Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/95AAF2C4A31211F1A286DDDACE1D38B0.roa
File:                     95AAF2C4A31211F1A286DDDACE1D38B0.roa (raw, json)
Hash identifier:          /nrzs3Vxf3Tp7fJBbqRvzdgjJC+yLMWlMjpD9pqpzZw=
Subject key identifier:   AE:45:81:FE:2F:6E:B9:41:CC:D7:8D:F3:7D:B4:9A:2A:A1:A8:D7:A1
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D72
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/95AAF2C4A31211F1A286DDDACE1D38B0.roa
Signing time:             Fri 28 Aug 2026 18:59:24 +0000
ROA not before:           Fri 28 Aug 2026 18:59:20 +0000
ROA not after:            Wed 31 Dec 2036 18:59:20 +0000
asID:                     219394
IP address blocks:        165.49.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3442 (0xd72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Aug 28 18:59:20 2026 GMT
            Not After : Dec 31 18:59:20 2036 GMT
        Subject: CN=6a91da8c-a85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:06:a7:99:9c:a6:0b:6f:c2:5c:86:7c:93:41:
                    4d:de:2e:3e:6d:4b:a6:4d:f6:77:d2:cf:67:d4:83:
                    d1:27:45:81:e3:70:97:d1:fe:fd:f7:1e:d1:e4:42:
                    36:76:b0:47:62:94:62:f9:29:26:26:ec:a9:75:34:
                    44:65:e4:82:8e:50:a8:0f:d4:77:59:e5:9a:80:8c:
                    55:82:e0:c3:58:74:82:86:be:32:36:fb:b7:34:cf:
                    75:84:f9:57:47:b3:4a:c5:b1:15:b4:7e:6a:c7:e0:
                    5e:10:1e:14:38:62:d3:aa:76:43:06:46:af:54:06:
                    86:5c:86:7d:cb:6a:0c:41:df:16:0c:24:0e:6e:82:
                    76:13:b8:35:64:3b:53:35:d8:4c:a3:30:76:3e:c1:
                    a4:5b:99:96:87:2a:bd:eb:0d:f3:05:4d:09:d3:79:
                    4e:94:65:92:2d:5c:6a:d5:6f:54:0f:08:58:6d:55:
                    44:36:d0:81:82:b8:76:07:82:f4:db:2e:ba:7e:b6:
                    e2:3e:e6:d5:38:17:b7:47:17:18:c5:41:19:e0:03:
                    e1:51:5d:6e:82:4c:88:00:9b:5f:55:75:05:3d:4d:
                    d3:e6:68:4d:52:fe:0a:fe:67:24:5f:b4:39:fb:58:
                    fd:9c:e3:e6:9c:b0:6c:4c:7c:5a:df:74:0b:ad:00:
                    87:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:45:81:FE:2F:6E:B9:41:CC:D7:8D:F3:7D:B4:9A:2A:A1:A8:D7:A1
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/95AAF2C4A31211F1A286DDDACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:44:2f:f6:23:c9:70:4c:2f:c8:4f:10:e1:e8:00:0b:ec:40:
         03:89:7b:99:a8:10:11:6d:c6:d9:65:6a:c6:19:30:c3:5e:61:
         3b:1d:4d:19:63:18:d3:6f:a2:d6:f0:55:87:3b:50:1b:c2:41:
         9c:5a:68:73:c5:87:b9:4a:6c:a7:ac:d2:fa:b3:d5:0d:e7:1b:
         90:22:c0:06:2b:49:b0:4e:09:33:a4:01:6b:04:61:d2:82:46:
         29:cf:f6:49:e2:24:a0:4f:40:66:f4:77:af:62:9d:6d:75:49:
         e7:26:54:32:81:27:22:66:ae:19:6b:41:1c:5b:80:4f:ff:c1:
         5d:62:c3:4e:a7:48:1c:03:07:13:3f:34:98:7c:0e:f4:58:2b:
         35:29:f0:26:4b:40:51:96:51:35:65:68:ec:2e:37:c2:79:08:
         45:5f:6a:bb:0f:18:47:24:88:f6:82:ba:60:26:d2:df:e2:e8:
         b9:00:6d:85:cb:fa:7e:df:5e:10:83:22:01:6e:35:cf:74:11:
         e8:13:85:bc:cc:5e:0c:af:ac:f5:23:dc:4a:2e:3d:85:b2:c8:
         03:d7:1d:b6:3c:aa:b0:49:9f:36:c0:d6:74:51:df:3c:b5:22:
         5f:d4:77:da:31:0e:0b:d3:ad:18:b8:fb:a3:e9:cd:e3:52:73:
         ad:0f:ec:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----