Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A7C72430A5F811F19AA755EDCE1D38B0.roa
File:                     A7C72430A5F811F19AA755EDCE1D38B0.roa (raw, json)
Hash identifier:          KkiTjkBw5t0SCQELQsdlGpdebaj3RsvVzjssHUHLJvw=
Subject key identifier:   E6:B2:DE:BA:9F:21:F9:60:6C:05:DA:3F:80:E3:E8:5E:6C:14:A6:45
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D90
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A7C72430A5F811F19AA755EDCE1D38B0.roa
Signing time:             Tue 01 Sep 2026 11:31:21 +0000
ROA not before:           Tue 01 Sep 2026 11:31:17 +0000
ROA not after:            Wed 31 Dec 2036 11:31:17 +0000
asID:                     152179
IP address blocks:        165.49.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3472 (0xd90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Sep  1 11:31:17 2026 GMT
            Not After : Dec 31 11:31:17 2036 GMT
        Subject: CN=6a96b789-b480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a3:ca:e1:d8:e5:d3:aa:c6:70:6e:f5:b3:59:
                    2f:fe:72:49:a5:6d:40:c5:d4:8f:fb:eb:31:8a:64:
                    a5:0e:d3:8c:1f:f4:3d:6c:97:f3:a2:c5:01:78:2c:
                    45:30:e3:c6:5d:97:39:96:f6:72:0f:9b:59:c6:0e:
                    a1:03:49:66:cf:89:43:ee:1e:bc:b8:0b:2c:47:6a:
                    2b:25:05:37:c5:2b:79:8f:9b:b7:4f:dc:67:6e:20:
                    f1:57:8a:31:bb:70:51:92:c3:c7:33:c3:14:e4:18:
                    9a:e3:9c:e9:9a:99:c8:5e:fe:fa:19:2a:51:cb:4d:
                    ad:fc:f8:e8:41:ef:f0:3c:38:09:f7:aa:82:ef:8d:
                    20:a6:30:34:51:f5:3f:35:2a:b3:9b:5d:4a:4d:0e:
                    8a:72:ba:46:88:d3:61:1d:bd:e9:5c:f8:e6:af:46:
                    f7:48:c0:22:ac:e7:ea:7e:e3:30:9c:cc:20:b2:d6:
                    5a:a5:e0:81:23:26:c8:a7:c4:cf:00:6a:ef:21:7e:
                    dc:e2:7f:c4:d3:77:5b:8c:8c:02:34:b1:0a:ba:c3:
                    15:14:a0:78:76:e5:0a:08:22:9d:85:04:f7:71:25:
                    30:9e:ad:30:00:90:bb:bb:39:ee:ae:ed:ea:ab:2b:
                    05:63:64:b3:23:1e:dd:ac:1a:13:8b:27:55:82:b8:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B2:DE:BA:9F:21:F9:60:6C:05:DA:3F:80:E3:E8:5E:6C:14:A6:45
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A7C72430A5F811F19AA755EDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:62:3f:1b:9a:d0:34:bd:8d:52:e8:12:38:18:66:17:60:76:
         ed:99:68:42:86:ae:f6:b3:14:b9:2d:e2:97:7b:a1:22:e4:d0:
         7d:ca:39:89:06:40:57:a7:ee:1a:cd:b7:b1:3d:55:e1:65:c2:
         ff:b1:06:8c:97:25:c2:40:48:92:39:69:23:bb:cb:28:42:e7:
         37:8a:cc:9e:44:e3:00:cb:fb:42:e8:cf:74:0c:0f:20:ee:1d:
         f2:95:87:be:dd:ac:ef:d2:cf:be:5b:20:bf:71:94:3b:d9:79:
         59:18:ac:f7:94:28:75:41:f8:77:3a:5d:d0:d0:fd:fc:15:59:
         63:d9:0e:e9:06:a9:56:76:78:12:d7:aa:a3:80:04:95:32:fe:
         87:49:51:d6:3e:24:af:9d:76:8f:6c:63:5c:06:f3:6c:13:33:
         38:81:41:57:a1:91:2b:a5:9e:d2:69:fb:6c:77:c8:fc:c3:07:
         cd:11:b9:07:36:ba:6d:3c:da:c6:65:58:43:c4:a2:fd:97:10:
         ae:02:9c:98:09:51:3c:22:1b:79:ca:b3:f7:71:7d:72:7c:7e:
         13:4c:8c:26:ea:95:d4:cb:f1:6a:f9:11:99:07:6d:73:5c:92:
         e2:a5:28:6a:83:91:d7:a8:bb:4c:7f:d2:85:3c:f1:43:6b:13:
         8d:66:a1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----