Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/04809128A08311F1BFC28BDCCE1D38B0.roa
File:                     04809128A08311F1BFC28BDCCE1D38B0.roa (raw, json)
Hash identifier:          TK6X8IvoPrJi3Zqz2Kh6kWnTy6g+zmdDsmfYyonckoE=
Subject key identifier:   89:C3:1E:2B:A5:C2:00:A1:A5:7F:1B:6F:3C:0D:25:E0:FA:D1:F9:22
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D53
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/04809128A08311F1BFC28BDCCE1D38B0.roa
Signing time:             Tue 25 Aug 2026 12:46:40 +0000
ROA not before:           Tue 25 Aug 2026 12:46:37 +0000
ROA not after:            Wed 31 Dec 2036 12:46:37 +0000
asID:                     152179
IP address blocks:        165.49.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3411 (0xd53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Aug 25 12:46:37 2026 GMT
            Not After : Dec 31 12:46:37 2036 GMT
        Subject: CN=6a8d8eb0-1cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5d:cd:4d:c3:a8:63:ef:0f:4d:dd:40:c7:99:
                    09:b3:a8:a8:0b:b2:80:ec:db:e7:6a:aa:94:03:80:
                    56:67:08:f2:f7:2e:44:0d:b7:62:f0:69:d2:1b:cf:
                    d0:ab:d1:44:cf:d1:b6:99:1f:22:eb:2c:a7:db:da:
                    fc:2c:48:04:b6:4b:fb:d3:53:a1:ee:6d:a8:c6:ef:
                    3b:6c:59:9b:73:52:83:0e:05:53:ab:14:26:1e:ce:
                    28:4c:80:8b:1a:f4:9f:b3:b3:f3:1e:25:ba:fc:a4:
                    f4:5d:e5:55:15:71:2a:ac:c5:5d:59:75:a2:66:bd:
                    e0:78:15:8e:de:ca:f4:27:73:b3:08:e7:c5:91:72:
                    87:72:4e:d3:55:44:c8:00:5d:30:fd:70:90:72:6a:
                    41:2a:61:f1:38:c5:35:74:20:97:d1:4d:64:1e:51:
                    67:6f:29:2c:a4:4b:9e:6a:42:cc:72:b4:e2:72:94:
                    9f:ca:55:a1:b7:6b:e4:fc:f1:e8:11:74:09:f1:42:
                    38:cb:0a:83:30:7a:a0:70:a6:8c:10:ae:de:dc:b5:
                    90:42:bf:7d:cd:67:20:74:0b:f4:09:8d:ca:9e:50:
                    cf:3f:07:e3:e4:e5:dc:e6:c8:ea:bc:91:42:10:fa:
                    80:94:f5:fd:45:eb:ab:81:d5:09:83:d2:2c:cb:4a:
                    1a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C3:1E:2B:A5:C2:00:A1:A5:7F:1B:6F:3C:0D:25:E0:FA:D1:F9:22
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/04809128A08311F1BFC28BDCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:f4:7b:39:d0:b1:ef:3c:5c:4c:85:b6:f6:d1:eb:4a:6d:4b:
         79:f3:8e:a9:64:62:30:be:99:77:ba:c1:03:5a:96:79:21:7c:
         e4:66:a0:12:98:21:6b:08:3f:14:e2:25:b7:b9:4d:94:2a:b4:
         15:8c:a9:16:46:92:07:ea:0c:1e:00:61:02:e3:20:7e:cd:31:
         02:20:43:93:f9:a7:65:63:24:34:b7:a7:e0:00:b7:b1:80:72:
         9f:ce:36:48:9f:af:b9:76:c2:58:81:c8:c5:86:3f:9e:ea:aa:
         10:b9:ea:48:a9:06:43:94:6c:ac:c8:7b:08:ee:44:3a:3b:bd:
         fc:16:71:c8:dd:7d:37:f3:b2:db:8e:fb:16:d9:b1:15:20:52:
         68:02:4b:73:e0:83:6a:bc:a9:37:9e:6c:09:4a:f8:de:28:45:
         84:6d:90:1d:b3:b7:64:e1:6d:4a:ea:54:86:05:99:45:d0:87:
         8b:3f:5b:c8:62:e0:e1:13:a2:cc:53:1c:28:16:99:73:2c:68:
         b1:ee:e3:80:99:94:e7:14:a4:cc:ef:e8:07:46:1b:60:f0:5b:
         43:de:3f:66:ba:60:77:11:09:3b:c3:06:a3:df:5f:e4:f9:56:
         4f:61:5a:db:45:da:b0:fe:40:da:b2:67:80:f2:32:e6:56:0e:
         83:af:44:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----