Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/ABF42C18B1C611F18C4EC1E9CE1D38B0.roa
File:                     ABF42C18B1C611F18C4EC1E9CE1D38B0.roa (raw, json)
Hash identifier:          iU2xi7UbBCq0OoNFseYLUBG8sIO97iTHeSyuE9VjLFk=
Subject key identifier:   96:2C:1A:5B:4F:45:D7:8D:C2:6E:CA:CE:6F:01:4E:4D:5F:71:66:85
Certificate issuer:       /CN=F36F6034AR/serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
Certificate serial:       095B
Authority key identifier: E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/ABF42C18B1C611F18C4EC1E9CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 12:03:47 +0000
ROA not before:           Wed 16 Sep 2026 12:03:43 +0000
ROA not after:            Tue 16 Sep 2036 12:03:43 +0000
asID:                     58065
IP address blocks:        165.231.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                          rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2395 (0x95b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AR, serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
        Validity
            Not Before: Sep 16 12:03:43 2026 GMT
            Not After : Sep 16 12:03:43 2036 GMT
        Subject: CN=6aaa85a3-8641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:d6:42:20:85:7e:e3:22:fd:56:2e:1e:33:
                    79:b9:30:f9:21:05:7d:61:6e:be:bd:14:28:ca:3e:
                    57:7f:5c:27:33:3c:63:6e:f5:23:23:ba:b9:34:f4:
                    c8:c4:bd:44:e0:d8:b6:ae:38:3c:82:6e:6c:d4:5f:
                    61:71:79:a7:46:7e:0d:1f:e5:4c:ca:cc:50:b2:00:
                    93:e9:1e:84:2d:a5:82:a8:83:f9:0c:a1:83:a1:f3:
                    08:0b:43:78:2e:a3:1a:2a:40:84:0e:0b:ae:4f:03:
                    bb:36:0e:5a:e9:7b:56:77:95:85:a7:0d:e3:6c:a3:
                    2b:93:8b:70:6b:18:29:c4:32:96:c6:72:ba:5e:5f:
                    0f:a0:fa:7a:0d:80:85:14:48:2e:29:c6:da:bb:04:
                    6f:73:e4:04:ca:73:35:ca:97:09:de:21:a6:fa:f3:
                    eb:0a:6f:9c:23:1c:27:b6:10:e5:7a:7b:a8:d8:b3:
                    78:31:c0:41:97:cd:c0:ff:33:5b:1a:39:1a:d2:b7:
                    44:59:89:d9:cb:45:60:86:72:a7:c6:61:76:0a:65:
                    ea:66:9c:aa:1d:74:27:ff:16:7d:fd:1a:30:c3:9c:
                    a1:ae:dc:50:95:4c:23:af:1a:bc:57:a9:15:6d:a3:
                    88:40:dd:6c:18:a3:52:92:37:13:79:08:b3:61:43:
                    a8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2C:1A:5B:4F:45:D7:8D:C2:6E:CA:CE:6F:01:4E:4D:5F:71:66:85
            X509v3 Authority Key Identifier:
                keyid:E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/ABF42C18B1C611F18C4EC1E9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.231.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:a3:e7:e0:e2:00:77:ef:83:07:f5:be:c5:32:01:e0:d3:b8:
         33:57:b3:36:30:75:d9:45:cb:b4:ad:08:b9:63:03:26:28:1a:
         d0:fb:75:71:51:fa:63:1b:f4:34:f9:9a:0b:b5:f8:46:b6:86:
         4c:e1:db:68:18:73:ef:b6:84:04:cb:c1:ac:3d:9c:80:f8:1e:
         3a:d0:9c:2b:0b:02:12:c7:5d:44:0e:60:f0:51:95:3d:30:53:
         05:65:cd:0d:1f:b8:0d:c9:e0:85:ac:4f:37:54:6b:50:85:cf:
         b0:97:9e:d4:d2:b0:dc:9e:f8:1a:e3:5d:78:bf:45:d4:5e:26:
         3f:fc:45:93:90:e3:73:70:57:d7:e7:fe:a8:55:d4:ee:bf:80:
         12:91:29:0d:56:b5:34:7a:aa:8f:0f:83:f4:ac:c5:9a:9c:5b:
         f1:6f:af:ed:c6:1d:c7:ab:32:75:7b:2a:f0:49:bb:2f:71:02:
         ab:5f:c5:3f:2b:b7:7e:0e:ca:d0:32:fa:be:a6:99:64:a7:69:
         5f:46:a1:4f:75:62:31:b7:66:11:33:25:d3:d3:5f:35:d4:51:
         9c:e8:a7:1a:0a:b7:b2:11:0a:f6:71:b7:86:40:f3:c4:3c:f2:
         e0:62:c4:54:6b:ce:90:c8:68:55:89:b4:e3:b6:91:58:ef:ef:
         33:82:3a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----