Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/391BCF92A08311F1A3BF9DDCCE1D38B0.roa
File:                     391BCF92A08311F1A3BF9DDCCE1D38B0.roa (raw, json)
Hash identifier:          Lf7zJI0MKuE7rhQ+W9hwbFV1PDhEj7AXN4b7H4X+mGA=
Subject key identifier:   F3:A2:3F:0B:BC:C5:6F:6A:69:83:25:1F:D7:07:E7:2B:97:6A:A6:DE
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D57
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/391BCF92A08311F1A3BF9DDCCE1D38B0.roa
Signing time:             Tue 25 Aug 2026 12:48:09 +0000
ROA not before:           Tue 25 Aug 2026 12:48:05 +0000
ROA not after:            Wed 31 Dec 2036 12:48:05 +0000
asID:                     152179
IP address blocks:        165.49.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3415 (0xd57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Aug 25 12:48:05 2026 GMT
            Not After : Dec 31 12:48:05 2036 GMT
        Subject: CN=6a8d8f09-bec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d1:ae:36:9d:b4:42:16:e6:91:98:7d:f1:fe:
                    88:e0:8a:6f:d6:bf:1d:a0:e9:36:e2:91:d3:1c:04:
                    57:a5:b6:16:15:d8:cb:fd:53:c9:15:03:a2:cd:28:
                    2a:d7:53:e1:cd:65:9d:2d:3d:61:98:74:95:b4:ce:
                    11:30:e5:3e:05:94:ff:3a:1d:db:a2:f9:4b:38:05:
                    20:c0:56:e0:c3:a7:fd:fc:f6:f3:1b:98:b1:89:e0:
                    12:c3:24:3c:2c:41:78:e8:89:a3:50:c2:48:12:fc:
                    73:5b:37:ca:6e:a4:0b:16:36:24:5b:c7:f4:0a:da:
                    8e:92:b4:4d:b3:7c:f4:c5:d6:b2:5d:88:5c:83:ee:
                    4f:e6:5b:22:a0:d8:bb:b3:0a:c2:72:32:a1:81:56:
                    cb:c8:6c:47:16:cd:8f:a7:88:f4:94:c1:dd:9f:d9:
                    5d:a4:97:0d:a7:fc:3e:d2:a3:71:25:11:d2:89:18:
                    ad:31:f9:a0:fd:31:e6:08:07:3b:a4:44:f7:a7:d0:
                    8e:e5:d2:23:82:fa:13:48:fd:7f:3d:28:84:c0:c3:
                    f0:7b:da:55:10:2d:8e:12:10:7b:91:6a:02:70:24:
                    76:f5:44:9a:d6:12:5d:0c:c4:18:03:51:40:6e:a9:
                    a8:dc:1b:42:cf:b3:7a:bd:14:02:ed:33:d1:3d:88:
                    e7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A2:3F:0B:BC:C5:6F:6A:69:83:25:1F:D7:07:E7:2B:97:6A:A6:DE
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/391BCF92A08311F1A3BF9DDCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:fb:f4:91:78:87:d7:d5:5b:01:84:5d:85:bc:f8:df:ef:84:
         88:9c:b6:32:1d:59:91:e7:16:ad:39:06:42:d4:71:0c:cb:df:
         ba:51:4e:dc:5e:67:db:c9:58:35:57:f6:7f:a7:52:8d:65:69:
         45:d7:fc:2b:4b:65:d5:c0:5c:23:9b:2e:2b:d8:1f:76:6d:51:
         4c:69:e8:f0:83:74:d3:79:39:8e:2a:13:f9:fd:f4:03:da:2e:
         f3:b7:f5:a7:ed:fa:81:5c:b3:4a:69:86:c1:c2:b4:ab:c5:01:
         cd:34:30:03:8b:6b:78:b3:ad:20:fe:88:2e:03:b3:16:ea:2d:
         55:85:70:20:f8:cb:a4:31:29:53:fc:64:6a:aa:bd:b9:d0:fa:
         24:89:0a:52:37:2b:45:27:94:bb:e6:2e:29:19:49:cc:6b:93:
         ac:f2:f5:a2:79:63:fa:3e:36:61:7e:61:c3:1e:71:ea:cf:53:
         7b:4f:7f:1b:44:f0:94:66:0a:66:b9:8a:4a:52:e5:29:aa:96:
         c6:7d:0f:b6:ef:c9:0c:51:f7:88:32:47:95:5f:37:b4:91:4e:
         41:14:68:26:6f:12:ab:d2:f7:74:39:f2:97:37:d8:e2:96:37:
         26:ed:25:73:dc:4c:39:bb:00:9f:88:82:12:06:a5:07:bf:a9:
         27:42:3c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----