Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3623C61/BD63D7BCDBB711F1B38613D3CE1D38B0/F561D4C0DBBC11F1AA3E99F3CE1D38B0.roa
File:                     F561D4C0DBBC11F1AA3E99F3CE1D38B0.roa (raw, json)
Hash identifier:          hDlGdxO93vG0XWkk6ZF7Hq9Qv8B8be1OuCR0CAthnlA=
Subject key identifier:   11:EA:0C:7D:59:27:DA:74:8F:6A:64:66:5A:8A:8C:29:BB:B4:5D:8E
Certificate issuer:       /CN=F3623C61AR/serialNumber=F0973CB6B5FACDE8E8F03C9059868DBF49010537
Certificate serial:       02
Authority key identifier: F0:97:3C:B6:B5:FA:CD:E8:E8:F0:3C:90:59:86:8D:BF:49:01:05:37
Authority info access:    rsync://rpki.afrinic.net/repository/arin/8Jc8trX6zejo8DyQWYaNv0kBBTc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623C61/BD63D7BCDBB711F1B38613D3CE1D38B0/F561D4C0DBBC11F1AA3E99F3CE1D38B0.roa
Signing time:             Sun 08 Nov 2026 21:40:04 +0000
ROA not before:           Sun 08 Nov 2026 21:39:59 +0000
ROA not after:            Mon 08 Nov 2027 21:39:59 +0000
asID:                     37193
IP address blocks:        164.160.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623C61/BD63D7BCDBB711F1B38613D3CE1D38B0/8Jc8trX6zejo8DyQWYaNv0kBBTc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623C61/BD63D7BCDBB711F1B38613D3CE1D38B0/8Jc8trX6zejo8DyQWYaNv0kBBTc.mft
                          rsync://rpki.afrinic.net/repository/arin/8Jc8trX6zejo8DyQWYaNv0kBBTc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623C61AR, serialNumber=F0973CB6B5FACDE8E8F03C9059868DBF49010537
        Validity
            Not Before: Nov  8 21:39:59 2026 GMT
            Not After : Nov  8 21:39:59 2027 GMT
        Subject: CN=6af0ec34-0def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:00:4f:99:20:4a:dc:02:23:f9:4e:01:4b:cb:
                    cc:22:24:a7:75:c3:5a:97:13:51:14:23:74:5e:f6:
                    74:7f:03:a3:2d:62:9c:38:df:76:e1:3f:05:ff:f1:
                    72:87:21:a5:1a:be:6e:a0:2e:1e:89:c8:de:2e:40:
                    62:76:65:4d:53:b3:17:3d:8a:0f:0f:98:80:bc:28:
                    19:17:4a:59:ca:73:1b:11:cd:4c:81:51:be:50:49:
                    53:4b:00:a7:cb:78:9c:51:2a:7c:74:c3:7c:46:91:
                    e5:7e:fc:94:f0:03:a3:90:53:5e:7c:47:7d:08:8c:
                    9f:bf:8b:6a:2d:9a:2f:43:26:3a:80:b7:72:f9:90:
                    dd:39:75:0e:53:42:bf:0b:58:e0:21:5a:8c:95:52:
                    08:d7:d9:ab:b5:02:c1:51:37:aa:cf:de:fe:94:cf:
                    4a:2b:10:ee:b1:22:30:30:cf:89:d2:c8:3d:cd:fb:
                    95:3d:4a:07:7c:7a:29:ae:aa:95:0e:55:b8:9a:95:
                    6e:41:47:d6:1a:ca:0e:b7:5d:e3:c6:da:b9:42:ed:
                    c3:70:a9:bd:55:13:3a:5b:78:d9:1f:31:a8:9d:31:
                    52:93:9b:e7:ba:7d:e8:7e:a5:4c:65:c1:50:34:c6:
                    ac:0b:8c:b6:77:f0:55:5d:c2:4f:d0:d3:bb:c2:9e:
                    bf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EA:0C:7D:59:27:DA:74:8F:6A:64:66:5A:8A:8C:29:BB:B4:5D:8E
            X509v3 Authority Key Identifier:
                keyid:F0:97:3C:B6:B5:FA:CD:E8:E8:F0:3C:90:59:86:8D:BF:49:01:05:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C61/BD63D7BCDBB711F1B38613D3CE1D38B0/8Jc8trX6zejo8DyQWYaNv0kBBTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/8Jc8trX6zejo8DyQWYaNv0kBBTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C61/BD63D7BCDBB711F1B38613D3CE1D38B0/F561D4C0DBBC11F1AA3E99F3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.160.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:19:bf:df:01:62:4f:07:9b:0a:98:bc:fd:3f:ab:ad:df:7a:
         c9:8f:95:7f:3d:1a:d4:f3:54:3b:2a:cf:29:8a:35:67:c6:6b:
         d8:c0:e1:25:7b:05:a4:28:a9:67:70:71:65:b0:0d:cb:2b:1c:
         99:51:49:51:85:67:6c:ab:76:79:7e:28:4b:ef:4b:51:3a:e5:
         ba:f6:14:40:14:b1:ed:cb:1d:0a:b8:e5:f4:a0:d8:4b:41:5e:
         d2:96:39:e5:1e:e3:3a:f3:03:e6:2f:2d:ec:34:c4:5e:52:ee:
         52:2e:b0:ac:c2:c4:77:33:92:cf:e2:61:9d:d7:75:81:64:58:
         4c:d4:fd:df:6b:6c:ce:fb:4f:cb:b8:e3:14:8a:3d:72:23:0c:
         66:7a:e4:21:c4:2f:c8:06:a0:a4:e7:7a:58:c1:fd:42:d4:b0:
         c5:30:26:e5:73:32:73:32:a2:1a:68:5a:db:86:a2:6d:45:c9:
         13:7f:01:2f:5d:d7:bd:b5:63:4a:9e:73:bd:f8:27:d1:aa:8d:
         1e:b0:54:5b:97:b4:34:19:b4:eb:4c:75:e6:eb:e8:1c:55:4b:
         c2:82:d2:76:64:24:15:0d:bf:91:7f:3a:60:ef:66:20:11:64:
         f1:15:53:57:41:df:10:7e:7c:3e:eb:ff:8c:c5:58:f7:ac:30:
         31:f8:64:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----