Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9A90A31E923811F188519DFCCE1D38B0.roa
File:                     9A90A31E923811F188519DFCCE1D38B0.roa (raw, json)
Hash identifier:          3fo9zQbGLCQMPgN1GISoeTfgifFtYwfbsl8a/rbKekg=
Subject key identifier:   D4:E7:52:57:26:44:2B:78:79:8E:A7:B9:78:C9:18:CB:04:5F:33:EB
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       11B3
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9A90A31E923811F188519DFCCE1D38B0.roa
Signing time:             Fri 07 Aug 2026 08:18:44 +0000
ROA not before:           Fri 07 Aug 2026 08:18:40 +0000
ROA not after:            Mon 06 Nov 2028 08:18:40 +0000
asID:                     207990
IP address blocks:        161.123.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4531 (0x11b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug  7 08:18:40 2026 GMT
            Not After : Nov  6 08:18:40 2028 GMT
        Subject: CN=6a7594e4-a2ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:31:69:89:f1:6a:0a:4b:76:19:45:c7:bd:fa:
                    d4:e5:06:c4:0c:b0:be:01:96:20:0b:de:6a:33:6c:
                    36:b6:60:34:15:19:43:5e:bd:8e:07:53:65:f6:d6:
                    24:2b:21:5d:f8:3e:77:f3:79:4a:e6:30:3e:f7:98:
                    10:e7:89:9a:00:34:7f:3d:1e:8a:25:04:1e:94:ff:
                    4a:26:27:b0:50:d9:af:d5:2b:2b:4a:82:db:fb:6d:
                    2d:7a:95:60:c4:49:a3:6c:05:35:1d:ac:1e:63:ec:
                    6c:23:7d:ef:a2:75:17:5d:b1:5f:15:3a:02:7c:ee:
                    40:f2:b1:86:69:0b:61:71:ad:d4:4c:91:3f:6c:de:
                    e8:66:e9:be:df:52:cb:85:ac:a1:ec:b2:32:e0:cb:
                    10:e4:e9:c6:a2:5d:28:4f:7e:10:ef:b6:53:df:4d:
                    ab:73:7f:fc:56:65:aa:40:52:e9:e3:47:5e:b9:13:
                    66:82:21:f2:d0:51:a2:38:04:9b:6d:a0:e2:35:e6:
                    42:07:78:2f:3e:ae:55:c2:75:a2:9c:b6:0c:fd:b9:
                    3e:17:7a:89:b3:1e:cf:a3:d4:8c:4a:73:de:7a:f7:
                    0f:d9:5b:b8:45:bc:0a:f4:b4:c1:8c:1f:1e:09:5d:
                    c7:0d:aa:dc:26:0c:9d:6b:16:2f:98:4c:37:0f:5b:
                    97:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:E7:52:57:26:44:2B:78:79:8E:A7:B9:78:C9:18:CB:04:5F:33:EB
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/9A90A31E923811F188519DFCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:80:f7:3d:79:9c:42:87:c6:dc:a0:51:86:a1:14:c1:84:fe:
         9e:38:a6:27:be:69:9c:84:dc:f8:1a:ff:5f:18:9c:e0:2b:94:
         f2:18:81:92:3c:69:29:60:ab:30:cc:76:45:45:12:b2:d7:38:
         7e:2d:a0:07:6a:c8:e2:2e:c3:f5:38:26:bf:d5:5e:b0:5e:75:
         bc:96:93:d4:43:99:d1:52:02:35:b8:5f:71:89:0e:9a:dd:55:
         81:a3:b2:ca:7f:b4:9d:79:74:15:6a:69:1c:40:5c:c5:36:47:
         2e:43:35:9b:26:16:63:12:5f:7b:86:95:c3:26:8a:65:e1:ec:
         5d:8c:18:68:ed:cd:b4:88:26:a6:5b:5e:8c:28:f2:a5:ba:02:
         90:71:fb:c3:93:44:b7:27:0b:a0:54:dd:24:5b:e8:da:18:bc:
         0b:74:2b:c3:7b:49:86:7c:11:53:27:3c:32:97:51:18:ab:ba:
         6c:86:e6:c6:f3:44:3c:6a:61:3e:b4:df:41:5d:5d:27:03:ed:
         68:a6:da:dc:30:de:2c:2a:95:88:90:58:fc:c6:92:cf:01:a3:
         b8:d4:35:32:86:f0:10:7d:cc:c2:9f:c6:06:f8:f7:d9:15:45:
         97:15:73:10:f8:ba:4b:ba:2c:6d:08:60:74:0c:73:20:e9:f1:
         10:8e:11:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----