Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AB25F7C0A31211F191ABE9DACE1D38B0.roa
File:                     AB25F7C0A31211F191ABE9DACE1D38B0.roa (raw, json)
Hash identifier:          gLqwOzCqjgns6f0Fv8FJ9TKZN0MtTGewpoItH1amXBk=
Subject key identifier:   83:9D:1D:0E:CF:FC:D6:46:65:27:31:1E:59:36:A6:11:2E:9E:03:E9
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D74
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AB25F7C0A31211F191ABE9DACE1D38B0.roa
Signing time:             Fri 28 Aug 2026 19:00:00 +0000
ROA not before:           Fri 28 Aug 2026 18:59:56 +0000
ROA not after:            Wed 31 Dec 2036 18:59:56 +0000
asID:                     399275
IP address blocks:        165.49.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3444 (0xd74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Aug 28 18:59:56 2026 GMT
            Not After : Dec 31 18:59:56 2036 GMT
        Subject: CN=6a91dab0-1dd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:00:3d:be:0c:de:71:b5:f6:8d:20:78:d0:40:
                    8a:56:f0:4e:d2:5e:a0:49:84:f3:93:44:f8:72:49:
                    2e:a8:08:5a:f1:35:63:61:23:f5:c6:57:24:70:4c:
                    f2:d0:3c:8a:e1:fb:06:50:22:7e:34:ed:35:22:f8:
                    cf:f8:4d:b4:88:69:88:1f:73:e9:69:91:c6:e9:10:
                    94:33:81:94:7a:dd:c7:52:2f:8b:77:72:5d:b5:8f:
                    5a:34:b5:20:c6:74:89:7d:00:1b:85:8e:1d:d0:fb:
                    07:50:c2:83:db:ba:4b:ab:aa:85:90:e0:14:bf:61:
                    91:ce:c7:b0:46:34:80:c6:57:71:bd:46:7c:17:88:
                    ad:ed:dc:04:d0:53:59:3d:f4:b1:f2:99:dc:a4:2d:
                    15:d5:85:20:f0:c3:38:e7:e2:30:9e:c8:8c:4a:7a:
                    61:f0:1a:b0:bb:0a:d4:e9:d3:cb:1a:9b:03:d1:a8:
                    eb:4b:37:fa:4d:81:e4:cf:2c:59:a3:cc:3f:73:1a:
                    ab:3e:20:9e:76:d8:45:f4:dc:9c:5a:18:3f:42:55:
                    65:e9:68:84:36:ef:00:77:fe:9f:e3:f4:2f:bc:b6:
                    cf:ae:2e:4a:c8:a9:50:0f:b7:aa:cb:7e:ff:54:25:
                    89:1c:d7:c2:d9:a6:b6:06:7f:75:2c:db:66:a1:e4:
                    60:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:9D:1D:0E:CF:FC:D6:46:65:27:31:1E:59:36:A6:11:2E:9E:03:E9
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/AB25F7C0A31211F191ABE9DACE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:b4:e9:c6:e7:a2:9d:97:48:59:27:9e:06:09:e0:16:d3:06:
         98:60:42:62:a4:87:fa:fc:75:fb:ae:f1:53:df:dc:41:73:ad:
         fb:2b:a7:f1:62:90:9e:8a:ed:49:56:43:ca:fc:55:07:67:cf:
         c0:48:e1:c5:59:b5:0d:17:bb:9c:13:56:92:40:8d:74:08:df:
         ba:ee:64:2e:ff:be:84:ba:f3:ea:be:10:c8:54:9a:f2:7f:55:
         4e:38:85:41:6c:35:8b:98:a1:33:47:76:03:4a:92:74:2d:5d:
         09:04:e6:78:25:e7:e8:91:42:8b:5e:84:ed:b0:da:24:99:3d:
         c7:31:05:8b:96:d5:59:bc:d0:4f:6e:88:fe:b3:bc:0a:40:ec:
         0f:2f:2a:3f:4e:ea:48:c4:78:f0:48:25:c1:2c:66:71:8f:b7:
         8c:26:1c:4e:8f:f2:fc:29:9c:a5:8e:87:09:bf:1c:02:52:03:
         51:87:32:78:68:44:f1:8d:c4:d3:a6:42:36:9f:12:50:aa:2e:
         38:5b:64:2a:f4:fb:8b:05:c5:56:76:ce:4f:c6:35:69:12:d1:
         95:27:40:98:04:6e:62:99:b3:60:db:e4:a1:f5:cd:4a:ef:f6:
         13:10:29:f1:1d:35:d9:f8:47:bb:56:76:9d:fd:1d:1a:15:eb:
         e4:c2:10:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----