Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CA33D65290F511F1A67AEBCFCE1D38B0.roa
File:                     CA33D65290F511F1A67AEBCFCE1D38B0.roa (raw, json)
Hash identifier:          nXf5yYSRSswOwV6UEhDGChI5z8BJB/oKFY/f3EDTgu8=
Subject key identifier:   67:85:CA:24:C5:3E:46:E8:FC:B0:C8:A0:B4:66:01:6C:FF:FC:13:1A
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       1190
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CA33D65290F511F1A67AEBCFCE1D38B0.roa
Signing time:             Wed 05 Aug 2026 17:47:56 +0000
ROA not before:           Wed 05 Aug 2026 17:47:52 +0000
ROA not after:            Mon 06 Nov 2028 17:47:52 +0000
asID:                     207990
IP address blocks:        161.123.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4496 (0x1190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug  5 17:47:52 2026 GMT
            Not After : Nov  6 17:47:52 2028 GMT
        Subject: CN=6a73774c-aeb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:59:b1:25:fa:73:6f:8b:1e:a6:ad:0a:cc:
                    92:02:1f:d6:cf:c4:ad:5d:35:c7:ae:cf:d4:35:d8:
                    55:57:8e:2d:0b:ec:4c:a5:16:4d:15:71:81:25:b5:
                    45:2f:72:0f:12:db:ce:96:cc:2e:60:7d:98:d2:33:
                    e2:29:9d:c2:e2:07:d3:14:02:2f:13:4d:23:73:19:
                    43:01:8a:03:2f:f5:10:b9:11:c7:fb:23:ee:d8:18:
                    15:b0:10:47:44:a7:20:af:bc:41:b3:b1:10:18:c9:
                    40:bd:62:f7:ec:05:49:77:34:c6:53:e7:f5:e7:70:
                    e0:c8:fb:a1:04:28:c3:fe:9a:84:c2:06:e3:57:84:
                    f8:93:8c:63:6b:bd:02:14:5c:eb:9f:1a:1d:82:0e:
                    ac:df:ac:57:b0:8a:51:d7:26:4d:8b:ed:c2:e6:1f:
                    10:1a:96:a3:e2:7e:23:47:a0:42:4f:48:82:d7:b3:
                    a8:04:e4:00:64:e6:dc:06:27:bd:0c:2d:dc:20:c6:
                    e8:97:d7:08:ee:3d:f3:c2:96:29:d9:75:7e:b1:95:
                    b0:47:da:ac:d3:d4:42:d4:43:06:1c:b3:6d:dd:5e:
                    b2:af:a2:a6:01:10:ba:80:f7:95:71:89:95:36:2c:
                    51:d0:11:da:b5:72:81:f7:9d:57:ef:0a:cd:14:33:
                    13:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:85:CA:24:C5:3E:46:E8:FC:B0:C8:A0:B4:66:01:6C:FF:FC:13:1A
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CA33D65290F511F1A67AEBCFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:e0:b8:06:80:94:c5:6e:c7:b1:54:37:61:28:35:00:f2:87:
         c8:c5:a2:b2:84:97:5b:38:ea:5e:97:5b:40:85:b7:25:31:a2:
         9f:e3:f5:39:e5:65:40:4e:12:db:08:27:0d:a1:45:7d:b4:38:
         9c:22:fc:ce:2d:ed:46:f1:df:f5:d6:7f:23:ad:21:72:72:40:
         7b:fc:24:64:1e:7d:1a:7d:ae:58:e1:49:08:10:78:38:2d:24:
         ec:2d:91:c3:d1:06:99:ab:23:92:f1:a2:f0:f5:ea:26:da:13:
         fe:86:0c:f5:61:7e:a8:62:63:f3:74:c8:a1:33:4c:0e:c5:9e:
         0d:99:f7:0f:e4:bf:1b:84:9d:d9:ad:4b:1d:ed:43:37:9b:1c:
         d3:c7:01:dc:50:d7:36:58:b2:db:bb:53:1c:21:41:a6:7a:6e:
         a7:2e:9e:51:c4:c7:9a:32:d4:e2:43:84:6f:85:c7:8c:8c:3e:
         7b:bf:8f:46:77:92:be:af:5e:d0:6c:f0:e4:8e:16:b6:f8:0b:
         cc:67:30:f3:7b:1b:8b:aa:7f:32:b9:82:8d:27:35:03:d3:2c:
         89:e6:c5:54:cb:a4:89:6a:db:31:80:ea:0d:f9:36:73:06:cf:
         e4:b2:6f:3f:26:46:ff:6e:29:fd:34:de:73:b3:40:51:e9:28:
         cc:89:2b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----