Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2C0A19A6B1BF11F1A5CC0CBCCE1D38B0.roa
File:                     2C0A19A6B1BF11F1A5CC0CBCCE1D38B0.roa (raw, json)
Hash identifier:          ptVWIK2vJvTgfiVycpoFAzT34t8POgs4t/evBtmTeLo=
Subject key identifier:   E8:D9:4E:6E:CB:7B:EE:13:AE:64:DF:B9:00:E9:D8:23:19:58:A7:8C
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0DB5
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2C0A19A6B1BF11F1A5CC0CBCCE1D38B0.roa
Signing time:             Wed 16 Sep 2026 11:10:06 +0000
ROA not before:           Wed 16 Sep 2026 11:10:02 +0000
ROA not after:            Wed 31 Dec 2036 11:10:02 +0000
asID:                     32043
IP address blocks:        165.49.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3509 (0xdb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Sep 16 11:10:02 2026 GMT
            Not After : Dec 31 11:10:02 2036 GMT
        Subject: CN=6aaa790e-e891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:20:c7:b0:09:4e:dc:2b:e3:01:80:69:6e:81:
                    4d:ce:34:3c:03:98:7b:c9:8e:df:c0:63:66:c8:e7:
                    c7:9a:39:45:aa:d8:f7:cb:10:6f:4a:5c:d0:02:5d:
                    df:71:17:ec:72:b1:e7:2b:05:0e:01:f2:19:4c:fd:
                    89:9f:03:16:d7:dd:34:e5:86:ab:6a:54:ed:35:2f:
                    e2:0e:bf:a0:25:da:cc:15:cb:87:11:f7:ad:af:58:
                    36:98:c8:8e:31:33:02:32:61:4f:dd:14:26:fe:4e:
                    94:ba:70:89:31:a6:50:4f:97:bc:35:9a:34:8a:db:
                    59:51:30:4b:11:c7:fd:db:cc:0f:36:5a:5c:ab:06:
                    5b:02:73:c5:d8:6d:27:09:df:e4:2b:79:99:cd:de:
                    85:eb:05:23:d7:5d:63:df:d1:a8:58:71:ae:0c:60:
                    d0:b0:98:ea:1d:37:2f:f3:10:9e:d6:f3:ad:2d:41:
                    8e:a8:7b:1c:df:31:4b:3b:0d:59:64:2e:20:50:7d:
                    4d:b7:ca:17:20:51:0c:25:a8:47:f0:da:13:a2:fb:
                    99:cd:4b:05:89:8a:c7:a7:d8:03:2a:1c:e3:f0:a6:
                    a4:ea:af:c4:e1:34:e3:c7:ad:12:bd:ca:c2:5c:57:
                    42:1e:2d:13:b1:ed:de:f8:11:94:88:33:f9:34:00:
                    fc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D9:4E:6E:CB:7B:EE:13:AE:64:DF:B9:00:E9:D8:23:19:58:A7:8C
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2C0A19A6B1BF11F1A5CC0CBCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:c1:38:5d:e8:cf:68:2a:60:f4:4d:3c:fd:09:32:e8:9d:7e:
         04:69:e1:ef:39:44:95:65:f5:a3:f4:b5:f7:3a:3e:0f:26:00:
         a2:94:c1:db:d4:c6:93:90:59:99:94:23:6c:f8:d4:8e:77:1c:
         8a:71:94:8e:fe:d2:41:50:67:56:a0:4e:78:68:7d:eb:06:4e:
         ba:58:a9:49:e5:6c:08:a7:8a:e3:70:f2:98:3a:68:98:ac:fe:
         1a:7c:d1:4f:9b:ba:59:6b:ab:01:89:94:99:8b:61:49:48:4b:
         08:a7:8d:8e:89:0c:8e:6c:7d:a8:fe:e9:f2:53:43:2a:75:92:
         f1:e0:6b:fa:96:2d:70:03:00:9d:97:c7:36:f7:e2:a4:f6:04:
         0f:b9:af:0c:27:9e:ad:e0:c2:53:69:f3:f1:99:a4:c2:04:e6:
         9e:9f:77:d6:8c:cc:22:83:95:52:4f:b9:e2:b2:19:10:e1:0d:
         cb:76:85:80:b8:ea:77:2e:a1:48:44:fd:6b:e2:d5:60:5c:f0:
         eb:3d:76:ec:28:62:31:d9:68:df:89:23:de:17:3a:81:e4:1e:
         f4:92:fe:16:ee:85:02:36:55:8e:d5:bc:74:6e:2d:21:07:3b:
         d9:b5:29:00:05:05:f8:1e:8e:bf:79:b2:4e:e3:b5:6d:84:19:
         53:cd:cd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----