Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/755C7A2EA08311F18454C1DCCE1D38B0.roa
File:                     755C7A2EA08311F18454C1DCCE1D38B0.roa (raw, json)
Hash identifier:          Lua1DLD7rxzS0XEEyF3L+5tBRXK+AxrZ+kw7Xk8ADEY=
Subject key identifier:   A1:C4:9A:18:9E:9C:98:A5:1C:94:1C:70:F5:7D:85:C0:7E:FC:F6:02
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D5B
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/755C7A2EA08311F18454C1DCCE1D38B0.roa
Signing time:             Tue 25 Aug 2026 12:49:50 +0000
ROA not before:           Tue 25 Aug 2026 12:49:46 +0000
ROA not after:            Wed 31 Dec 2036 12:49:46 +0000
asID:                     152179
IP address blocks:        165.49.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3419 (0xd5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Aug 25 12:49:46 2026 GMT
            Not After : Dec 31 12:49:46 2036 GMT
        Subject: CN=6a8d8f6e-100b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0c:ba:4d:06:10:f5:97:92:2f:bc:19:33:8c:
                    00:34:88:c7:db:78:ac:eb:11:d0:73:07:08:fd:5a:
                    e5:2b:50:24:77:4d:fb:44:8d:5c:2b:d9:51:6f:ff:
                    38:35:b1:ba:8f:63:2c:31:3b:93:ba:52:19:97:6b:
                    70:24:2f:71:8f:89:05:9e:ac:1c:58:be:74:8b:19:
                    06:cf:9f:c6:5a:29:fe:23:f0:36:bc:d2:d5:85:f8:
                    74:53:05:47:ff:f8:46:79:c2:08:c8:cc:2e:19:96:
                    52:b0:8f:9f:03:ca:d0:f0:51:fb:dc:0e:95:38:60:
                    60:68:b6:17:9a:13:ba:57:db:3d:46:ee:26:19:b6:
                    b7:33:94:8d:ed:c0:45:88:d3:ad:5c:3f:5c:c1:42:
                    d8:f3:7b:c3:94:bf:b9:3d:1f:11:1f:30:36:cb:51:
                    00:83:23:e2:e3:0b:55:e5:76:7a:7a:d0:77:78:68:
                    c6:30:d8:06:6b:68:e2:63:31:56:3d:f3:fa:27:d2:
                    d1:cf:07:59:f3:66:1e:93:1e:45:28:3e:1a:bd:97:
                    90:6b:4e:45:28:a4:5a:50:3b:9b:f0:7c:67:0b:00:
                    28:01:89:69:cd:c5:3b:a5:b5:e9:c0:d3:0e:9e:bc:
                    4f:ec:ab:7a:cb:e2:a6:29:ea:82:a1:7b:2c:c6:8e:
                    ab:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:C4:9A:18:9E:9C:98:A5:1C:94:1C:70:F5:7D:85:C0:7E:FC:F6:02
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/755C7A2EA08311F18454C1DCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:56:db:22:a7:5e:74:23:b2:56:cb:37:6b:d8:b8:b6:9f:fb:
         33:a0:26:32:33:ec:00:f2:f4:42:a5:55:a4:5c:69:0b:98:89:
         c9:12:78:35:29:33:3b:32:1d:31:82:5a:8f:c5:23:e8:4c:fa:
         e5:3b:f0:b6:de:9c:de:8e:0e:92:b3:6c:0d:01:f1:3c:e1:d4:
         39:a3:eb:19:a0:3d:50:b1:62:be:55:93:69:75:5a:14:6e:1c:
         c3:c6:39:65:da:69:71:bd:98:28:87:a5:2d:be:a2:31:9e:fa:
         c6:3d:d5:9f:cb:9c:dc:48:ab:7d:42:88:ec:73:93:3b:f7:6a:
         bd:d2:0f:75:73:ad:d9:5c:4e:3e:9f:46:73:78:82:83:68:7a:
         bc:5f:37:17:f2:4d:92:53:ac:85:6d:bb:df:70:49:e7:7c:5b:
         05:99:a8:7e:17:d1:df:df:a9:2d:0d:28:64:f4:a5:a1:89:28:
         e9:a9:36:29:61:21:71:45:45:a4:fc:d9:8a:e4:b7:aa:cd:8d:
         7f:11:47:02:68:2a:7f:35:ee:5f:ac:aa:79:68:8d:9c:f5:8f:
         44:0a:4b:18:ff:04:53:23:59:96:ac:81:ab:aa:da:36:1b:bb:
         ba:a4:04:73:86:f3:a5:6b:c3:9a:ac:fc:c9:b3:f7:3f:e6:2e:
         8d:da:3b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----