Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C0001FAEA31211F1A0A547DBCE1D38B0.roa
File:                     C0001FAEA31211F1A0A547DBCE1D38B0.roa (raw, json)
Hash identifier:          RfqlrjKJYDpB/GoEx/ieeELWIDiuZ+oUWNErtaWTMOM=
Subject key identifier:   6E:78:A3:11:AB:5D:3C:C3:87:80:76:7F:75:C2:60:99:AD:28:80:D0
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D76
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C0001FAEA31211F1A0A547DBCE1D38B0.roa
Signing time:             Fri 28 Aug 2026 19:00:35 +0000
ROA not before:           Fri 28 Aug 2026 19:00:32 +0000
ROA not after:            Wed 31 Dec 2036 19:00:32 +0000
asID:                     219393
IP address blocks:        165.49.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3446 (0xd76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Aug 28 19:00:32 2026 GMT
            Not After : Dec 31 19:00:32 2036 GMT
        Subject: CN=6a91dad3-28fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:23:a0:60:51:20:6e:7a:c1:eb:d4:ba:c0:
                    a9:75:47:36:a7:f6:a8:9e:6a:b4:85:65:15:30:7b:
                    78:71:74:41:a1:33:f2:0a:e3:c4:cf:1c:a7:fd:45:
                    35:e7:e3:41:37:61:73:bd:db:c3:dc:04:f8:f4:36:
                    30:6f:d1:c4:8f:b6:60:40:cc:e4:89:85:68:08:12:
                    45:62:22:1d:7a:24:2d:47:5b:35:f6:2a:8c:e0:d0:
                    86:28:b8:94:bf:5e:1b:88:1a:e9:c6:13:33:a9:10:
                    10:ad:ae:53:a2:92:fb:71:ae:ff:55:78:e2:2a:22:
                    5b:fb:30:fe:8c:65:01:fe:2c:b9:4f:79:d7:78:2c:
                    3e:a2:5e:b6:30:c9:1f:a9:24:e0:0a:88:bc:09:85:
                    c5:95:b4:15:bb:2d:e1:de:b3:b7:00:99:07:ca:ef:
                    a0:a5:e8:ce:4f:1f:b3:c4:73:12:ac:7a:6d:d8:88:
                    70:e4:a8:93:b4:39:f1:e4:18:2a:08:eb:0c:b5:56:
                    05:22:ab:cd:f7:d8:4d:e0:33:72:a8:30:d5:86:2c:
                    f6:8a:6f:41:e7:44:89:8e:51:9b:6e:e1:6e:81:d9:
                    05:23:55:4d:30:83:00:a8:6d:51:34:ae:86:98:96:
                    d5:b8:29:e3:55:a3:af:f6:d6:e5:23:49:17:ee:79:
                    9f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:78:A3:11:AB:5D:3C:C3:87:80:76:7F:75:C2:60:99:AD:28:80:D0
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/C0001FAEA31211F1A0A547DBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:ce:43:d2:f1:b9:66:c6:7d:fa:67:8b:48:e1:d7:86:f0:54:
         2c:03:59:80:ae:b6:78:a4:4c:9c:46:8b:4f:47:37:c4:a1:21:
         fd:15:e5:77:25:8f:d1:8d:85:ef:2b:da:d4:4c:c7:d1:41:e9:
         92:d3:a5:fc:82:95:4b:17:4b:83:66:11:67:47:b5:4c:5a:8f:
         da:25:5a:78:97:40:ee:c2:05:79:80:02:3a:00:a0:f4:9a:04:
         0a:08:6b:52:ac:b7:ef:13:d9:e6:30:a4:e1:63:4a:0f:dc:65:
         28:4d:12:4f:b6:df:ca:c0:ba:ac:a1:50:33:00:82:c2:bd:7b:
         74:9c:fa:e5:ed:57:fa:c5:fa:1a:ec:a2:3b:c5:e6:e2:90:17:
         97:22:a9:4b:7a:f1:ef:9e:c2:84:4c:53:eb:72:37:8b:e0:48:
         f3:e4:f1:59:82:be:25:a2:dc:5a:35:3f:de:ab:48:ce:2d:f5:
         f2:de:c2:7c:9f:aa:bd:1f:c7:69:4d:5e:70:41:96:fe:c8:29:
         e9:f0:4e:15:f2:f1:e4:1e:80:a5:79:82:47:1c:8e:54:f0:a4:
         ac:f3:69:89:38:61:99:9a:2f:1b:24:dd:4b:39:07:8f:7f:34:
         4d:e5:00:1c:9d:ee:86:3c:db:c5:37:36:b6:a8:ab:2f:65:a0:
         bc:52:bf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----