Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FEAC183EA31211F184B0F6DECE1D38B0.roa
File:                     FEAC183EA31211F184B0F6DECE1D38B0.roa (raw, json)
Hash identifier:          O3Qht0yDiSWx+pPCJw/C8IoDaQ4jf4u0HIGGKj6iC1o=
Subject key identifier:   58:14:01:4E:02:20:CC:BF:B5:D5:5C:D9:0C:E9:EF:DA:D7:2D:22:B7
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D7C
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FEAC183EA31211F184B0F6DECE1D38B0.roa
Signing time:             Fri 28 Aug 2026 19:02:21 +0000
ROA not before:           Fri 28 Aug 2026 19:02:16 +0000
ROA not after:            Wed 31 Dec 2036 19:02:16 +0000
asID:                     219394
IP address blocks:        165.49.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3452 (0xd7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Aug 28 19:02:16 2026 GMT
            Not After : Dec 31 19:02:16 2036 GMT
        Subject: CN=6a91db3c-7658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:62:12:59:d7:6c:07:42:4c:be:c2:85:83:ee:
                    b8:01:37:3e:80:c9:d5:0f:30:95:34:37:e9:ac:ec:
                    72:2e:d9:37:06:80:5a:66:f5:8d:6f:64:49:10:80:
                    f7:00:bf:f0:fd:f6:07:fc:2e:64:e8:29:ab:fd:ae:
                    eb:e8:a1:f0:b9:43:17:5a:a7:0a:ea:72:07:9b:b9:
                    76:3a:41:a1:a2:82:1d:4a:6e:c0:f7:5e:ef:07:e9:
                    72:72:82:b6:25:59:0f:86:fc:23:25:89:6d:0e:83:
                    2c:bf:a0:a2:22:61:0e:5a:9c:ff:56:af:52:72:2e:
                    10:52:e3:6b:7f:b1:91:36:00:e3:82:7f:db:a4:7a:
                    0f:70:50:ed:c1:54:2e:97:2d:a8:68:95:2e:cc:b8:
                    44:2a:5f:a8:ba:f1:95:a7:70:56:77:a0:ed:12:61:
                    6b:31:7c:75:0f:7b:d2:da:62:29:2d:21:a3:a7:2d:
                    a9:3a:ee:de:4d:1c:45:1a:4f:c5:f4:81:9a:48:90:
                    d4:15:22:e2:6a:63:9c:22:cc:7e:78:19:03:70:b7:
                    f1:19:78:d7:32:d5:5d:43:0d:02:15:aa:09:ef:03:
                    e7:1a:72:08:81:14:4b:17:a3:94:86:fd:6f:5c:d5:
                    60:1c:03:5d:38:84:8d:e9:72:f7:0b:20:fc:b5:2b:
                    41:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:14:01:4E:02:20:CC:BF:B5:D5:5C:D9:0C:E9:EF:DA:D7:2D:22:B7
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FEAC183EA31211F184B0F6DECE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:f7:7e:6a:93:63:76:83:57:2b:61:07:56:fe:99:df:89:fb:
         49:bb:ac:05:7b:02:27:11:63:0b:9c:d5:ee:5f:5c:4c:dd:c2:
         ec:41:49:b6:a3:44:b2:cf:94:dc:a4:f7:f3:e5:ea:5e:54:06:
         8a:05:ad:b0:df:e5:fb:46:22:e8:83:e4:ad:f9:1c:88:a2:b4:
         09:85:2b:5e:27:db:1e:26:52:84:28:33:5d:b6:23:16:6c:e4:
         e2:26:a1:e4:39:1e:6a:17:4b:83:b1:51:8f:74:d7:b2:c4:a3:
         88:67:8d:d6:53:ac:43:a4:90:be:cc:4d:43:41:41:60:91:f1:
         9d:f2:d7:a0:ce:43:2d:3b:50:3b:89:e1:a8:6f:48:c8:4b:e8:
         5d:62:79:46:7f:76:c5:ce:2a:d6:4e:4e:2e:31:54:49:44:1f:
         f9:dd:c9:83:f1:e4:d2:d5:a3:e1:b3:16:3a:75:15:7d:75:f0:
         b5:9e:08:8f:b2:8d:3e:ca:cf:76:9c:64:e1:79:bb:d9:80:9d:
         45:cb:25:8d:b5:3e:92:a6:9c:16:6d:44:85:bd:e9:09:d7:0c:
         03:b3:bd:ff:97:a0:0f:10:1d:4c:36:f7:c7:3a:db:7c:5d:a9:
         1f:4c:d4:da:54:74:f7:3d:54:06:08:70:07:39:7f:01:54:71:
         b1:77:d1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----