Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3115F53690F511F191B4EFCBCE1D38B0.roa
File:                     3115F53690F511F191B4EFCBCE1D38B0.roa (raw, json)
Hash identifier:          jBJP23ENmRy65Eey940ugO/xH4bDVTrJDNhxz5K8UAk=
Subject key identifier:   6B:19:66:DD:A6:C2:F7:D2:EA:9F:28:2D:47:32:30:A5:91:DD:FC:6D
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       118D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3115F53690F511F191B4EFCBCE1D38B0.roa
Signing time:             Wed 05 Aug 2026 17:43:39 +0000
ROA not before:           Wed 05 Aug 2026 17:43:35 +0000
ROA not after:            Mon 06 Nov 2028 17:43:35 +0000
asID:                     207990
IP address blocks:        161.123.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4493 (0x118d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug  5 17:43:35 2026 GMT
            Not After : Nov  6 17:43:35 2028 GMT
        Subject: CN=6a73764b-3fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:9d:f1:d3:b4:7e:da:9d:f2:c1:31:13:bc:06:
                    7c:06:ef:4a:dd:87:fd:e1:85:86:4e:b3:d7:09:5d:
                    a7:85:d6:63:d4:b5:9b:9e:4e:af:17:74:c1:62:98:
                    3c:72:29:34:c7:57:b5:55:fd:b3:24:a9:23:a6:fe:
                    8b:28:ab:df:de:e6:44:3d:7c:d4:0a:d9:eb:2c:d9:
                    bf:77:c6:10:dd:15:d0:2f:b2:e9:56:44:22:12:53:
                    31:59:28:2a:19:7e:9a:89:cd:e7:d4:0f:0f:51:69:
                    c9:d8:3d:d0:3c:aa:cc:b3:b2:7a:06:d4:a9:f5:2d:
                    75:99:c3:e7:c5:2b:be:9d:ff:ff:c5:fb:8c:93:cd:
                    83:a7:aa:d8:82:0a:4e:ba:e4:ba:63:b8:d1:e1:09:
                    4c:0d:c6:90:e3:a7:b0:43:80:c4:a4:67:5a:85:f6:
                    7e:85:fc:d8:6e:72:51:c7:79:64:ef:c7:13:18:76:
                    d3:13:1b:46:cc:d6:d7:67:89:b0:15:d5:2b:d6:09:
                    eb:d2:77:fb:bc:5f:b4:4d:75:57:bd:f2:83:93:28:
                    32:a2:71:52:19:b3:87:5c:27:20:84:c9:fb:8e:73:
                    c7:02:e4:ea:f7:16:ac:5d:84:f0:27:3f:58:72:23:
                    23:14:65:bc:1b:b9:8d:8c:2e:21:ec:59:85:8f:d6:
                    92:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:19:66:DD:A6:C2:F7:D2:EA:9F:28:2D:47:32:30:A5:91:DD:FC:6D
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/3115F53690F511F191B4EFCBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:68:ad:20:a4:54:ff:83:89:74:f7:ca:b0:06:96:2f:c2:be:
         65:ce:71:0c:62:f2:48:bf:aa:cf:36:da:ef:2d:0e:fd:66:17:
         54:ee:21:93:9d:9c:b1:fb:f1:04:f1:2e:2b:a1:1b:c3:9d:2d:
         84:03:03:73:aa:92:ab:6c:9f:3b:c2:b3:c0:ed:f3:64:6b:8f:
         3a:a0:4d:b1:ae:b0:d9:8c:68:ff:37:7b:bd:ac:19:45:59:62:
         c3:2f:43:33:67:b0:b4:88:00:fb:89:eb:3d:2c:1f:97:fe:9b:
         ca:ec:f4:26:08:bd:b6:0b:9d:f7:09:9e:38:86:eb:7f:d3:37:
         aa:ad:29:85:a9:6a:fd:fc:27:72:ef:aa:57:d6:aa:91:ec:32:
         c6:a4:d2:1c:c7:90:18:91:f5:9f:5b:2d:9a:8b:6d:10:62:59:
         14:58:cb:c7:e6:c1:b6:72:cf:a7:2b:5e:cc:6f:8f:22:1c:36:
         66:4c:76:de:13:6a:40:a3:25:19:55:b0:7d:41:84:1e:b4:32:
         94:81:d9:04:4e:0b:22:eb:6a:58:56:8c:65:aa:12:dc:f3:b5:
         41:d1:6e:1e:30:13:15:94:84:12:2b:e6:11:8a:76:9e:4d:ec:
         08:58:f3:4d:8a:38:41:10:b6:50:3e:d5:04:70:3e:87:04:a1:
         1b:5a:ed:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----