Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2E1ED02AA31311F18BB211DFCE1D38B0.roa
File:                     2E1ED02AA31311F18BB211DFCE1D38B0.roa (raw, json)
Hash identifier:          Rbs0MXr0WT2GGmTOH1wrMUifSHRlbhu+t++m52kDdAk=
Subject key identifier:   1F:36:91:B3:25:EC:A2:50:91:ED:EC:80:A1:46:B8:F4:9A:41:A7:8F
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D80
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2E1ED02AA31311F18BB211DFCE1D38B0.roa
Signing time:             Fri 28 Aug 2026 19:03:40 +0000
ROA not before:           Fri 28 Aug 2026 19:03:36 +0000
ROA not after:            Wed 31 Dec 2036 19:03:36 +0000
asID:                     219394
IP address blocks:        165.49.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3456 (0xd80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Aug 28 19:03:36 2026 GMT
            Not After : Dec 31 19:03:36 2036 GMT
        Subject: CN=6a91db8c-b075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:85:8c:92:b1:d0:d9:4a:ed:8d:da:53:76:c1:
                    89:6e:d2:23:f9:52:e2:14:f9:4b:c2:33:69:67:73:
                    62:d0:ec:48:3b:eb:b3:c4:11:ea:6f:c4:3a:1f:c7:
                    7c:64:48:df:2a:5b:71:13:1f:c0:35:69:f3:79:8b:
                    8b:36:06:0d:11:ee:9f:ad:8a:dd:bf:49:3a:3b:08:
                    e1:8b:50:aa:fd:98:d7:5f:97:a7:3d:ed:11:3b:86:
                    cf:c2:2d:5b:9e:48:9b:98:a1:79:aa:bd:51:5d:0a:
                    fe:6c:f5:04:68:8c:23:b8:7f:1a:d3:5c:67:bc:67:
                    5a:30:03:78:8e:97:7d:0f:56:1f:22:7e:18:2a:23:
                    e6:e6:88:c8:04:50:73:2b:4a:5b:81:e2:e1:62:5f:
                    e8:5f:cc:9f:a0:59:45:80:50:0d:be:5a:1d:b7:d5:
                    7b:aa:93:c8:5d:41:c9:5b:a0:a0:b8:f3:a2:3d:2a:
                    a6:0f:ed:e4:95:84:51:28:0e:94:cb:30:87:2b:9e:
                    bf:88:bb:eb:d5:ea:48:ab:a2:d8:8e:1e:77:2f:7c:
                    5a:4a:d6:2a:56:ad:db:10:d4:c5:10:e6:16:1b:0c:
                    7c:3a:df:98:32:d7:d7:22:af:82:bb:30:a2:ac:9c:
                    8c:90:7b:ca:2c:dd:cf:5b:f1:21:73:87:7d:ed:bb:
                    d6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:36:91:B3:25:EC:A2:50:91:ED:EC:80:A1:46:B8:F4:9A:41:A7:8F
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2E1ED02AA31311F18BB211DFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:c5:2a:96:2e:86:85:83:41:79:5b:a3:40:a9:a2:1f:c1:e5:
         51:00:31:6f:2f:69:d5:35:4d:5f:ce:33:b7:03:54:03:6b:e1:
         d8:43:12:55:af:5f:6f:e7:72:aa:fc:43:88:aa:ed:d9:52:74:
         b0:a6:ba:5f:8e:51:6b:68:f3:ee:e5:5a:c3:71:f3:93:e7:31:
         1f:f9:c7:2f:a2:3f:13:49:79:66:f8:f9:64:13:d2:29:6f:1c:
         90:11:d0:6d:5d:55:93:c5:c2:77:f0:8f:af:d4:a6:c9:43:b0:
         e3:07:a4:61:8e:f4:06:7c:a7:12:9e:13:0f:83:3a:9a:19:cd:
         d5:02:aa:f3:0a:eb:ef:99:78:36:6e:b7:10:df:00:48:f5:9a:
         3e:26:e0:c2:d0:36:d2:02:6a:ff:11:e4:ac:4f:3f:00:1d:4a:
         4e:ca:06:5c:93:48:6f:b0:24:8d:5f:27:ea:91:7f:32:4f:d0:
         89:16:c6:e8:d8:4e:05:71:6b:98:38:ff:d8:ab:65:11:18:de:
         84:e7:4e:fa:48:80:13:5f:12:15:ac:3f:74:27:74:80:85:bc:
         6c:c6:14:8a:44:f0:4f:a1:da:38:88:af:d9:52:af:9d:0e:fb:
         85:85:93:06:c6:43:47:4d:79:43:d1:85:48:81:f0:7c:79:ed:
         e0:ed:86:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----