Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BC7FC566B1C011F1A7CE7DC4CE1D38B0.roa
File:                     BC7FC566B1C011F1A7CE7DC4CE1D38B0.roa (raw, json)
Hash identifier:          mFfKwja8gCLtboUaPwqZjNjwM8xQ20osT8pA0t5RonM=
Subject key identifier:   57:CB:22:0A:B6:24:0F:77:9A:4A:28:67:5B:3B:EE:A7:CF:A5:FE:29
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0DBE
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BC7FC566B1C011F1A7CE7DC4CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 11:21:18 +0000
ROA not before:           Wed 16 Sep 2026 11:21:14 +0000
ROA not after:            Wed 31 Dec 2036 11:21:14 +0000
asID:                     218797
IP address blocks:        165.49.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3518 (0xdbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Sep 16 11:21:14 2026 GMT
            Not After : Dec 31 11:21:14 2036 GMT
        Subject: CN=6aaa7bae-dba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:56:b7:6f:fb:e1:7b:4e:96:dc:63:33:86:65:
                    e6:05:2d:02:ca:36:f6:9c:6c:c8:a7:ee:40:ab:a9:
                    8b:da:ae:9c:33:08:ca:47:00:00:ea:c5:45:e4:73:
                    9e:b5:3f:20:0a:95:a4:75:19:e1:5f:e9:fc:63:e9:
                    89:7f:bb:45:95:71:af:09:5e:16:48:f9:2c:77:2b:
                    e5:5a:43:5f:87:ed:35:50:6a:5d:48:5f:34:d1:ac:
                    01:d0:7a:e2:76:35:f1:37:0e:70:f8:53:96:9f:77:
                    48:aa:98:2d:a6:d2:3a:fd:23:3f:77:7e:75:53:70:
                    42:74:c7:d8:c3:d3:c6:2f:9d:29:3e:f7:d6:64:e6:
                    88:ad:3d:4a:c6:27:14:bd:77:4e:95:8e:1a:dc:1d:
                    8e:a7:41:68:8b:2b:04:4e:d2:69:a9:e0:37:c7:77:
                    cf:de:39:c1:eb:21:f3:43:66:0f:9a:45:a8:bb:5c:
                    e4:3e:98:19:10:fc:cb:76:25:fc:94:0c:c8:f6:78:
                    08:a3:8b:48:a4:bc:85:07:96:cf:4f:60:df:50:a1:
                    4d:38:69:13:7d:5c:ab:c3:b0:68:c5:04:6c:e3:c2:
                    9b:58:81:c0:ad:a2:41:4d:ed:7c:3a:d1:23:80:d0:
                    b6:8d:8a:67:5d:10:cb:06:b4:a2:8c:07:86:e1:74:
                    bd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:CB:22:0A:B6:24:0F:77:9A:4A:28:67:5B:3B:EE:A7:CF:A5:FE:29
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BC7FC566B1C011F1A7CE7DC4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:38:d5:c7:e2:1b:f0:75:8e:d1:88:a2:9f:71:26:55:f3:0a:
         9a:ec:26:57:34:23:6b:0c:89:62:ac:c5:8f:d0:6d:36:47:c4:
         5f:e0:7e:40:80:3f:b6:d3:a2:96:4d:d7:37:38:a3:0d:59:6e:
         b5:52:d7:7f:84:3c:8e:35:d2:01:9f:96:d4:12:4f:e7:49:15:
         b7:e2:f7:9d:e1:13:bb:00:34:ec:01:41:2e:42:17:c5:a2:c9:
         e1:de:68:fc:e0:4a:26:a8:e6:f5:b4:60:fc:5d:a8:e4:d0:ae:
         96:22:88:56:a6:8d:ef:63:8c:ed:cc:a6:5b:d5:34:f6:d2:68:
         7b:6c:58:64:53:f3:fa:69:13:4a:d8:58:c5:ca:6c:ee:3c:3d:
         3c:4d:81:28:06:68:8f:14:a5:8a:12:7d:73:bb:6f:60:7d:28:
         84:06:d4:d8:55:12:40:96:f2:f4:7d:7e:ad:46:20:95:7d:86:
         b3:4e:5a:07:10:56:c2:df:e7:fa:8f:ba:2e:0b:a0:68:3c:22:
         b8:66:10:97:0e:be:30:5f:07:31:ee:58:40:e7:69:12:5f:f3:
         13:41:fe:ff:34:53:85:43:b1:9d:83:f2:96:b7:21:8f:47:cf:
         2a:ea:a2:b5:25:40:f3:50:5c:aa:82:26:19:5a:f2:57:32:8a:
         32:df:74:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----