Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/6B2A7E96B1C911F1BBB5E8F9CE1D38B0.roa
File:                     6B2A7E96B1C911F1BBB5E8F9CE1D38B0.roa (raw, json)
Hash identifier:          504qL5GyEaoh83h9hc4DJQ47h+WyjFImZ7MMTLGpgGU=
Subject key identifier:   60:08:1C:68:3B:80:DB:17:B1:67:08:22:7C:AA:36:5D:12:2D:38:62
Certificate issuer:       /CN=F36F6034AR/serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
Certificate serial:       0961
Authority key identifier: E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/6B2A7E96B1C911F1BBB5E8F9CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 12:23:27 +0000
ROA not before:           Wed 16 Sep 2026 12:23:23 +0000
ROA not after:            Tue 16 Sep 2036 12:23:23 +0000
asID:                     37518
IP address blocks:        165.231.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                          rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2401 (0x961)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AR, serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
        Validity
            Not Before: Sep 16 12:23:23 2026 GMT
            Not After : Sep 16 12:23:23 2036 GMT
        Subject: CN=6aaa8a3f-6131
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:74:74:63:c6:fa:73:e2:74:95:85:d3:5a:31:
                    06:d3:16:85:61:12:a2:b3:41:66:e9:c2:46:93:94:
                    08:81:eb:d2:76:3c:67:fb:aa:5d:70:4d:b8:d3:a5:
                    2b:08:9d:a6:69:d6:3a:43:90:f3:29:30:d7:97:03:
                    f7:2b:40:5a:2a:bd:11:a4:8c:29:af:0c:09:7f:65:
                    be:e8:77:48:62:19:2a:cd:f8:b4:51:2e:12:ef:3e:
                    a3:ca:12:7b:2b:dc:20:dc:91:f3:27:3d:d7:2d:ab:
                    a2:78:5b:6b:03:7b:54:b6:0f:5c:0b:9c:f0:e3:dd:
                    ff:1b:b9:88:5c:2f:45:24:43:25:28:a5:24:af:18:
                    06:fa:59:55:33:45:ae:fd:a1:77:f5:3c:04:99:64:
                    43:97:ec:ba:cf:2b:c5:5b:4f:b6:ca:47:7d:9a:83:
                    b6:6d:b7:e7:da:b4:af:c8:68:be:96:06:65:b3:1a:
                    2d:e6:84:ef:14:f5:31:86:c7:93:78:60:9b:f8:8b:
                    cc:6c:69:42:0f:e7:83:49:cc:d0:5a:6b:c4:fc:2f:
                    aa:a7:3f:69:52:15:f9:56:97:2e:89:88:7f:59:2a:
                    fb:bc:aa:f1:00:81:61:27:c9:e5:b0:5f:60:db:3e:
                    1f:56:df:dd:01:d4:45:c9:d6:9f:e3:30:9c:b7:ec:
                    64:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:08:1C:68:3B:80:DB:17:B1:67:08:22:7C:AA:36:5D:12:2D:38:62
            X509v3 Authority Key Identifier:
                keyid:E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/6B2A7E96B1C911F1BBB5E8F9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.231.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:17:47:f4:e8:04:03:a9:0d:a6:46:a6:7e:0c:8b:70:96:42:
         c6:58:bd:50:63:c9:34:09:a9:68:57:d0:96:9c:6e:67:ce:10:
         7d:7f:69:ac:01:41:e7:9c:75:d4:a8:09:44:46:95:51:70:bc:
         4b:9c:3e:d9:d5:3b:19:0f:b4:0a:c0:3b:01:54:f2:01:cd:6e:
         4f:b8:3c:6e:f4:7b:a8:67:6e:d3:03:66:52:47:98:b8:74:2a:
         12:79:72:07:ed:5a:fe:a1:fb:6e:7e:1c:8a:2d:16:1d:86:1e:
         e6:33:8a:7d:2a:9f:57:e2:73:73:3b:e4:41:bb:0f:e3:04:73:
         c8:fd:a0:bc:2c:44:52:4d:0f:8b:54:19:5e:ed:bf:66:7f:0c:
         7e:a1:b6:79:d6:67:62:11:65:a8:e6:0b:6e:b4:c0:22:d0:44:
         32:d7:c9:03:73:22:70:5c:bb:51:ec:4e:ed:f9:ff:14:75:ec:
         b3:08:ad:e1:cf:dc:ef:34:82:cb:07:62:b4:42:0f:b8:b0:4d:
         79:35:51:19:f6:59:c7:7c:92:3f:b6:6a:1e:5a:0f:46:b2:ea:
         08:c6:92:64:0f:67:20:9f:43:6f:a1:5c:8a:af:1d:fe:1d:dc:
         6f:8d:46:b8:6a:96:88:e2:a7:75:d8:43:36:da:d3:e2:45:f4:
         13:73:f1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----