Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/05934784930B11F19AA2B6FBCE1D38B0.roa
File:                     05934784930B11F19AA2B6FBCE1D38B0.roa (raw, json)
Hash identifier:          nb6/XJ6e4mY9S+Wo7/PcMs8AFDHTkQOgBHpBhQIhJuU=
Subject key identifier:   FE:84:68:A0:0D:E3:2C:20:74:52:4C:56:FF:60:2B:0B:EF:11:E8:BD
Certificate issuer:       /CN=F36BE2EDAR/serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
Certificate serial:       053A
Authority key identifier: 65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/05934784930B11F19AA2B6FBCE1D38B0.roa
Signing time:             Sat 08 Aug 2026 09:24:58 +0000
ROA not before:           Sat 08 Aug 2026 09:24:54 +0000
ROA not after:            Sat 31 Dec 2033 09:24:54 +0000
asID:                     33779
IP address blocks:        168.253.96.0/20 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                          rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Aug 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1338 (0x53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAR, serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
        Validity
            Not Before: Aug  8 09:24:54 2026 GMT
            Not After : Dec 31 09:24:54 2033 GMT
        Subject: CN=6a76f5e9-422e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b1:44:ee:1f:d2:1e:20:82:6c:4e:8c:9e:b5:
                    f6:4b:7a:b5:7d:96:8d:e5:f9:88:19:c0:23:c5:3e:
                    4e:83:2a:1e:de:7f:ef:89:ca:59:e6:86:d8:98:6d:
                    69:db:3e:2f:06:5d:c6:6b:37:cd:a2:a4:34:be:f8:
                    cb:af:10:30:79:a9:da:6d:b4:cf:ec:dc:e0:e2:76:
                    eb:c3:cf:8a:d4:39:5f:ed:13:30:50:f6:f3:78:18:
                    f5:01:1b:73:06:40:81:54:ee:97:e7:4f:fa:d3:e5:
                    e9:b1:7b:5c:b5:fa:25:52:6d:8e:6b:42:e9:3d:4c:
                    a8:6c:da:99:c6:d9:bc:14:d7:60:4b:d3:31:b0:30:
                    e6:45:1e:09:f1:15:9e:cf:d5:b2:9c:cd:da:dd:01:
                    f6:2a:df:d5:ff:e6:7f:08:9a:b7:9b:86:21:38:c0:
                    68:3c:7a:28:27:0c:cc:04:bb:9b:bb:e0:51:2c:f4:
                    ef:32:f8:42:1a:1e:07:ad:32:8f:db:5d:bf:82:03:
                    4d:3c:ef:d3:4a:85:c6:40:a2:8c:97:ce:20:c8:d2:
                    91:80:45:04:c6:73:c4:44:c4:fd:1c:a0:9e:88:e8:
                    03:ef:03:e4:53:53:59:fc:6c:a2:1d:03:a9:f6:38:
                    1d:2f:6a:90:e8:38:6f:e1:b2:25:34:0c:a3:fa:ae:
                    e1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:84:68:A0:0D:E3:2C:20:74:52:4C:56:FF:60:2B:0B:EF:11:E8:BD
            X509v3 Authority Key Identifier:
                keyid:65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/05934784930B11F19AA2B6FBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.253.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         31:24:f4:77:7e:a1:f5:bb:11:df:82:ec:e4:e8:a4:b2:76:d9:
         dc:2b:fb:a5:d3:c4:c2:40:0b:32:91:eb:24:36:2c:0b:7a:1c:
         93:f4:2a:c1:f9:77:de:3e:8a:28:aa:1c:d7:ec:de:32:72:b9:
         cd:2e:6d:3f:42:19:ea:95:57:ce:ff:e9:ab:79:a4:d5:77:fc:
         7a:38:97:ab:61:a0:de:a2:7a:c3:b5:5c:0a:58:e5:c0:72:ff:
         ff:eb:ee:69:02:bb:ad:a2:37:9e:e0:53:2c:23:e3:ac:78:2a:
         41:50:61:78:8d:50:49:2c:cb:cd:49:1d:a1:0d:a4:4d:4a:43:
         a1:99:e9:9c:3c:11:f1:c3:0b:8c:65:a0:9f:f0:d3:24:86:ef:
         8f:0e:14:52:f7:01:00:6e:fb:4b:59:27:1d:3f:8c:b5:f6:44:
         b9:35:bd:dc:d7:ee:75:8d:73:4f:a1:28:73:d9:d2:f5:59:63:
         65:d5:66:68:1d:43:dc:35:96:6c:3c:2e:39:a6:55:70:64:e0:
         5c:1e:32:2b:5b:9d:e5:a3:0c:e8:7d:94:c2:23:fc:c7:98:d1:
         dc:d1:f9:8d:d7:09:44:a9:b2:5c:5a:00:24:ba:58:f6:6b:3f:
         ba:c7:02:07:89:1d:ee:a2:1a:86:b1:09:ad:bd:f8:d2:88:ea:
         11:95:f9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----