Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/310AA08A90E811F1BFA38000CF1D38B0.roa
File:                     310AA08A90E811F1BFA38000CF1D38B0.roa (raw, json)
Hash identifier:          WSVLgoIUzXgbVUK2BRjXqwbZWY2Hzg3KJiZIWIyGgFw=
Subject key identifier:   92:A3:8E:77:C8:A2:77:73:25:CE:D0:1C:0C:B4:0A:B4:83:EF:BF:CF
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       117E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/310AA08A90E811F1BFA38000CF1D38B0.roa
Signing time:             Wed 05 Aug 2026 16:10:36 +0000
ROA not before:           Wed 05 Aug 2026 16:10:32 +0000
ROA not after:            Mon 06 Nov 2028 16:10:32 +0000
asID:                     207990
IP address blocks:        161.123.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4478 (0x117e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug  5 16:10:32 2026 GMT
            Not After : Nov  6 16:10:32 2028 GMT
        Subject: CN=6a73607c-1b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:52:2d:12:6a:55:9e:04:ca:d3:a2:83:28:3d:
                    d8:31:23:b6:53:36:8e:5f:d5:15:81:1e:92:38:1b:
                    e5:30:df:0f:44:29:21:76:91:ac:c7:0d:c7:18:73:
                    cf:d4:26:07:3a:69:58:af:02:56:fa:44:6b:3a:90:
                    bf:ea:bb:a9:ee:1a:22:40:b0:ae:e0:81:88:be:c5:
                    36:32:cb:30:9f:e3:9b:cc:bc:d8:1c:6d:26:49:97:
                    68:63:11:0b:07:a1:4a:84:3b:c5:e5:fb:3d:06:88:
                    8f:1a:b8:83:e3:ef:d6:09:d4:18:67:74:ea:90:7e:
                    d4:f2:38:4a:04:3a:43:09:9e:67:5e:56:19:08:c0:
                    f1:d7:21:76:ca:e3:90:42:0a:97:32:6f:3c:c4:92:
                    e1:b7:54:58:4c:af:e3:a9:e6:4d:ea:fb:09:06:01:
                    6c:3d:d0:7f:b1:c5:2f:75:ce:30:70:ca:70:1b:67:
                    cf:d3:f6:cf:9d:64:34:4d:c9:40:9d:70:83:49:b5:
                    80:39:39:7c:09:61:9c:7d:63:d7:99:ff:e0:c3:35:
                    9e:eb:60:ae:43:a3:16:03:97:1b:36:c9:a7:8c:2e:
                    00:8b:9b:67:c8:0e:fd:dd:f5:8e:0d:d2:f7:61:13:
                    52:8f:3a:fe:c1:fc:55:76:3f:7b:89:21:c4:1f:4a:
                    10:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A3:8E:77:C8:A2:77:73:25:CE:D0:1C:0C:B4:0A:B4:83:EF:BF:CF
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/310AA08A90E811F1BFA38000CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:cc:24:4d:ff:86:f6:84:a8:ee:3a:43:9c:46:72:49:8a:ac:
         b2:00:a9:a5:74:7e:99:4f:8f:b7:ee:fb:3e:4b:96:c8:ee:e8:
         06:9e:a2:1f:a3:fe:02:d3:e5:ef:89:f3:d9:92:e8:b6:c9:ea:
         07:b9:aa:35:02:c1:08:88:4d:65:68:ec:e2:6b:30:e7:cb:72:
         c6:67:fa:63:af:de:8b:68:a1:6c:f6:50:e8:e6:fa:8f:ea:d1:
         13:51:86:80:b9:fe:da:6a:8d:3d:85:64:4d:8a:6d:72:4f:cd:
         af:b1:44:96:1a:f0:ca:da:c7:1a:d6:70:af:db:bf:18:08:00:
         65:91:20:22:02:8c:53:b5:21:33:3b:a3:48:35:ed:78:f0:19:
         87:f3:77:52:d6:cc:b3:89:44:82:0b:91:d5:66:eb:fb:c7:fa:
         90:0c:50:a5:c1:74:00:15:38:b4:88:83:cf:d4:9d:b7:34:72:
         af:d5:b2:75:20:fc:b0:65:49:6a:8c:b7:79:a4:91:73:21:da:
         e2:f7:8d:3c:1a:d6:65:85:9e:1d:50:9e:f1:d5:86:5a:23:7d:
         9c:1d:fd:00:22:69:5f:64:da:a0:4c:57:e2:3a:79:8d:2e:de:
         33:b7:43:bc:fc:a7:c2:a2:79:13:1d:bd:5c:40:73:35:37:21:
         9d:58:18:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----