Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7D721746A31211F1AB66D7DACE1D38B0.roa
File:                     7D721746A31211F1AB66D7DACE1D38B0.roa (raw, json)
Hash identifier:          ayOKUuMkAfjoLVIukClLE6xvXd//iCbK0cXrfdHnIV8=
Subject key identifier:   1C:B3:D5:55:E9:9A:10:CE:BE:83:82:BF:C7:F4:C6:2B:E6:49:C9:FB
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D70
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7D721746A31211F1AB66D7DACE1D38B0.roa
Signing time:             Fri 28 Aug 2026 18:58:44 +0000
ROA not before:           Fri 28 Aug 2026 18:58:40 +0000
ROA not after:            Wed 31 Dec 2036 18:58:40 +0000
asID:                     219393
IP address blocks:        165.49.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3440 (0xd70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Aug 28 18:58:40 2026 GMT
            Not After : Dec 31 18:58:40 2036 GMT
        Subject: CN=6a91da64-c89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:26:ec:23:a4:73:cb:2e:dd:2d:64:fa:ba:
                    02:60:53:62:b1:fe:73:90:cb:50:d9:8b:8e:d8:4b:
                    e4:74:41:20:56:a0:01:bc:98:ad:26:16:ae:6d:70:
                    25:ae:92:d4:b2:45:86:7c:00:ce:24:5a:ee:b3:ab:
                    3f:b9:c5:d6:20:eb:b2:fd:c1:f6:af:7e:50:74:44:
                    93:60:98:ba:8e:5e:58:42:80:bf:31:d0:80:91:e4:
                    f5:d9:0e:eb:c9:f4:df:14:8c:d9:26:53:79:5c:b2:
                    5c:fc:fd:9c:23:14:28:c8:3a:16:25:f3:be:4f:d3:
                    cd:01:9c:0f:63:8f:01:92:ea:a8:dc:a9:46:ec:ea:
                    82:f8:f9:0f:d1:12:83:fc:af:83:b1:7b:00:62:6e:
                    d1:ad:18:47:23:86:1d:61:f0:fc:08:9c:e9:80:73:
                    3e:ac:82:8a:16:bd:10:9e:48:b7:9d:f1:76:63:82:
                    83:db:ef:5e:7f:dc:3d:f0:e1:2c:53:b6:a0:03:b5:
                    3d:09:ba:49:91:46:87:8d:96:bf:85:c4:6b:df:5b:
                    13:bc:8a:9e:37:7f:de:44:53:4a:6c:45:c5:bf:15:
                    10:9a:7b:f4:a8:6e:b3:05:6f:82:79:2d:ec:c7:a8:
                    a1:7d:07:9e:33:5b:d9:a9:7a:50:4a:35:aa:3c:0e:
                    d9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B3:D5:55:E9:9A:10:CE:BE:83:82:BF:C7:F4:C6:2B:E6:49:C9:FB
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7D721746A31211F1AB66D7DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:dd:68:f7:32:9f:33:eb:83:57:f7:f4:07:dd:78:cf:eb:6f:
         d3:54:dd:c7:b1:d9:ce:43:d4:4e:86:67:ec:b0:c6:4b:d9:ba:
         1e:56:d4:d0:37:d0:5b:f4:8a:05:7e:9b:fb:c9:24:ed:b4:d8:
         97:26:7e:f4:5a:aa:1f:55:f6:db:12:7e:fc:e8:21:13:d4:3e:
         22:61:7c:6d:84:20:6a:22:de:89:a8:14:41:d0:ba:6c:33:58:
         8b:23:5d:9b:37:1d:ed:a3:b7:44:fd:23:74:da:3b:22:a6:d9:
         ea:5b:3a:ad:2e:e8:96:7d:af:ba:5f:8b:9a:90:2b:d9:c0:23:
         8f:be:b7:6b:80:77:38:aa:76:0a:fe:92:ce:cb:13:c4:a1:ba:
         50:b3:ab:28:6d:45:fc:d7:f8:75:02:db:89:8e:cd:aa:ee:00:
         de:c7:0c:89:ba:ae:b8:34:81:2c:cb:20:e2:3a:09:7c:50:b4:
         df:96:dc:5d:0e:ac:49:76:44:1e:9c:e9:fd:97:08:e9:15:90:
         c0:e1:11:90:a0:9b:f3:fb:86:21:9a:3f:40:fd:72:f3:63:b3:
         84:0c:d7:b8:cb:75:d8:3c:19:f5:bb:84:e1:6c:b9:cf:bc:32:
         9b:51:4c:27:aa:47:84:5c:d6:f4:d1:95:73:fb:3a:60:04:7d:
         1b:12:93:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----