Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/096947EEB1C111F18AA52CC8CE1D38B0.roa
File:                     096947EEB1C111F18AA52CC8CE1D38B0.roa (raw, json)
Hash identifier:          p1OEODtsXje9uXxEVaraQqAjSj+gwb4nM8kLPJ7pLkI=
Subject key identifier:   A6:CB:DB:EB:9F:EC:D6:33:4D:AC:B9:2B:B4:2F:B5:24:B2:0D:E3:26
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0DC6
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/096947EEB1C111F18AA52CC8CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 11:23:27 +0000
ROA not before:           Wed 16 Sep 2026 11:23:23 +0000
ROA not after:            Wed 31 Dec 2036 11:23:23 +0000
asID:                     218797
IP address blocks:        165.49.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3526 (0xdc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Sep 16 11:23:23 2026 GMT
            Not After : Dec 31 11:23:23 2036 GMT
        Subject: CN=6aaa7c2f-a91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:3d:26:8c:7e:e9:90:2d:d0:86:29:20:03:6d:
                    da:ae:7d:86:bf:bc:19:98:f8:7a:c4:b1:53:28:93:
                    df:bf:8b:c5:ec:56:f0:24:4a:1c:69:ba:5a:09:5a:
                    dc:c7:10:7c:55:3d:03:22:f3:41:02:f7:0f:bd:97:
                    aa:bb:62:72:7b:e0:2f:d2:a5:6a:d2:81:cf:a0:00:
                    7e:94:09:d6:56:21:f0:89:98:13:b7:c0:bf:63:c9:
                    d6:62:bd:67:d3:d3:3f:69:d7:f3:3e:4a:ac:d5:54:
                    2e:0a:e2:1d:ec:69:12:df:31:f5:e2:8b:c8:c3:34:
                    1d:51:7f:82:9a:cc:cd:9a:d9:c4:bf:fd:01:0a:ca:
                    4a:3c:8b:9b:38:d7:65:51:83:60:2f:d1:1f:93:19:
                    eb:82:50:92:e6:ea:be:67:6b:b5:c0:51:b4:a1:80:
                    26:f5:5f:44:f2:db:6e:eb:1e:e3:09:66:d5:02:f8:
                    2a:5f:f0:45:7a:bd:8b:56:9f:02:d0:e5:b0:04:a8:
                    2b:e6:0a:1c:c6:91:2b:d8:25:e8:53:cd:d3:ff:d7:
                    63:f7:bb:4e:87:80:ef:67:0e:8a:1a:3a:3f:99:9b:
                    e8:8e:fc:8d:39:72:7e:0b:da:86:4c:f2:f8:1d:8e:
                    7a:9c:58:4c:57:eb:05:ef:cb:33:e8:df:cf:0a:1a:
                    10:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CB:DB:EB:9F:EC:D6:33:4D:AC:B9:2B:B4:2F:B5:24:B2:0D:E3:26
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/096947EEB1C111F18AA52CC8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:7b:59:78:da:bd:59:de:80:6c:31:55:34:31:e4:b1:75:20:
         5e:28:21:2a:cb:7e:f8:51:e3:e7:29:ec:57:f4:a2:d5:82:59:
         13:6a:b7:b5:3b:bd:68:b5:5c:b9:4a:69:df:cc:82:6b:8c:ff:
         34:4b:2f:a0:9b:ae:ec:cd:91:4c:19:5b:f0:52:64:50:92:a0:
         6a:0a:42:05:f4:b0:dd:87:26:f2:96:ac:ef:6a:4d:d8:ac:6d:
         db:ca:d6:27:2e:2a:59:5e:a6:bd:cb:3c:8e:0b:e3:12:88:94:
         4c:6d:fc:8c:a2:92:0d:a1:76:83:c6:97:32:6e:c9:cf:a6:50:
         a9:5d:32:b0:0f:06:18:3a:1a:37:fd:1b:77:04:0c:a1:ab:a2:
         ff:f2:73:17:25:76:a0:d2:2e:29:07:09:ea:1c:a9:a2:08:ee:
         2e:f3:31:4f:a8:bb:5d:93:48:c7:5e:19:fc:da:a9:33:44:83:
         5e:03:9e:e6:4a:17:a0:f1:a9:d0:fb:c1:4b:e0:91:c7:68:ff:
         a8:83:6c:3c:57:31:ea:19:23:d0:a4:b3:ad:d9:dd:31:bc:70:
         0d:82:ae:2e:b2:cf:f0:37:06:87:60:22:35:d2:8e:45:86:2a:
         14:f0:db:13:00:07:34:b8:a1:56:35:ae:51:da:0f:49:90:cd:
         f0:74:a2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----