Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/EBEC5792923511F1B0D125EFCE1D38B0.roa
File:                     EBEC5792923511F1B0D125EFCE1D38B0.roa (raw, json)
Hash identifier:          qG3325WQ9xvJ9q1+UWCURS+FQuENBteLg84d1v6FKzM=
Subject key identifier:   41:AF:9D:ED:05:D5:40:BC:56:BB:66:DF:BA:1F:58:4B:67:A9:8A:36
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       119E
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/EBEC5792923511F1B0D125EFCE1D38B0.roa
Signing time:             Fri 07 Aug 2026 07:59:32 +0000
ROA not before:           Fri 07 Aug 2026 07:59:28 +0000
ROA not after:            Mon 06 Nov 2028 07:59:28 +0000
asID:                     207990
IP address blocks:        161.123.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4510 (0x119e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Aug  7 07:59:28 2026 GMT
            Not After : Nov  6 07:59:28 2028 GMT
        Subject: CN=6a759064-c926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9d:55:3b:63:c7:2f:88:b1:c9:20:36:d6:0a:
                    7d:f7:a2:70:76:39:c2:01:a3:3f:23:7c:b3:a3:74:
                    81:0c:a3:58:d2:a9:9c:45:9b:10:16:57:0f:ce:78:
                    e5:82:3b:eb:1e:cc:bc:60:42:4d:96:ce:15:6f:26:
                    a2:05:54:0b:59:f8:06:02:b2:01:55:c0:96:e2:84:
                    9a:6b:0c:f4:f8:00:a0:02:4a:50:00:c2:45:16:59:
                    12:17:dc:ba:18:3b:7c:ac:7d:49:a4:eb:e6:ca:2f:
                    ac:60:92:3d:23:be:85:f0:f0:6c:d0:36:72:db:04:
                    e0:5c:e6:ed:91:7c:7c:ed:2a:e8:11:b8:e1:12:40:
                    a3:90:9b:7b:07:4e:be:67:bd:8c:fd:e3:dd:b1:b1:
                    43:54:67:9a:95:aa:8a:7b:85:ff:58:62:e1:7f:bc:
                    d8:0f:37:91:4d:79:41:76:8d:30:2b:a3:2c:1e:0b:
                    2c:66:a0:e2:13:2e:3e:c0:17:a8:61:33:48:3d:79:
                    dd:8e:2b:e6:dd:98:cb:bd:60:53:1e:af:66:87:7b:
                    af:8c:40:e4:3b:d1:4a:0f:f2:a3:f5:db:60:56:90:
                    23:4f:19:0c:e2:01:e1:26:54:75:59:e8:b0:71:08:
                    6d:c4:54:e1:3d:1a:db:44:2a:cb:53:54:27:ad:cb:
                    3f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AF:9D:ED:05:D5:40:BC:56:BB:66:DF:BA:1F:58:4B:67:A9:8A:36
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/EBEC5792923511F1B0D125EFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:28:50:b8:e8:5d:27:0c:a6:cf:f8:0e:aa:b1:55:9e:99:ac:
         56:ce:bb:4d:af:51:d1:42:9c:5e:63:3c:ba:e7:45:03:0a:98:
         d6:86:fe:40:59:c6:86:04:46:a0:6e:7c:be:5f:b8:0b:d1:cc:
         0d:03:43:e9:b8:64:b0:cd:47:79:db:c7:4d:f4:0d:8b:e1:90:
         2c:36:2a:d6:c2:e0:17:9d:47:61:d3:47:85:5c:3d:0f:d5:a4:
         8f:e5:23:ee:44:0c:96:60:d2:67:32:be:70:1b:ba:b9:41:19:
         fb:23:f8:32:03:68:70:79:07:ab:3f:c4:d4:4d:0f:ae:be:d4:
         5f:be:da:a2:96:60:39:aa:61:e8:4d:7f:7a:a9:e8:61:82:d7:
         89:0c:ea:52:c4:3e:72:08:bb:46:46:1d:03:52:65:85:c9:21:
         64:8b:db:65:1b:9f:0a:9a:96:27:1f:e3:08:bc:93:13:4b:c8:
         86:bb:10:48:f4:47:b0:ea:4a:67:3b:c3:f7:a9:b5:ac:a5:0f:
         f6:fa:3e:50:05:6e:28:11:91:99:5f:7c:44:6f:24:fc:aa:d3:
         5f:b4:71:36:40:fb:6a:1b:0a:7d:3b:3c:81:4f:50:cf:22:8f:
         44:9f:79:a1:a1:7c:70:32:26:fd:c6:b4:3d:7f:8e:36:7d:84:
         6a:84:63:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----