Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7A70F01A90E511F1B603FCEFCE1D38B0.roa
File:                     7A70F01A90E511F1B603FCEFCE1D38B0.roa (raw, json)
Hash identifier:          fQlV4J8cL90ihiRe1zsmFOC02Jf84CHnGeqBpd6SHXg=
Subject key identifier:   DF:73:29:D3:1D:6A:17:3B:03:D9:DC:86:C1:6A:65:BD:A3:51:33:F7
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       1169
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7A70F01A90E511F1B603FCEFCE1D38B0.roa
Signing time:             Wed 05 Aug 2026 15:51:10 +0000
ROA not before:           Wed 05 Aug 2026 15:51:06 +0000
ROA not after:            Mon 06 Nov 2028 15:51:06 +0000
asID:                     207990
IP address blocks:        161.123.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4457 (0x1169)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug  5 15:51:06 2026 GMT
            Not After : Nov  6 15:51:06 2028 GMT
        Subject: CN=6a735bee-02c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:81:a7:46:bf:2e:56:47:33:c7:3e:4c:ff:69:
                    80:92:34:fd:74:8e:73:77:d4:8e:ad:ef:8a:e5:3d:
                    02:d8:2a:85:b4:64:f5:85:55:a6:79:15:83:55:89:
                    5f:ea:e6:a3:37:95:6d:78:b3:a7:b1:f4:95:34:f5:
                    5e:af:e3:06:f3:e6:71:45:6c:84:33:69:a9:1b:d3:
                    95:e0:be:f1:e0:b3:28:69:c4:83:15:1c:ba:ab:59:
                    34:1c:0a:23:4b:71:48:15:64:c3:b2:8d:41:91:b3:
                    45:11:90:a5:20:ca:a4:cd:08:0a:98:a7:e3:7f:11:
                    0d:88:e3:bf:d1:13:36:36:20:0a:cc:7a:d0:2e:73:
                    02:2f:cd:f9:aa:67:d3:80:3e:7c:eb:7e:16:f8:c5:
                    9a:1f:53:b7:d2:d1:33:b1:93:76:61:0f:88:e0:77:
                    f4:e3:8a:8b:5b:9a:4b:2a:13:a7:ce:4e:81:7e:7a:
                    73:70:a2:43:48:84:68:08:6d:42:cf:1f:d4:41:7c:
                    d1:75:a2:33:73:b0:b8:01:c3:65:5d:77:25:0d:02:
                    59:a5:91:c7:8c:05:52:3f:b4:35:e6:80:fc:ff:b1:
                    03:da:9e:b0:fe:18:10:11:35:2d:6c:6f:de:1b:d3:
                    4d:b6:5a:f3:20:04:1e:a8:de:26:ca:56:e9:81:20:
                    04:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:73:29:D3:1D:6A:17:3B:03:D9:DC:86:C1:6A:65:BD:A3:51:33:F7
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/7A70F01A90E511F1B603FCEFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:0a:37:a9:27:aa:97:6c:e6:1c:cf:79:7a:0c:47:0e:79:92:
         db:9c:f7:75:a3:d4:13:93:29:bf:7e:22:04:40:98:b2:0b:3d:
         a2:e8:92:38:15:47:59:81:57:11:63:bb:37:07:8a:89:74:d7:
         cd:77:d9:56:35:27:b6:2b:5a:58:12:36:f3:58:73:04:91:1d:
         c7:d4:df:23:e7:33:5d:e6:89:28:b5:b5:2d:e9:d4:0d:1c:57:
         c6:f2:64:26:b0:a7:7c:53:42:22:a4:9b:f4:70:8b:92:77:d3:
         47:1a:f6:8a:43:c1:bd:8d:6b:cb:57:21:37:03:8d:b5:73:45:
         6a:f6:1d:fd:a9:3d:1e:2d:36:54:60:ac:67:41:04:52:f2:0c:
         14:f0:36:10:77:0a:f5:d9:ec:a8:f6:47:22:3e:a7:13:6c:5d:
         3c:bd:97:a5:af:f2:3f:6b:4f:d1:95:4e:27:d2:d1:69:cc:c4:
         3e:d5:dc:f4:a3:59:c8:10:74:5d:e2:05:5f:27:db:d9:9d:ec:
         d6:d8:e3:bf:ff:cd:be:9a:f1:a7:d9:ee:10:7f:c2:ff:85:18:
         02:ef:a8:a3:85:a8:02:d8:9a:de:0e:c6:67:13:5f:06:81:ac:
         45:a6:ed:c9:6d:68:a5:92:2f:3e:b5:b6:4a:bb:4c:5b:34:2c:
         4d:fa:c0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----