Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8020B13C90F711F1B62205DCCE1D38B0.roa
File:                     8020B13C90F711F1B62205DCCE1D38B0.roa (raw, json)
Hash identifier:          loEZH8c2YltrMLktLJg9nBhvGWBxFjHbWTOUnw9q91U=
Subject key identifier:   E4:40:02:A4:5E:08:83:EA:D8:FF:05:47:17:36:DC:68:DA:E1:87:6F
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       1196
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8020B13C90F711F1B62205DCCE1D38B0.roa
Signing time:             Wed 05 Aug 2026 18:00:11 +0000
ROA not before:           Wed 05 Aug 2026 18:00:07 +0000
ROA not after:            Mon 06 Nov 2028 18:00:07 +0000
asID:                     207990
IP address blocks:        161.123.24.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4502 (0x1196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug  5 18:00:07 2026 GMT
            Not After : Nov  6 18:00:07 2028 GMT
        Subject: CN=6a737a2b-2eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4d:91:2f:d2:3f:04:26:31:15:70:63:b6:58:
                    59:51:d9:7c:17:92:f8:bb:c9:91:ed:cf:7c:7b:1d:
                    e6:9b:e1:77:5f:38:53:91:c2:0c:b5:df:89:12:0b:
                    fa:3f:9d:f6:44:75:8b:42:a2:3f:6c:b3:b5:51:18:
                    41:1b:8e:5e:bc:03:92:0b:d0:11:f8:b5:50:45:b9:
                    ed:f8:01:77:93:f3:6e:8e:b9:9e:f8:63:53:85:e0:
                    c7:0b:79:27:65:a7:e5:80:97:b9:14:f2:0c:59:31:
                    d2:8e:02:dc:05:fc:59:e0:df:f6:40:67:89:ec:96:
                    f4:6d:0a:4b:d1:36:16:ac:00:96:1a:96:1b:0c:ec:
                    e1:ee:e5:ba:5c:79:d9:b7:b9:6e:79:4c:de:06:22:
                    48:30:10:75:64:7f:b0:9c:65:a9:3c:97:3a:57:be:
                    71:68:b6:d9:41:b1:e4:19:6f:88:a8:5d:ac:1c:b8:
                    07:f0:9e:16:7f:d2:5a:1c:5c:04:8c:1b:7d:04:a1:
                    d2:66:12:6b:84:47:80:47:73:62:f0:92:83:bd:f7:
                    74:4e:88:92:e8:91:51:c6:ff:e3:15:41:36:ed:02:
                    42:ce:76:ea:cb:0f:b1:d2:95:c7:1d:0c:31:f6:07:
                    7d:87:b4:58:1f:b7:03:78:11:0d:81:b1:ba:4e:2f:
                    0a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:40:02:A4:5E:08:83:EA:D8:FF:05:47:17:36:DC:68:DA:E1:87:6F
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8020B13C90F711F1B62205DCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:82:ec:63:fa:93:3d:ff:e9:1a:4a:60:80:35:db:d3:d7:77:
         b7:97:cc:a6:0d:3e:af:c1:92:ce:4b:cb:2a:6a:7a:e0:d9:dd:
         9f:89:0d:bd:9f:3f:5e:82:e8:5b:70:97:87:68:02:fe:60:d6:
         c8:cc:44:35:92:93:15:cc:58:5f:1c:92:3f:f0:dd:a2:5a:f9:
         0a:48:2d:16:86:03:f2:c7:f5:54:58:ab:d5:fc:16:c9:57:f6:
         39:d7:af:68:5c:a1:dc:6b:40:e9:ae:63:9a:c5:35:85:34:db:
         45:f7:06:45:7c:d0:fd:a5:20:b8:4c:39:2d:25:c8:2e:7f:e5:
         dc:49:a2:f1:4a:6a:b9:ef:3c:0c:bd:33:44:b9:3e:c8:bc:66:
         1c:05:fe:b3:bd:38:8d:a2:40:c5:88:3c:2b:a0:56:41:cd:be:
         6b:f4:bf:f0:08:e9:c0:69:37:49:92:8d:b9:ad:76:c4:76:84:
         e4:2d:66:09:f7:96:13:87:98:48:33:bf:9d:01:f4:6c:e6:eb:
         71:4d:7a:9c:62:ee:91:bc:6d:1c:f6:22:eb:2f:d0:c6:2a:ba:
         46:d2:1d:47:d7:11:19:ee:4c:c4:b6:b7:ff:1c:d2:eb:38:47:
         60:95:33:de:d2:dc:11:fc:b3:d6:9f:55:c7:a6:bd:cc:19:2c:
         48:e2:f4:8b
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEZYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yNjA4MDUxODAwMDdaFw0yODExMDYxODAwMDdaMBgxFjAU
BgNVBAMTDTZhNzM3YTJiLTJlZGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMTZEv0j8EJjEVcGO2WFlR2XwXkvi7yZHtz3x7Heab4XdfOFORwgy134kS
C/o/nfZEdYtCoj9ss7VRGEEbjl68A5IL0BH4tVBFue34AXeT826OuZ74Y1OF4McL
eSdlp+WAl7kU8gxZMdKOAtwF/Fng3/ZAZ4nslvRtCkvRNhasAJYalhsM7OHu5bpc
edm3uW55TN4GIkgwEHVkf7CcZak8lzpXvnFottlBseQZb4ioXawcuAfwnhZ/0loc
XASMG30EodJmEmuER4BHc2LwkoO993ROiJLokVHG/+MVQTbtAkLOdurLD7HSlccd
DDH2B32HtFgftwN4EQ2BsbpOLwq9AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQU5EAC
pF4Ig+rY/wVHFzbcaNrhh28wHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4LzgwMjBCMTNDOTBGNzExRjFCNjIyMDVEQ0NFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKhexgwDQYJKoZIhvcNAQELBQAD
ggEBACSC7GP6kz3/6RpKYIA129PXd7eXzKYNPq/Bks5LyypqeuDZ3Z+JDb2fP16C
6Ftwl4doAv5g1sjMRDWSkxXMWF8ckj/w3aJa+QpILRaGA/LH9VRYq9X8FslX9jnX
r2hcodxrQOmuY5rFNYU020X3BkV80P2lILhMOS0lyC5/5dxJovFKarnvPAy9M0S5
Psi8ZhwF/rO9OI2iQMWIPCugVkHNvmv0v/AI6cBpN0mSjbmtdsR2hOQtZgn3lhOH
mEgzv50B9Gzm63FNepxi7pG8bRz2Iusv0MYqukbSHUfXERnuTMS2t/8c0us4R2CV
M97S3BH8s9afVcemvcwZLEji9Is=
-----END CERTIFICATE-----