Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E2835B8E923911F1A450D004CF1D38B0.roa
File:                     E2835B8E923911F1A450D004CF1D38B0.roa (raw, json)
Hash identifier:          EGpcbKwsFysxor4dnu0SpC+nhmXErg/OhWKdMDIXGh0=
Subject key identifier:   C4:6C:58:D0:F1:A3:81:39:BB:72:9A:CA:44:8E:19:83:50:71:CA:3F
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       11B9
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E2835B8E923911F1A450D004CF1D38B0.roa
Signing time:             Fri 07 Aug 2026 08:27:54 +0000
ROA not before:           Fri 07 Aug 2026 08:27:50 +0000
ROA not after:            Thu 07 Dec 2028 08:27:50 +0000
asID:                     207990
IP address blocks:        161.123.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4537 (0x11b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug  7 08:27:50 2026 GMT
            Not After : Dec  7 08:27:50 2028 GMT
        Subject: CN=6a75970a-6c0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4e:52:08:00:ef:3b:eb:28:20:47:61:d6:68:
                    f1:df:cf:3c:25:83:fe:b5:1d:a2:31:24:9c:e7:36:
                    35:8b:b8:d6:d0:37:77:28:7c:12:7d:47:76:15:40:
                    5e:c7:18:6f:65:d3:1b:f5:b1:7b:20:4b:a5:a3:13:
                    c5:6a:3b:b4:cb:f5:09:36:84:9d:30:c7:67:89:45:
                    ce:d0:39:df:3a:c3:04:49:d7:21:e6:e0:4a:b7:9b:
                    b1:5f:09:40:9a:6f:84:19:90:0a:b7:37:c9:87:af:
                    17:5d:ba:61:91:1c:55:6b:b7:c5:e4:6f:e7:b8:a1:
                    3e:47:02:0e:04:f6:9a:bd:91:a1:29:4a:c5:65:a6:
                    5e:aa:f3:71:8b:aa:4b:9a:7d:b4:fc:63:88:13:91:
                    21:6f:bb:62:bf:c3:1d:ea:60:61:ed:14:36:6e:96:
                    e8:f9:37:e4:af:5c:cf:c9:30:3f:1f:2c:59:67:09:
                    c2:a2:c9:e6:b3:82:29:05:9c:35:dd:e2:fb:21:a5:
                    f4:7c:68:12:7c:21:71:9d:04:28:7f:46:cb:47:73:
                    06:38:49:03:4f:6f:b7:fe:d7:c9:08:60:59:0b:cb:
                    be:07:ad:1c:89:56:dc:1a:25:01:24:fa:33:f2:03:
                    1d:53:d6:36:ce:5a:9e:fc:7f:bf:66:b5:0b:21:d6:
                    3e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6C:58:D0:F1:A3:81:39:BB:72:9A:CA:44:8E:19:83:50:71:CA:3F
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/E2835B8E923911F1A450D004CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:4d:18:66:b1:f0:26:c1:5c:86:76:17:09:9a:24:00:a1:19:
         ea:87:6a:f8:6e:92:a1:a8:31:c8:f3:79:ee:48:14:24:02:5c:
         c0:9e:b2:25:e8:68:4b:59:45:4d:55:f4:76:fb:fd:09:30:18:
         ac:7b:c0:23:e9:cc:93:4f:45:65:95:05:5a:29:3b:a3:ff:54:
         f5:11:f1:78:63:82:68:e7:02:0e:b9:eb:8f:cf:b0:8d:15:17:
         44:17:3e:1e:78:36:68:17:62:33:24:62:5e:81:0c:77:7a:6c:
         bf:7f:05:96:00:43:82:ae:0b:c5:d5:8c:80:99:3b:a3:df:9d:
         b2:b2:9c:1f:b3:68:b3:73:3a:57:f5:1b:83:74:e7:47:a5:43:
         0e:77:32:d7:c1:9a:dd:06:97:8d:9a:ab:57:3c:15:e1:14:b8:
         78:f5:20:18:ab:d4:bd:a0:dc:a6:1c:17:33:b8:d6:82:9d:85:
         2a:57:e2:77:34:f4:f5:f1:dc:b6:b7:54:47:16:20:51:8c:65:
         94:7b:82:9c:a2:f6:12:84:58:d8:a5:80:a9:72:7b:fa:a9:c3:
         0f:62:00:e4:82:a3:ad:d6:82:b1:67:2d:3e:d5:2e:65:7e:48:
         64:45:1e:db:b9:71:38:8b:e4:fe:f1:11:af:58:c3:f2:2a:32:
         34:a9:c9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----