Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/EA392B2490E511F1B5B4F5F1CE1D38B0.roa
File:                     EA392B2490E511F1B5B4F5F1CE1D38B0.roa (raw, json)
Hash identifier:          /OMSfrs8PZOYqWOHV2xrc3MFR6yyQxc/ePbl9mFR6VY=
Subject key identifier:   DA:4C:B1:52:67:55:5E:A1:8E:AF:7C:E3:E8:74:D6:17:B8:DF:F2:2C
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       116C
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/EA392B2490E511F1B5B4F5F1CE1D38B0.roa
Signing time:             Wed 05 Aug 2026 15:54:18 +0000
ROA not before:           Wed 05 Aug 2026 15:54:14 +0000
ROA not after:            Mon 06 Nov 2028 15:54:14 +0000
asID:                     207990
IP address blocks:        161.123.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4460 (0x116c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug  5 15:54:14 2026 GMT
            Not After : Nov  6 15:54:14 2028 GMT
        Subject: CN=6a735caa-3070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:8b:20:da:22:ca:00:56:7b:89:75:04:48:
                    01:7a:ea:5e:23:fe:48:12:a7:68:b1:5e:53:69:fa:
                    71:57:a8:5d:86:be:d4:96:51:2b:32:39:cb:30:1d:
                    8e:44:b5:d8:ad:bb:53:9b:ba:e4:09:81:45:76:40:
                    19:80:27:ff:1d:09:b1:4a:fb:51:c4:83:9d:c9:b9:
                    f8:99:f0:32:78:74:fa:22:39:0d:aa:e7:fe:b7:25:
                    1d:95:64:b5:bb:c4:ca:1d:89:50:2a:fb:b6:0b:b7:
                    2e:9e:31:71:d8:b3:6e:2b:0e:fd:29:62:f9:4b:4c:
                    a3:e8:b2:b5:8c:90:d1:bb:b4:ec:1d:c6:3c:48:61:
                    84:7f:53:ab:d4:8f:d6:03:35:e3:4d:0d:d8:d6:b4:
                    52:b4:f6:fb:5f:c7:bb:55:34:28:ef:2c:04:df:16:
                    b3:4d:d5:aa:12:2b:5c:1d:73:df:a4:51:58:5f:96:
                    ad:d8:a1:01:4a:ea:5e:6b:4e:e6:e0:21:92:16:72:
                    fd:25:8c:8a:8a:16:7f:ee:a0:9a:d0:c8:1f:f3:69:
                    ef:e6:7e:42:19:5a:14:06:8a:f2:74:c4:21:cf:dc:
                    b2:df:de:89:64:82:24:ef:cc:6a:2e:b3:0b:50:3f:
                    de:bc:7b:2e:15:40:ad:1b:ce:23:dc:4f:b2:f7:70:
                    98:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4C:B1:52:67:55:5E:A1:8E:AF:7C:E3:E8:74:D6:17:B8:DF:F2:2C
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/EA392B2490E511F1B5B4F5F1CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:77:8b:74:57:9c:e0:54:d0:5e:cb:b1:21:83:6f:e9:fd:ae:
         46:a3:2d:ce:9f:e5:2b:8a:65:c8:98:6a:84:3a:9a:c5:11:aa:
         bc:a8:2c:07:79:8f:e5:d4:cd:1e:13:62:b3:4b:1f:fe:3e:22:
         21:ac:5c:77:5f:8f:aa:80:73:2f:ee:68:1e:cf:6e:82:2c:71:
         c1:b7:23:ae:36:97:81:6c:be:07:1c:3d:4c:9c:98:c3:90:45:
         77:1e:3a:f6:d5:9f:a5:cc:3a:2f:a9:1b:4c:ee:21:d7:b4:5d:
         b9:e7:b7:ec:8e:0a:2e:28:58:87:3b:84:67:c8:75:15:ed:2e:
         59:9b:3b:c8:d6:ef:4d:53:00:e9:64:dc:b2:2e:f5:d6:68:f3:
         43:cc:d9:8e:38:99:12:90:af:0b:ec:8f:5b:61:fc:2b:93:b5:
         5a:d9:17:d7:3f:5d:61:00:72:8e:11:51:c7:0a:97:cc:cc:72:
         9a:dc:31:1c:20:fe:c2:29:03:9f:d1:c9:4f:c8:8c:43:8a:50:
         b7:8b:e7:bc:d8:77:41:a2:bb:b1:72:bb:09:45:3c:3e:74:b2:
         46:e8:9b:48:d3:6c:da:74:42:48:1b:de:88:28:6e:85:79:01:
         82:6d:ba:0b:72:aa:8b:27:04:79:4f:24:88:9f:5f:c9:95:63:
         42:02:3b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----