Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CEEFA770B1C011F180FD49C6CE1D38B0.roa
File:                     CEEFA770B1C011F180FD49C6CE1D38B0.roa (raw, json)
Hash identifier:          35OXXLg/IqZSRx61cO1eJs0uGaDHXpuKEmMDmeTJHGE=
Subject key identifier:   95:CE:77:FB:A0:BA:86:91:D7:FC:E1:9D:7D:AC:8E:18:F0:C2:D5:22
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0DC0
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CEEFA770B1C011F180FD49C6CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 11:21:49 +0000
ROA not before:           Wed 16 Sep 2026 11:21:45 +0000
ROA not after:            Wed 31 Dec 2036 11:21:45 +0000
asID:                     219100
IP address blocks:        165.49.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3520 (0xdc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Sep 16 11:21:45 2026 GMT
            Not After : Dec 31 11:21:45 2036 GMT
        Subject: CN=6aaa7bcd-36bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:15:4d:cb:03:7c:6a:50:09:a1:94:a8:3f:89:
                    7f:6f:88:ad:7f:c6:8d:b4:76:b6:c6:fe:90:74:2b:
                    59:aa:a0:ce:3c:27:ea:68:6a:88:87:87:c8:cf:c5:
                    52:9b:91:bd:30:da:a0:8d:a3:90:0f:0c:44:50:7f:
                    68:74:db:cb:e5:56:51:62:45:fa:26:2d:a0:db:66:
                    df:29:d4:e1:e5:37:cd:e8:4d:76:c6:b3:5a:de:2a:
                    49:32:d4:c7:58:db:bb:0c:77:96:cb:d3:dd:55:7e:
                    03:4c:76:9a:ec:fb:b2:9c:ae:a6:d2:53:7c:a8:03:
                    bb:fe:fc:36:eb:87:34:3e:65:22:bc:8a:f4:b7:ec:
                    e6:72:ec:0b:f0:78:6e:90:47:a4:5b:a2:01:56:13:
                    9f:2c:8e:77:e0:a4:b7:de:d8:17:e8:11:f5:ed:38:
                    8c:13:f1:ca:87:10:c8:6a:e4:b3:e8:b9:29:34:23:
                    e5:c0:4c:77:07:f9:b0:19:ce:2c:cd:27:e1:b1:d5:
                    e5:fa:be:1b:2a:71:be:6a:36:3b:4b:82:c9:b9:3e:
                    2d:42:93:25:35:1c:87:b0:02:f4:93:b5:fc:bd:57:
                    20:66:af:85:e8:91:6d:8d:f7:a8:9a:ed:0b:1c:93:
                    34:42:e0:e3:9d:2c:5b:b3:dc:f4:37:34:75:a9:e6:
                    ea:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CE:77:FB:A0:BA:86:91:D7:FC:E1:9D:7D:AC:8E:18:F0:C2:D5:22
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/CEEFA770B1C011F180FD49C6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:83:ad:0d:7e:5e:4d:8e:f9:12:91:27:da:c6:5a:61:23:3f:
         9c:99:f8:e5:6f:c7:74:7c:f6:48:8f:44:15:ca:20:6e:f7:e0:
         cb:6e:5a:91:28:a6:72:69:e2:b5:8c:65:7b:b2:39:6e:55:8f:
         10:86:dc:d5:47:1a:77:0b:98:f2:8a:9a:f7:5b:2b:44:77:a8:
         ff:fd:d0:ee:e6:01:1e:f7:1a:e5:be:68:3b:4c:51:14:ee:59:
         b4:fd:db:43:d8:a3:81:71:2a:db:e6:8f:85:c1:dd:ad:39:00:
         d1:67:1e:d5:93:78:c0:f0:d6:f5:e6:eb:4d:d7:ac:b4:29:26:
         ea:c8:75:3d:46:51:d0:f2:bd:af:a7:96:d9:5a:28:ec:bc:eb:
         14:c8:f2:46:c9:8c:e8:14:7f:f2:b9:78:c7:28:f2:5c:74:e2:
         75:82:df:a7:d5:07:47:8b:94:cf:da:02:23:c7:82:6a:f9:a1:
         fa:3e:df:44:fb:87:0f:94:a4:84:07:54:e1:50:fd:72:bd:3e:
         94:74:71:4f:04:98:ec:73:f4:4f:b7:12:f5:8d:31:57:a3:69:
         08:90:f5:bf:68:63:1d:4c:2e:91:09:d5:58:09:b1:e5:7c:df:
         be:06:01:79:96:a3:87:70:4c:2e:55:22:2b:ab:be:ca:cc:51:
         6d:41:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----