Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B97C4F0E90E811F191097502CF1D38B0.roa
File:                     B97C4F0E90E811F191097502CF1D38B0.roa (raw, json)
Hash identifier:          15KpaUyG4lL7aId82OFI8mhWdv0IvuCLAJ8bAnjofm0=
Subject key identifier:   BD:91:14:6E:B6:C5:00:B3:8D:04:94:F6:F0:97:17:FE:51:6F:2A:D6
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       1181
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B97C4F0E90E811F191097502CF1D38B0.roa
Signing time:             Wed 05 Aug 2026 16:14:25 +0000
ROA not before:           Wed 05 Aug 2026 16:14:21 +0000
ROA not after:            Mon 06 Nov 2028 16:14:21 +0000
asID:                     207990
IP address blocks:        161.123.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4481 (0x1181)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug  5 16:14:21 2026 GMT
            Not After : Nov  6 16:14:21 2028 GMT
        Subject: CN=6a736161-aefe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0f:6b:d5:62:a0:c4:c6:f4:e2:4e:a8:0b:61:
                    ef:c5:f3:23:3f:33:f4:93:40:ef:3f:21:d5:37:b0:
                    20:93:9b:65:56:38:34:35:20:89:a1:40:bd:a0:78:
                    65:80:b2:db:de:4d:04:ee:90:3c:1e:e3:ff:10:09:
                    01:f7:de:27:0d:50:77:88:86:a1:1b:ed:0e:34:fe:
                    58:aa:00:85:2a:d0:1c:e0:18:5a:94:f9:bc:2c:03:
                    9b:8a:75:e1:35:42:1f:e9:51:e5:0b:82:0e:4e:a9:
                    5b:e2:3d:bd:49:34:77:dc:25:c5:1a:2f:ff:db:05:
                    0b:25:3f:8a:0c:1e:87:d0:63:0e:28:8d:aa:3e:13:
                    89:be:02:ee:70:62:11:ea:81:05:0f:7b:2a:6b:24:
                    be:43:94:c9:94:80:fd:3e:d5:78:8a:0e:8e:24:3c:
                    66:7e:65:0a:79:1b:82:3b:fa:3f:73:3a:8f:8e:83:
                    f7:0b:06:40:8c:13:7d:88:da:c6:73:97:70:33:c5:
                    5a:7f:26:de:60:d7:9c:fe:03:d7:29:7f:a2:11:c4:
                    2f:78:25:05:45:4e:7f:7d:68:fd:f1:cd:4a:29:be:
                    31:01:83:6e:0e:e8:07:84:85:1a:1e:b9:4f:72:de:
                    43:0f:3f:3d:f0:da:d0:43:b2:32:f9:3c:da:e1:10:
                    d7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:91:14:6E:B6:C5:00:B3:8D:04:94:F6:F0:97:17:FE:51:6F:2A:D6
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/B97C4F0E90E811F191097502CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:52:0f:d5:9f:fb:eb:07:bd:50:97:9f:92:be:c4:d8:3b:ea:
         33:53:9f:4c:0c:97:64:08:65:8d:34:94:b7:f2:5e:11:97:02:
         fb:04:47:2e:2a:28:f6:b4:02:78:7c:7b:65:1c:bf:e7:a6:05:
         ab:2b:51:1a:f2:2f:26:29:20:dc:ac:bc:89:52:70:d6:9a:91:
         f9:f9:c0:ac:ab:74:30:d8:f6:b2:ef:1d:d9:63:6f:7c:34:b4:
         8a:bf:08:a8:bc:94:12:9f:d2:a6:dd:34:d7:09:bb:22:be:cd:
         fc:a8:bb:69:43:84:53:36:34:f3:6c:01:0f:a3:3a:84:54:95:
         7f:bd:9f:39:8a:f2:83:9c:24:2c:37:91:78:4e:1f:68:62:89:
         a9:39:37:97:79:89:16:09:3e:fe:71:52:02:71:12:50:ab:b4:
         f0:ae:c7:47:c6:7a:b2:22:82:f6:93:24:e4:ba:a7:71:ea:51:
         01:e2:c2:aa:84:f5:48:8c:d2:2b:b0:68:b7:95:d1:4b:a0:95:
         7d:ee:aa:eb:b5:f9:5d:73:01:82:00:99:e2:b4:de:d0:f4:37:
         39:43:64:99:ad:01:2c:04:4a:a7:1e:7a:29:84:af:71:f6:66:
         ab:e3:ee:22:83:43:77:1d:fb:5a:72:a4:69:55:f2:4b:2c:e9:
         bc:18:19:ed
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICEYEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBUjExMC8GA1UEBRMoNDRBOUY2OUY0MTQxREE3NkI3MzUzRUIwRDU4MTUy
M0FGRTJCODFFMTAeFw0yNjA4MDUxNjE0MjFaFw0yODExMDYxNjE0MjFaMBgxFjAU
BgNVBAMTDTZhNzM2MTYxLWFlZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDED2vVYqDExvTiTqgLYe/F8yM/M/STQO8/IdU3sCCTm2VWODQ1IImhQL2g
eGWAstveTQTukDwe4/8QCQH33icNUHeIhqEb7Q40/liqAIUq0BzgGFqU+bwsA5uK
deE1Qh/pUeULgg5OqVviPb1JNHfcJcUaL//bBQslP4oMHofQYw4ojao+E4m+Au5w
YhHqgQUPeyprJL5DlMmUgP0+1XiKDo4kPGZ+ZQp5G4I7+j9zOo+Og/cLBkCME32I
2sZzl3AzxVp/Jt5g15z+A9cpf6IRxC94JQVFTn99aP3xzUopvjEBg24O6AeEhRoe
uU9y3kMPPz3w2tBDsjL5PNrhENfPAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUvZEU
brbFALONBJT28JcX/lFvKtYwHwYDVR0jBBgwFoAURKn2n0FB2na3NT6w1YFSOv4r
geEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVBMjI4L1JLbjJu
MEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1JLbjJuMEZCMm5hM05UNncxWUZTT3Y0cmdlRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkZBMTVELzk4MTY2QzVFNjIzNzExRUI5MzFDQjg1OUY4QUVB
MjI4L0I5N0M0RjBFOTBFODExRjE5MTA5NzUwMkNGMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAChexIwDQYJKoZIhvcNAQELBQAD
ggEBABhSD9Wf++sHvVCXn5K+xNg76jNTn0wMl2QIZY00lLfyXhGXAvsERy4qKPa0
Anh8e2Ucv+emBasrURryLyYpINysvIlScNaakfn5wKyrdDDY9rLvHdljb3w0tIq/
CKi8lBKf0qbdNNcJuyK+zfyou2lDhFM2NPNsAQ+jOoRUlX+9nzmK8oOcJCw3kXhO
H2hiiak5N5d5iRYJPv5xUgJxElCrtPCux0fGerIigvaTJOS6p3HqUQHiwqqE9UiM
0iuwaLeV0UuglX3uquu1+V1zAYIAmeK03tD0NzlDZJmtASwESqceeimEr3H2Zqvj
7iKDQ3cd+1pypGlV8kss6bwYGe0=
-----END CERTIFICATE-----