Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/77E4BE9CCC8811F194E4B8FACE1D38B0.roa
File:                     77E4BE9CCC8811F194E4B8FACE1D38B0.roa (raw, json)
Hash identifier:          ee1kPGvYDDLApnJv3c3VrESi1j1aSpJE65obUWxhz6U=
Subject key identifier:   83:45:F9:5A:7F:C2:0C:90:62:42:D4:6E:D7:CB:B1:51:C1:23:BB:44
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0E40
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/77E4BE9CCC8811F194E4B8FACE1D38B0.roa
Signing time:             Tue 20 Oct 2026 13:16:33 +0000
ROA not before:           Tue 20 Oct 2026 13:16:28 +0000
ROA not after:            Wed 31 Dec 2036 13:16:28 +0000
asID:                     218911
IP address blocks:        165.49.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3648 (0xe40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Oct 20 13:16:28 2026 GMT
            Not After : Dec 31 13:16:28 2036 GMT
        Subject: CN=6ad769b1-4763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c3:03:bc:40:32:36:c7:f6:32:29:f3:7e:ca:
                    9d:08:e7:89:1a:20:ec:9a:17:9b:03:c6:c7:61:44:
                    4c:5d:65:b9:23:29:b0:cc:a4:3c:b3:fb:28:85:c5:
                    fc:8f:9a:e5:e0:09:c6:d0:ef:92:ec:ea:53:e9:2d:
                    18:88:10:32:7e:ac:86:4d:13:d8:82:10:e9:34:ba:
                    16:8a:76:28:70:2e:f4:83:41:e4:a6:7c:16:d4:2f:
                    15:76:67:68:1c:83:0a:49:ca:af:2a:e6:1f:8f:62:
                    e7:88:1a:f9:3e:17:e1:32:c7:62:62:3e:1a:93:7b:
                    2e:c7:ce:95:5a:3d:aa:b6:da:c1:62:f1:02:24:95:
                    cc:4d:b3:87:d7:d4:2a:ea:5a:a5:f5:52:6f:50:3a:
                    dd:e8:b9:42:a3:f6:1d:f9:97:83:33:8c:19:6e:72:
                    5a:4d:bc:5b:6f:ce:3a:64:38:42:44:d1:13:53:19:
                    5b:87:1c:e9:29:41:e8:d0:b8:ba:07:47:89:40:ac:
                    df:20:eb:93:3c:f4:dd:79:96:9d:3a:7b:63:86:35:
                    28:91:cf:0d:a5:8d:97:81:96:f4:17:61:08:ae:74:
                    2d:fb:69:9a:c9:e8:bf:22:b6:96:0d:58:44:e2:47:
                    69:5e:ef:92:56:9f:35:34:c2:2e:b3:20:fa:4b:de:
                    70:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:45:F9:5A:7F:C2:0C:90:62:42:D4:6E:D7:CB:B1:51:C1:23:BB:44
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/77E4BE9CCC8811F194E4B8FACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:32:48:6b:b8:f6:e5:89:56:fc:41:17:f7:c6:ab:2b:bc:bb:
         a6:5d:e6:07:03:db:af:0c:f6:9f:f7:a2:1e:1f:15:e4:89:24:
         1f:cc:62:30:aa:77:02:98:4e:cc:7c:fd:13:82:30:17:1b:1e:
         eb:a5:a0:ee:55:2d:79:74:37:23:6a:5d:f2:31:cd:57:c7:3f:
         57:52:37:6f:e7:b0:05:34:5e:5b:1a:5c:cf:82:28:0e:3e:0a:
         cd:dd:f5:6c:fb:a0:76:13:ec:1a:96:2f:bf:e8:76:a8:56:f0:
         c7:6a:bd:ed:d8:3c:9f:91:14:cc:1e:b5:0b:5b:a5:ce:1a:fc:
         e7:2e:b0:64:df:65:74:d7:b4:af:c1:37:b3:42:60:f3:a4:df:
         68:49:13:4f:c9:9c:53:30:95:04:ba:81:f8:79:39:3b:47:d2:
         c9:da:b0:bb:12:3e:ba:ab:49:f3:21:68:73:a4:79:be:29:b3:
         6d:b0:f5:4b:23:4c:13:da:68:39:ec:64:a5:e3:34:0b:88:17:
         c4:7b:f7:8e:a4:96:62:bf:2c:03:d7:5f:64:ff:c6:3a:99:d0:
         50:b8:db:ca:c3:5d:34:97:52:07:13:40:5b:13:cf:23:c2:6f:
         ef:74:26:cc:b3:ca:9e:e3:19:2e:5b:1a:da:05:c8:e8:f6:7e:
         1c:b9:f4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----