Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8B010CE8923511F190297AEBCE1D38B0.roa
File:                     8B010CE8923511F190297AEBCE1D38B0.roa (raw, json)
Hash identifier:          iuDwyxwLnEvoXqZnNzskAJN+6jIkBBKsDOfsQZPY3T0=
Subject key identifier:   CD:6E:32:E2:2E:73:19:E1:8A:17:E5:6E:54:B7:2D:BE:7D:32:22:B7
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       119B
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8B010CE8923511F190297AEBCE1D38B0.roa
Signing time:             Fri 07 Aug 2026 07:56:49 +0000
ROA not before:           Fri 07 Aug 2026 07:56:45 +0000
ROA not after:            Mon 06 Nov 2028 07:56:45 +0000
asID:                     207990
IP address blocks:        161.123.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4507 (0x119b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug  7 07:56:45 2026 GMT
            Not After : Nov  6 07:56:45 2028 GMT
        Subject: CN=6a758fc1-66b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:14:f5:e6:3e:78:fc:47:99:b6:01:74:c1:
                    01:47:19:6a:8a:fb:f9:d9:25:05:85:27:eb:04:18:
                    e6:4e:eb:b7:56:0b:07:b8:29:03:1e:88:4e:17:ad:
                    ab:09:de:3f:f3:b6:30:e2:8b:60:b9:7a:80:e9:c4:
                    4d:0a:e4:eb:9a:94:ea:2a:62:e1:c8:3a:30:31:23:
                    c1:3d:bd:68:f7:bb:e6:c2:d6:c0:12:6a:f1:9f:71:
                    ee:ba:dd:9c:c1:2e:92:90:5c:16:7b:3a:47:8d:33:
                    de:85:b8:3e:3e:1e:55:64:37:ee:68:b3:1c:21:2a:
                    9f:ea:e6:d5:d1:f0:2a:5f:7d:1c:eb:4a:90:b5:05:
                    37:a1:cd:12:a9:61:b3:92:bc:50:f0:2c:52:e6:57:
                    9e:ee:8a:5b:08:20:d1:07:d5:78:18:bb:35:f7:3a:
                    ee:a3:7f:70:24:65:fa:56:ce:62:1d:a0:97:8e:e6:
                    dd:f6:bc:76:3d:32:39:d2:0b:88:ff:4a:be:d2:fb:
                    03:bf:e2:23:09:c9:1e:34:20:8e:6d:99:a0:93:a4:
                    24:5c:cd:f1:16:f6:71:ab:b9:3e:e6:18:f9:a0:76:
                    63:9f:d8:b8:01:d4:a0:70:05:f6:e6:b9:0e:47:cc:
                    1f:2e:9c:ac:05:b0:27:48:ec:af:f0:6b:20:8d:cd:
                    55:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6E:32:E2:2E:73:19:E1:8A:17:E5:6E:54:B7:2D:BE:7D:32:22:B7
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/8B010CE8923511F190297AEBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a7:0f:13:7a:44:f1:9c:93:89:43:1b:44:c7:0e:25:7a:0c:40:
         d4:8e:63:5b:ca:43:9f:67:db:32:7d:08:eb:87:7a:e7:4c:62:
         9f:03:94:7b:99:1d:f0:6f:7a:e0:ad:5e:83:20:54:69:d2:29:
         d6:29:79:f0:62:89:7d:d1:ba:bd:c3:b8:3f:09:e1:ef:92:62:
         97:b4:34:06:bf:db:5b:2b:83:64:e1:8f:47:48:6c:1e:80:98:
         98:20:82:c5:49:e6:82:dc:08:91:92:ec:25:05:49:f0:71:ae:
         2e:1c:b9:7d:0a:50:33:f9:8d:6d:7f:6b:7e:03:88:03:e1:fe:
         b0:28:16:43:90:ab:58:0a:4d:cf:3e:69:2a:01:49:cc:0c:73:
         8b:a8:ee:a3:50:63:5a:ad:d1:d0:f8:07:49:72:e7:a2:76:dd:
         93:2a:f6:4b:ba:a0:05:d4:fa:dc:33:ef:27:5c:8b:dc:94:f4:
         29:3a:f7:8b:01:66:24:43:b9:05:48:31:e4:84:69:db:37:b1:
         01:70:dd:4e:cd:32:68:09:d0:a9:50:5f:9a:47:d2:f0:a9:61:
         52:3e:20:9c:4e:cb:92:da:79:5a:8e:06:fc:a3:a1:0e:76:6c:
         31:b6:bd:74:91:ed:ac:34:76:cb:c4:9d:85:e0:5b:5e:47:ed:
         48:c7:de:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----