Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/54BE5C5E90F411F1A897C2C7CE1D38B0.roa
File:                     54BE5C5E90F411F1A897C2C7CE1D38B0.roa (raw, json)
Hash identifier:          68v5hqJsZfpUWwiK6GWg/QI95LVbIun73HqfL/yTx+s=
Subject key identifier:   E1:C3:94:8B:27:23:01:E7:67:77:BA:46:EC:26:B7:7C:EE:42:0E:25
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       1187
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/54BE5C5E90F411F1A897C2C7CE1D38B0.roa
Signing time:             Wed 05 Aug 2026 17:37:30 +0000
ROA not before:           Wed 05 Aug 2026 17:37:25 +0000
ROA not after:            Mon 06 Nov 2028 17:37:25 +0000
asID:                     207990
IP address blocks:        161.123.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4487 (0x1187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug  5 17:37:25 2026 GMT
            Not After : Nov  6 17:37:25 2028 GMT
        Subject: CN=6a7374da-a23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c8:ab:a2:ef:9d:cf:63:20:9f:f2:8e:3b:93:
                    37:74:ef:08:f1:65:6e:70:f7:12:65:0b:20:3d:0a:
                    e8:63:ab:f6:5a:1a:a5:1c:67:b6:dc:4b:b6:c6:ca:
                    07:5a:e9:9f:84:2c:3e:a5:de:96:99:ac:07:54:c6:
                    02:d6:08:ea:bd:2f:66:29:6d:9c:d8:79:b9:84:19:
                    c7:4f:9c:a3:9b:51:d6:62:e6:75:23:96:72:7e:c3:
                    73:61:0d:5b:6b:3a:36:2a:b0:06:bb:7a:c7:c8:6d:
                    f6:f3:a1:52:e4:70:21:f9:c4:8b:9e:d8:76:88:66:
                    62:93:45:bb:6a:33:c6:1a:16:12:ce:2f:31:dd:0d:
                    43:e0:e1:82:53:66:6a:9e:47:01:7f:ee:5c:ed:dc:
                    51:29:67:c2:bd:70:c5:4e:8d:d2:50:de:a9:22:5d:
                    16:57:1a:bf:ed:56:86:ed:de:bc:07:c0:84:0a:89:
                    6f:bd:03:41:69:42:61:59:03:8f:16:c8:0d:15:22:
                    f5:0f:27:51:7c:60:7e:34:aa:db:3f:78:cf:46:25:
                    8f:3c:60:9c:81:05:52:6e:25:bd:20:c4:06:92:05:
                    75:e2:d4:af:bd:b4:86:7d:a6:b5:17:ea:f8:11:2e:
                    e0:1e:92:f1:1d:ca:0e:22:58:ff:2f:04:d7:d9:ee:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C3:94:8B:27:23:01:E7:67:77:BA:46:EC:26:B7:7C:EE:42:0E:25
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/54BE5C5E90F411F1A897C2C7CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f1:d3:27:26:ec:0e:d1:19:74:3c:88:ef:0e:ac:b2:12:e9:
         bb:74:2f:8e:29:1c:ce:a4:0e:ac:a2:a9:a2:53:65:62:e4:3c:
         6e:59:cd:67:bd:2c:08:3b:fc:c4:a7:2b:95:5f:6f:c5:f2:3e:
         10:0d:71:d2:b4:c0:63:03:3c:9a:8f:d2:3c:f2:e5:ca:18:ab:
         60:79:ef:a5:99:fb:cd:63:c5:20:64:d1:88:78:8c:de:88:e1:
         fc:14:4a:b1:a0:40:e3:b2:c1:8e:50:87:6c:db:3c:36:26:4d:
         31:a2:98:6f:e8:92:9f:31:e2:c7:22:ce:5a:21:d8:58:c6:fc:
         f0:54:28:51:5e:69:2c:5c:15:8e:61:02:11:0d:14:c0:68:a7:
         1d:3f:d8:0c:22:1b:12:fe:d7:ed:17:79:0b:13:a5:1c:1d:5f:
         6b:0f:da:6d:68:fe:80:c6:4b:eb:5e:dc:a4:20:43:f7:7a:27:
         ea:58:5e:91:fe:93:1c:61:10:aa:6b:3e:14:e9:c1:44:b1:73:
         ac:10:fe:2a:bc:f5:55:db:2e:ef:76:79:a4:4e:68:18:83:4f:
         4e:40:4b:d0:87:cf:39:48:79:23:c2:38:52:01:96:2c:c7:15:
         7f:75:14:87:66:6f:b7:18:ed:3b:22:b2:11:1f:a2:a1:02:8c:
         8d:8d:51:e8
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEYcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yNjA4MDUxNzM3MjVaFw0yODExMDYxNzM3MjVaMBgxFjAU
BgNVBAMTDTZhNzM3NGRhLWEyM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDoyKui753PYyCf8o47kzd07wjxZW5w9xJlCyA9Cuhjq/ZaGqUcZ7bcS7bG
ygda6Z+ELD6l3paZrAdUxgLWCOq9L2YpbZzYebmEGcdPnKObUdZi5nUjlnJ+w3Nh
DVtrOjYqsAa7esfIbfbzoVLkcCH5xIue2HaIZmKTRbtqM8YaFhLOLzHdDUPg4YJT
ZmqeRwF/7lzt3FEpZ8K9cMVOjdJQ3qkiXRZXGr/tVobt3rwHwIQKiW+9A0FpQmFZ
A48WyA0VIvUPJ1F8YH40qts/eM9GJY88YJyBBVJuJb0gxAaSBXXi1K+9tIZ9prUX
6vgRLuAekvEdyg4iWP8vBNfZ7tvHAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU4cOU
iycjAednd7pG7Ca3fO5CDiUwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzU0QkU1QzVFOTBGNDExRjFBODk3QzJDN0NFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChexQwDQYJKoZIhvcNAQELBQAD
ggEBAAHx0ycm7A7RGXQ8iO8OrLIS6bt0L44pHM6kDqyiqaJTZWLkPG5ZzWe9LAg7
/MSnK5Vfb8XyPhANcdK0wGMDPJqP0jzy5coYq2B576WZ+81jxSBk0Yh4jN6I4fwU
SrGgQOOywY5Qh2zbPDYmTTGimG/okp8x4scizloh2FjG/PBUKFFeaSxcFY5hAhEN
FMBopx0/2AwiGxL+1+0XeQsTpRwdX2sP2m1o/oDGS+te3KQgQ/d6J+pYXpH+kxxh
EKprPhTpwUSxc6wQ/iq89VXbLu92eaROaBiDT05AS9CHzzlIeSPCOFIBlizHFX91
FIdmb7cY7TsishEfoqECjI2NUeg=
-----END CERTIFICATE-----