Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/EA6F82D6C35911F1BACC0E08CF1D38B0.roa
File:                     EA6F82D6C35911F1BACC0E08CF1D38B0.roa (raw, json)
Hash identifier:          IN2BUCUDCSeRq8AbJOy9PWNdz8MXcsZxnbsNx4TL1vM=
Subject key identifier:   90:C7:68:E5:53:A9:D0:A7:45:DC:D9:F3:39:31:0A:FC:8F:A4:28:D5
Certificate issuer:       /CN=F36A6DD7AR/serialNumber=0A876CA1413541E767B504B33F3349F4283152B2
Certificate serial:       0A8C
Authority key identifier: 0A:87:6C:A1:41:35:41:E7:67:B5:04:B3:3F:33:49:F4:28:31:52:B2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/EA6F82D6C35911F1BACC0E08CF1D38B0.roa
Signing time:             Thu 08 Oct 2026 20:50:38 +0000
ROA not before:           Thu 08 Oct 2026 20:50:33 +0000
ROA not after:            Wed 08 Oct 2036 20:50:33 +0000
asID:                     327767
IP address blocks:        165.16.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.mft
                          rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 23 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2700 (0xa8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6DD7AR, serialNumber=0A876CA1413541E767B504B33F3349F4283152B2
        Validity
            Not Before: Oct  8 20:50:33 2026 GMT
            Not After : Oct  8 20:50:33 2036 GMT
        Subject: CN=6ac8021e-5968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:d4:c4:32:d1:7a:3a:87:2c:82:be:4e:f2:
                    a0:59:43:60:dc:ac:5a:2a:fb:93:97:1a:3d:73:da:
                    7b:a6:c2:64:1e:fd:43:8d:2a:8f:d2:79:ba:77:3d:
                    82:0f:0a:3a:68:a3:cb:82:ce:ea:bf:65:1e:59:d0:
                    f8:ca:2a:a1:c2:f5:a4:0d:75:fa:a9:f7:88:bb:c9:
                    5d:81:e9:0a:30:a4:58:bb:84:19:d1:40:dd:ae:1d:
                    eb:23:ed:9c:51:d4:90:e7:74:d9:20:78:9b:96:96:
                    79:ec:b4:70:d3:7e:fb:ff:3e:46:ef:eb:ce:66:2b:
                    5d:76:ee:59:41:91:70:89:3a:e1:a8:73:52:af:59:
                    82:78:a6:e9:f6:96:4d:a9:57:bf:fc:bd:66:23:4d:
                    6d:8c:5a:48:e7:37:d0:26:34:8d:4d:b4:e9:b8:a7:
                    11:1c:6c:fc:44:1d:0a:06:f7:f3:e1:1e:5e:e8:f1:
                    66:fc:6e:38:dd:ab:76:5b:3a:33:45:69:9c:d4:60:
                    e1:98:25:23:8d:31:cf:b2:bb:83:92:3c:96:d2:5c:
                    04:01:2d:21:4d:67:65:82:88:cc:83:2a:df:79:95:
                    62:6f:c2:9c:8b:36:16:e9:86:e2:bf:df:cf:59:16:
                    6b:11:e3:83:fa:7e:3b:08:bf:aa:c7:0f:1b:e5:8e:
                    53:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C7:68:E5:53:A9:D0:A7:45:DC:D9:F3:39:31:0A:FC:8F:A4:28:D5
            X509v3 Authority Key Identifier:
                keyid:0A:87:6C:A1:41:35:41:E7:67:B5:04:B3:3F:33:49:F4:28:31:52:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/CodsoUE1QedntQSzPzNJ9CgxUrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CodsoUE1QedntQSzPzNJ9CgxUrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6DD7/C78ADCDCB39111E9A09E150DF8AEA228/EA6F82D6C35911F1BACC0E08CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.16.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:ee:42:6d:d3:73:fc:67:6b:ed:66:17:9a:5f:c2:f0:63:3b:
         26:eb:60:9f:34:d1:62:f8:82:f1:fd:a1:cc:db:9c:de:08:78:
         54:3b:a6:83:82:10:f5:ba:17:63:f5:f0:63:e4:04:e6:3a:59:
         b0:0d:fb:da:d0:1e:8d:70:6a:bf:53:8b:a8:b6:77:bf:d0:2c:
         d1:47:7e:a0:25:d5:7e:8e:40:11:76:6d:bc:63:2c:2b:29:f1:
         76:40:2a:5b:6e:cc:ea:af:51:78:fc:58:09:43:76:6a:fc:ea:
         a3:e4:ed:77:01:3b:0b:96:fe:a3:5d:6f:50:ef:a1:8c:2d:84:
         3a:91:f0:5d:d0:a5:ef:a9:cd:ab:42:36:4d:05:63:92:b2:aa:
         9b:8b:65:60:59:d3:06:8b:7d:f9:66:6a:6f:15:8a:b9:77:95:
         9d:94:56:28:6b:ca:11:7e:be:4c:91:c3:c4:59:e4:df:06:bf:
         af:15:a1:0e:c7:7d:c4:e1:e9:e9:e9:56:c4:f1:36:78:ff:83:
         1b:00:db:3e:76:6c:38:98:6a:f8:e7:e6:32:a8:8f:b9:c8:80:
         04:2c:49:67:ec:59:5e:92:c2:ef:59:3f:b3:be:96:2e:ec:9f:
         51:d9:20:6e:f3:5b:6c:f8:6e:c0:4a:a4:6b:87:8f:4c:c9:ed:
         ae:64:b4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----