Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/B8EF771C8F0A11F1895496BACE1D38B0.roa
File:                     B8EF771C8F0A11F1895496BACE1D38B0.roa (raw, json)
Hash identifier:          xa/McdgrfGerOEf0aM2R7+zB9sR1LOIyaV9KMQVjnlY=
Subject key identifier:   51:DC:38:2A:5C:3D:25:A9:38:C5:62:15:45:C4:8D:0C:82:E1:5E:D0
Certificate issuer:       /CN=F36A2F84AR/serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1
Certificate serial:       075C
Authority key identifier: DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/B8EF771C8F0A11F1895496BACE1D38B0.roa
Signing time:             Mon 03 Aug 2026 07:12:44 +0000
ROA not before:           Mon 03 Aug 2026 07:12:40 +0000
ROA not after:            Thu 27 Jul 2028 07:12:40 +0000
asID:                     328252
IP address blocks:        156.0.80.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
                          rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1884 (0x75c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2F84AR, serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1
        Validity
            Not Before: Aug  3 07:12:40 2026 GMT
            Not After : Jul 27 07:12:40 2028 GMT
        Subject: CN=6a703f6c-27f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ba:b3:38:ab:e7:99:06:7d:24:a1:5d:44:d2:
                    97:bb:64:d1:3a:46:a0:3d:82:27:2c:8f:68:29:71:
                    24:77:cc:cc:00:32:ee:77:50:f1:0f:20:04:16:33:
                    fb:15:6a:b9:bb:16:ea:53:b3:1c:d8:c4:63:fb:57:
                    68:5f:e4:bd:44:6c:f7:c4:74:06:e4:40:a7:04:66:
                    4b:32:d8:34:5c:9b:37:37:8f:16:3c:08:c1:51:9e:
                    81:f6:f3:94:04:0b:dd:01:c0:1a:7e:e1:8f:27:5c:
                    57:f9:40:ed:b4:ee:de:e1:db:d6:87:fa:69:7f:23:
                    42:de:df:25:d6:fc:a7:10:b4:68:36:10:5c:8e:d0:
                    1c:22:53:d5:df:98:5f:76:4b:11:d0:f4:68:b0:38:
                    a8:70:01:18:5b:e7:42:97:3d:cf:82:7e:a8:cd:1f:
                    ac:d3:43:61:3d:5a:44:55:80:59:e6:3f:ff:24:dd:
                    c7:92:b0:2d:e4:53:e5:59:f0:60:35:70:6e:a3:38:
                    4c:1a:c4:c2:8c:95:60:f7:2b:04:e2:e0:9c:4d:c0:
                    ed:68:f0:ba:63:c9:20:d9:d2:63:15:65:df:d9:36:
                    87:40:b1:1c:ae:d4:9d:7e:bd:a9:22:80:a4:63:70:
                    b9:2e:d3:2f:ad:01:81:8a:54:94:f9:4b:a9:72:4a:
                    9e:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DC:38:2A:5C:3D:25:A9:38:C5:62:15:45:C4:8D:0C:82:E1:5E:D0
            X509v3 Authority Key Identifier:
                keyid:DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/B8EF771C8F0A11F1895496BACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:2d:3f:fd:4a:c7:a2:86:a9:b2:c8:d1:6d:56:c2:86:ef:6c:
         00:93:98:ab:40:0a:3f:3f:32:9a:4c:7b:42:6b:93:d7:46:db:
         b3:2f:5e:f3:c2:40:e0:ba:76:01:fc:6e:94:24:85:f7:22:90:
         a7:84:ca:3c:d9:37:12:0a:cc:b6:bd:3e:5c:94:75:9d:62:32:
         49:b7:f5:f0:36:63:ef:9c:ba:b6:64:23:e8:5c:74:a4:74:4c:
         5e:86:82:cd:0e:c9:b7:fb:68:92:a9:fc:5f:58:db:05:e1:9f:
         04:98:7e:58:9c:5c:5d:cb:9f:05:89:de:7e:99:15:29:b1:96:
         6f:78:99:30:4c:af:ae:da:e1:8d:3b:3f:06:bb:12:15:05:07:
         05:95:fe:b4:48:fb:29:00:af:66:51:56:40:6c:fc:12:88:b1:
         09:5d:db:13:24:a1:05:0f:53:63:00:08:16:5f:8d:ce:48:36:
         95:1b:93:db:06:c9:f8:41:0b:5f:3f:31:2a:a3:2c:e1:79:f9:
         d5:b0:e3:e4:eb:6b:fd:3c:f5:43:98:37:6e:53:82:15:fd:ad:
         0f:c4:f2:b8:a1:97:50:cb:df:69:8f:dd:0a:d2:62:82:19:72:
         69:6c:80:4c:92:07:21:95:85:da:b7:11:2a:7a:a5:af:bc:e5:
         1b:b1:2f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----