Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/201B4A7CA08311F19F0794DCCE1D38B0.roa
File:                     201B4A7CA08311F19F0794DCCE1D38B0.roa (raw, json)
Hash identifier:          NN5qUhqN1/Y8yRcPGaLt4UcnLg77Yqg7EVASKh72q1g=
Subject key identifier:   0B:AE:C5:E2:E4:1B:72:6D:83:19:00:7F:68:06:3D:41:61:2F:F5:0D
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D55
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/201B4A7CA08311F19F0794DCCE1D38B0.roa
Signing time:             Tue 25 Aug 2026 12:47:27 +0000
ROA not before:           Tue 25 Aug 2026 12:47:23 +0000
ROA not after:            Wed 31 Dec 2036 12:47:23 +0000
asID:                     152179
IP address blocks:        165.49.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3413 (0xd55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Aug 25 12:47:23 2026 GMT
            Not After : Dec 31 12:47:23 2036 GMT
        Subject: CN=6a8d8edf-0221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:13:11:72:c0:d9:d9:a8:9c:83:90:eb:9f:52:
                    ba:57:04:04:6e:3b:ae:17:d9:cf:fc:cb:27:3e:c5:
                    74:3d:61:9c:33:9d:87:60:d8:ea:82:1a:49:02:c7:
                    78:cc:c7:a1:90:0c:38:09:40:19:ae:86:89:8c:2b:
                    ad:86:81:16:ea:8a:d0:d7:0e:46:54:63:63:22:d8:
                    ba:8a:45:f4:cc:b2:65:e8:2c:2a:7a:ca:f0:4b:2d:
                    f5:91:ae:31:e4:22:3c:4e:a0:69:89:bd:64:62:04:
                    67:44:28:52:a8:7e:e2:4f:df:4e:7a:84:54:39:1c:
                    95:de:98:ea:1b:96:3c:7b:2d:04:88:62:c8:f1:23:
                    28:48:38:e5:0f:1c:66:b1:ac:99:3e:aa:90:cb:90:
                    0c:ee:0d:24:39:a8:81:ff:6b:91:fa:0e:89:ee:3d:
                    30:c1:9e:f5:3b:1f:3b:8e:a5:a3:1a:16:06:23:f6:
                    bd:c2:9a:63:02:ff:2a:3f:ba:af:94:3f:cb:d8:db:
                    d3:dd:f8:a2:86:29:62:48:f3:fb:f2:c5:54:22:6f:
                    a3:de:ee:fa:ae:b3:e9:f6:09:df:74:6f:3b:12:09:
                    bc:4c:20:53:83:78:8e:4c:22:6c:dd:02:1e:a6:03:
                    37:4c:68:3b:c9:da:bb:68:cc:08:1e:bd:7e:de:6c:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AE:C5:E2:E4:1B:72:6D:83:19:00:7F:68:06:3D:41:61:2F:F5:0D
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/201B4A7CA08311F19F0794DCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:17:e2:66:3d:49:c0:df:5c:a8:8d:87:da:90:93:92:f0:db:
         ef:fa:bb:72:76:c6:75:e3:24:47:3a:f3:9c:96:f3:9e:35:22:
         04:8d:a3:1a:eb:26:79:71:6a:26:65:7b:74:f5:88:8f:8d:df:
         ca:12:d3:b0:1c:54:92:99:b1:19:5d:35:52:9c:d1:5c:00:8f:
         9e:05:b6:74:76:30:d0:82:1d:8b:35:29:8f:e7:ea:92:81:a6:
         53:ba:72:b0:b0:ca:b7:79:e1:43:e7:f2:85:79:6c:a1:b6:69:
         62:be:48:ce:0a:b9:95:68:34:2c:ee:f5:b2:b6:f0:1d:81:f0:
         37:60:a0:8e:97:78:ef:77:b8:29:35:fd:44:f2:13:8f:37:66:
         ad:bf:dc:d0:77:e3:13:dc:aa:49:2c:b5:93:b7:2d:cd:ab:a2:
         07:1e:c9:eb:90:48:b9:2b:36:e0:48:42:bd:fc:f2:0d:02:31:
         bc:7b:52:e1:68:37:86:a6:08:1b:91:75:e0:b4:16:15:b1:ad:
         3b:85:b4:5e:37:19:6b:5a:ef:9a:77:d7:f9:f1:a0:53:48:2f:
         3d:4d:e3:88:fb:4f:97:e6:f0:c9:e5:74:d6:a5:eb:c7:af:c4:
         75:27:fd:0f:98:9c:e6:3f:2c:8c:38:86:f2:64:04:87:95:d5:
         70:4c:f7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----