Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/53BC32A897D511F1B61EC603CF1D38B0.roa
File:                     53BC32A897D511F1B61EC603CF1D38B0.roa (raw, json)
Hash identifier:          ReHsEjgsBErYibBRGH6i9I8SuF5W6+NRDYIv85C+zV0=
Subject key identifier:   38:31:30:05:3F:0C:36:5A:71:64:13:3B:7A:6D:13:09:44:0D:C2:91
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D35
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/53BC32A897D511F1B61EC603CF1D38B0.roa
Signing time:             Fri 14 Aug 2026 11:43:12 +0000
ROA not before:           Fri 14 Aug 2026 11:43:08 +0000
ROA not after:            Wed 31 Dec 2036 11:43:08 +0000
asID:                     212238
IP address blocks:        165.49.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3381 (0xd35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Aug 14 11:43:08 2026 GMT
            Not After : Dec 31 11:43:08 2036 GMT
        Subject: CN=6a7eff50-2e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:63:3e:cb:2e:e9:c9:1b:1c:22:04:93:c1:
                    4a:8b:f7:35:7f:03:c9:14:84:d5:ff:4b:d2:fb:45:
                    8d:a8:9c:e4:de:41:9d:f0:fb:c8:af:a2:12:7e:88:
                    02:59:09:ba:35:9e:1c:0b:98:a3:4f:a6:d9:8b:fb:
                    6b:b1:f1:7e:23:5d:23:16:d4:22:3b:e8:ad:b8:91:
                    92:d8:9f:4c:c8:28:be:66:1b:d5:33:9e:86:76:b5:
                    26:7a:2a:38:c7:4e:ff:87:a8:4f:49:aa:b4:bd:97:
                    b4:ed:09:f7:46:03:8c:d2:f8:67:1d:85:77:d1:99:
                    59:e0:ff:9b:80:92:46:3e:51:31:52:67:cd:34:cb:
                    ee:08:58:0e:c1:5d:95:8b:cf:ce:7f:a7:79:6f:01:
                    36:d9:21:2a:46:c5:ae:ae:25:94:b1:1c:90:75:8e:
                    bc:1c:1f:7b:9a:b0:84:af:42:79:77:16:e9:44:bc:
                    12:e2:87:f3:27:a0:08:5e:d0:3e:44:5e:f3:be:ce:
                    6a:78:f9:89:82:c4:92:04:da:18:dd:8f:cd:d3:c9:
                    07:73:fd:5e:82:df:1a:d4:7b:5a:62:99:29:47:d2:
                    42:c5:dc:74:6d:09:c2:52:d8:4e:22:e5:9c:fc:15:
                    1e:69:ef:ac:ba:32:d5:fb:15:3c:8d:1d:ab:0e:2c:
                    0c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:31:30:05:3F:0C:36:5A:71:64:13:3B:7A:6D:13:09:44:0D:C2:91
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/53BC32A897D511F1B61EC603CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:0b:ff:94:71:36:4f:c4:ce:ca:f9:c9:58:6a:83:9e:1b:4a:
         66:9f:9f:0f:db:ae:51:64:95:6d:82:8d:f6:1c:51:6a:aa:56:
         75:af:2b:f8:5e:81:56:07:5d:bf:03:fa:73:f3:b6:48:a6:07:
         17:85:32:cf:3d:f7:6d:9a:cb:a1:e0:35:49:07:53:d1:26:eb:
         48:4d:3f:06:a2:38:97:83:6b:cf:5e:a8:3e:90:ba:d0:83:a4:
         1a:9b:fd:5e:20:cc:b5:70:8f:80:a8:14:7a:95:f4:06:1b:43:
         fe:c5:4c:d9:2d:02:b3:a5:9e:d6:40:37:8e:77:81:cc:40:13:
         43:72:8a:fe:58:48:4a:b2:7d:77:e6:92:cd:f0:6d:26:74:34:
         54:1c:7b:0e:2c:d5:e0:b1:90:c0:7d:71:02:f7:af:24:7a:2b:
         81:bb:f0:26:ea:a7:46:9c:6b:f9:fb:15:e7:00:55:97:7c:06:
         fe:a8:a4:bf:e9:4d:08:e1:8c:f7:2c:e4:a2:0f:ba:71:c3:f3:
         f2:ce:c5:9d:ee:68:57:fd:1b:f1:f2:c2:29:e1:e4:8a:d4:b9:
         c6:3d:11:35:cd:9f:bb:92:ec:94:13:a3:47:c3:52:c1:91:f6:
         4f:7a:45:ff:14:eb:1c:74:57:89:3f:06:4d:0c:61:c3:3d:f1:
         2a:1f:f6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----