b5:6d:e9:f2:28:
                    06:4a:35:ef:c5:7c:93:ba:ae:bb:30:f0:95:53:b2:
                    86:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D9:BB:E6:FE:5C:B1:92:D6:DF:FF:44:77:7D:5D:99:90:06:5E:BB
            X509v3 Authority Key Identifier:
                keyid:DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/7A355BC68F0B11F18943BABECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:7f:0c:9f:59:44:8d:cd:66:33:fd:ca:b8:e8:14:07:b4:f4:
         c8:ca:16:5e:c6:0f:6a:3f:75:61:ea:73:92:f0:ce:ac:a9:aa:
         62:67:44:c6:95:4d:c6:42:95:69:d5:c0:cf:16:81:e8:e2:81:
         cf:d5:a8:fc:f6:b0:33:bf:ae:20:10:fd:0c:30:23:a7:e0:64:
         0d:7d:9a:da:96:8e:fd:31:2b:76:35:62:36:5b:72:44:19:a9:
         7c:06:fc:be:07:73:43:59:c1:92:94:e9:72:d0:6e:ed:98:7b:
         02:72:d9:d2:7c:22:82:d3:b2:58:b9:50:48:0f:1b:86:17:ae:
         5c:ca:14:05:fa:fc:ad:a5:3c:b8:55:17:fe:73:54:1d:9d:f5:
         18:f9:b6:bc:03:a7:83:05:ad:a1:23:4b:19:58:d8:17:87:13:
         58:ae:ff:9b:94:8f:42:1d:62:63:a1:87:36:75:1b:a1:8e:05:
         f6:a2:60:0d:60:3a:66:9c:7f:0c:fe:7f:9e:cf:e0:c2:db:d4:
         a4:7f:63:fa:ed:1c:06:17:3c:83:a5:da:34:f4:df:57:b2:45:
         2e:1a:2d:ab:3c:6f:68:bd:17:a9:1f:a3:01:67:d7:1f:e2:b9:
         08:94:c5:7a:d4:9a:84:91:17:2d:33:2e:48:b9:82:f1:16:17:
         e5:26:3e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----