Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F3383/3D0FAD34B8C611F1BD6D78FFCE1D38B0/A1FA46EEC24111F183814FDCCE1D38B0.roa
File:                     A1FA46EEC24111F183814FDCCE1D38B0.roa (raw, json)
Hash identifier:          Oaf9iJKxvprwpuKNJjC6vb0qYBPqQwWCTUwD6we5mm8=
Subject key identifier:   33:A5:95:56:25:AE:74:A2:90:4B:A7:F8:84:2E:0F:2E:F8:D6:84:DF
Certificate issuer:       /CN=F36F3383AR/serialNumber=EAC0A7F8EFF3AF2E606FF0EFF5A4067EA889C28A
Certificate serial:       1F
Authority key identifier: EA:C0:A7:F8:EF:F3:AF:2E:60:6F:F0:EF:F5:A4:06:7E:A8:89:C2:8A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/6sCn-O_zry5gb_Dv9aQGfqiJwoo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F3383/3D0FAD34B8C611F1BD6D78FFCE1D38B0/A1FA46EEC24111F183814FDCCE1D38B0.roa
Signing time:             Wed 07 Oct 2026 11:24:17 +0000
ROA not before:           Wed 07 Oct 2026 11:24:13 +0000
ROA not after:            Tue 07 Oct 2036 11:24:13 +0000
asID:                     37136
IP address blocks:        156.0.212.0/22 maxlen: 22
                          156.0.212.0/23 maxlen: 23
                          156.0.212.0/24 maxlen: 24
                          156.0.213.0/24 maxlen: 24
                          156.0.214.0/23 maxlen: 23
                          156.0.214.0/24 maxlen: 24
                          156.0.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F3383/3D0FAD34B8C611F1BD6D78FFCE1D38B0/6sCn-O_zry5gb_Dv9aQGfqiJwoo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F3383/3D0FAD34B8C611F1BD6D78FFCE1D38B0/6sCn-O_zry5gb_Dv9aQGfqiJwoo.mft
                          rsync://rpki.afrinic.net/repository/arin/6sCn-O_zry5gb_Dv9aQGfqiJwoo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F3383AR, serialNumber=EAC0A7F8EFF3AF2E606FF0EFF5A4067EA889C28A
        Validity
            Not Before: Oct  7 11:24:13 2026 GMT
            Not After : Oct  7 11:24:13 2036 GMT
        Subject: CN=6ac62be1-633c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:69:c0:f9:e2:95:4e:73:38:90:87:5f:b0:42:
                    7e:23:8b:c2:32:79:c2:5a:ea:2e:b2:5a:b3:46:90:
                    bf:3c:61:ef:6a:76:f6:e5:39:9c:b1:3f:ff:c8:73:
                    df:6e:44:cb:71:2c:d5:31:7b:7d:93:df:67:02:9e:
                    92:8a:fb:52:d2:31:11:78:aa:7d:f6:20:52:70:fd:
                    ea:d6:33:e0:2a:d6:94:0c:a6:d8:b2:b4:be:cd:5c:
                    01:84:1d:6d:60:ac:ec:4c:2e:64:18:87:51:4d:38:
                    67:4b:25:16:45:cc:68:8e:77:c0:65:10:c4:82:a1:
                    80:1b:fc:dd:84:76:c7:62:df:45:75:ac:64:b2:27:
                    55:28:ff:3f:d7:f4:66:a0:d1:6d:88:a0:a9:2a:93:
                    38:e6:5d:ed:dc:c7:8e:ae:b2:ff:5b:fd:84:a1:bd:
                    11:9a:5a:13:12:97:15:47:b8:4e:cf:f4:4f:c8:51:
                    c0:4e:4b:50:5f:40:b4:c3:1c:ec:a9:cb:b4:6b:5c:
                    60:63:a0:a4:83:e9:a5:1e:fd:19:f9:ee:56:8d:34:
                    94:8f:f6:d4:67:49:a1:a1:54:63:8f:00:ae:02:45:
                    3b:6c:6d:e6:ad:b8:4f:8c:51:b3:88:cb:b4:c6:e8:
                    b9:1c:28:53:fd:24:c2:59:a2:ce:39:00:bc:c2:73:
                    bb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A5:95:56:25:AE:74:A2:90:4B:A7:F8:84:2E:0F:2E:F8:D6:84:DF
            X509v3 Authority Key Identifier:
                keyid:EA:C0:A7:F8:EF:F3:AF:2E:60:6F:F0:EF:F5:A4:06:7E:A8:89:C2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3383/3D0FAD34B8C611F1BD6D78FFCE1D38B0/6sCn-O_zry5gb_Dv9aQGfqiJwoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/6sCn-O_zry5gb_Dv9aQGfqiJwoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3383/3D0FAD34B8C611F1BD6D78FFCE1D38B0/A1FA46EEC24111F183814FDCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.0.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b7:1a:a6:6e:99:66:e1:6b:b9:4c:c4:db:e4:13:c5:83:23:74:
         4c:24:4e:71:32:60:dd:29:e0:dd:e6:01:41:3a:a8:72:65:3d:
         9c:5f:18:6d:76:3d:38:ed:27:8d:e7:c3:fe:80:a2:c9:8e:bb:
         5d:c1:68:3a:82:3b:ed:50:37:8c:ad:3d:b3:6d:95:10:54:eb:
         a0:fd:54:4e:e4:0c:b6:e7:13:c0:ce:20:04:b0:29:51:52:10:
         5e:ec:f5:77:cf:ce:da:8c:86:1e:1b:7d:a2:0f:2d:38:0a:70:
         73:97:6c:8c:c7:89:65:03:ec:15:93:09:0d:53:bd:1c:d2:93:
         62:ee:45:a2:54:33:9e:85:19:68:90:ad:e7:c5:c0:92:57:5f:
         40:18:aa:54:50:16:03:f2:6a:b6:7b:d9:e9:ed:04:62:56:71:
         fb:57:c1:eb:b5:f3:6d:c0:1f:85:62:14:eb:16:89:0c:10:15:
         e8:10:43:a4:9d:85:68:67:b0:77:a8:29:50:43:09:72:56:53:
         12:b9:97:4d:2d:88:ad:13:96:47:33:8e:f2:cd:e7:a4:19:5b:
         74:60:3f:4d:6d:3d:76:7f:b6:1f:b8:bb:21:74:58:10:99:6b:
         9b:b4:55:b2:06:a2:c9:a4:19:eb:f5:66:6e:ab:48:9a:d4:3f:
         7c:c7:9d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----