Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/5F3603A4962A11F1933886E0CE1D38B0.roa
File:                     5F3603A4962A11F1933886E0CE1D38B0.roa (raw, json)
Hash identifier:          KMBACeJyVBJ0puCbfz/1XEtdPxL3K0XtxQ8Urj+oW2Q=
Subject key identifier:   B2:BF:80:4C:AF:3A:9A:A9:AC:9A:6B:A9:20:A6:AC:83:C6:20:E0:26
Certificate issuer:       /CN=F366DC11AR/serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
Certificate serial:       0927
Authority key identifier: 7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/5F3603A4962A11F1933886E0CE1D38B0.roa
Signing time:             Wed 12 Aug 2026 08:46:56 +0000
ROA not before:           Wed 12 Aug 2026 08:46:52 +0000
ROA not after:            Wed 31 Dec 2031 08:46:52 +0000
asID:                     328638
IP address blocks:        160.226.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                          rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 01:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2343 (0x927)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AR, serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
        Validity
            Not Before: Aug 12 08:46:52 2026 GMT
            Not After : Dec 31 08:46:52 2031 GMT
        Subject: CN=6a7c3300-2985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:b1:e2:ab:1d:e6:fd:87:44:33:9f:ab:2b:
                    8e:0a:2f:21:7f:26:3c:a2:06:97:9c:eb:61:e4:89:
                    68:07:81:9f:d6:b0:fc:dc:e8:70:3a:63:ed:ab:e6:
                    9e:ed:d2:e7:3c:fc:d0:b2:e7:e1:29:75:a8:d2:fa:
                    20:6f:9a:f5:e3:b3:82:0b:a0:3b:de:94:ad:9e:de:
                    e8:bf:22:4b:9c:49:b2:07:0f:0b:61:cf:ec:55:96:
                    c7:7b:f5:66:24:f5:72:fe:a8:88:61:b0:3a:06:4d:
                    54:31:f2:8a:70:4b:c8:86:36:22:de:28:31:41:42:
                    9a:69:20:7e:3a:0b:1e:84:f5:01:b9:9b:87:5f:b0:
                    41:77:22:76:a4:86:3e:d7:7c:07:c9:90:9b:be:b5:
                    12:cb:08:bc:88:60:94:fa:57:ed:03:36:f4:c7:5e:
                    d5:72:37:78:50:65:6e:a6:38:a4:cf:cf:96:96:b6:
                    a6:94:7c:f9:be:4c:d4:23:0f:ec:05:e0:a2:86:7f:
                    19:d1:33:58:8f:cf:0e:36:24:43:cb:4a:7a:12:e0:
                    90:10:00:8d:58:8a:b6:87:8d:f4:ff:b8:9e:49:06:
                    93:b4:ca:9c:59:aa:f2:c7:de:dc:d6:4b:82:9f:da:
                    3d:16:4a:64:e7:b4:3b:09:94:60:e2:34:cd:91:4d:
                    e3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:BF:80:4C:AF:3A:9A:A9:AC:9A:6B:A9:20:A6:AC:83:C6:20:E0:26
            X509v3 Authority Key Identifier:
                keyid:7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/5F3603A4962A11F1933886E0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.226.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a3:da:0e:59:0e:c5:93:1a:d4:17:72:fb:08:8a:ea:cc:4d:31:
         86:78:62:8d:46:22:80:cd:1e:57:2a:30:00:46:99:15:bb:95:
         49:55:f0:e6:38:74:53:c7:96:38:ea:b7:05:74:b5:c0:e1:ba:
         f4:af:cc:28:b8:15:d6:7e:26:53:9f:67:46:0b:5a:15:50:3b:
         e1:ec:3a:ef:2b:bf:85:33:9a:f3:e6:64:1c:c2:16:51:6c:73:
         8d:dd:6b:f5:1d:e1:7d:cd:32:75:5c:df:51:4c:a7:66:f4:53:
         f2:aa:72:33:7d:2e:12:99:e9:de:7f:f3:ed:3e:68:eb:69:7f:
         10:e1:42:3e:cc:57:72:42:45:0b:15:8f:6b:49:63:55:f0:5e:
         ca:84:8d:f3:c5:36:c7:53:6f:4d:db:5a:52:f7:72:2e:40:bb:
         02:b7:4b:31:6c:22:49:2e:2e:9a:58:7f:21:95:ca:3a:2e:4e:
         29:6d:1d:a4:55:ff:55:cd:4e:60:52:97:b5:a9:b4:16:24:08:
         bb:9a:16:62:d1:18:fe:ed:23:82:a6:5e:c2:c2:eb:61:57:0f:
         77:84:2b:98:90:05:59:b2:c8:b9:cb:2b:7c:00:fc:4a:86:a4:
         56:c0:30:c6:f3:14:02:6e:95:e1:b2:c1:f7:bd:7e:97:cf:28:
         4b:1b:c3:f1
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCScwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkRDMTFBUjExMC8GA1UEBRMoN0Y5RUY0MzZCMzFFNTkyMDg5MDYzQzFFNkM0MzdD
RDJDM0ZFQTA0QjAeFw0yNjA4MTIwODQ2NTJaFw0zMTEyMzEwODQ2NTJaMBgxFjAU
BgNVBAMTDTZhN2MzMzAwLTI5ODUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHErHiqx3m/YdEM5+rK44KLyF/JjyiBpec62HkiWgHgZ/WsPzc6HA6Y+2r
5p7t0uc8/NCy5+EpdajS+iBvmvXjs4ILoDvelK2e3ui/IkucSbIHDwthz+xVlsd7
9WYk9XL+qIhhsDoGTVQx8opwS8iGNiLeKDFBQpppIH46Cx6E9QG5m4dfsEF3Inak
hj7XfAfJkJu+tRLLCLyIYJT6V+0DNvTHXtVyN3hQZW6mOKTPz5aWtqaUfPm+TNQj
D+wF4KKGfxnRM1iPzw42JEPLSnoS4JAQAI1YiraHjfT/uJ5JBpO0ypxZqvLH3tzW
S4Kf2j0WSmTntDsJlGDiNM2RTeNnAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUsr+A
TK86mqmsmmupIKasg8Yg4CYwHwYDVR0jBBgwFoAUf570NrMeWSCJBjwebEN80sP+
oEswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZEQzExLzk5NTk0NkJDOTY3ODExRUE4Nzk5OTU1QUY4QUVBMjI4L2Y1NzBO
ck1lV1NDSkJqd2ViRU44MHNQLW9Fcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2Y1NzBOck1lV1NDSkJqd2ViRU44MHNQLW9Fcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjZEQzExLzk5NTk0NkJDOTY3ODExRUE4Nzk5OTU1QUY4QUVB
MjI4LzVGMzYwM0E0OTYyQTExRjE5MzM4ODZFMENFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBASg4qAwDQYJKoZIhvcNAQELBQAD
ggEBAKPaDlkOxZMa1Bdy+wiK6sxNMYZ4Yo1GIoDNHlcqMABGmRW7lUlV8OY4dFPH
ljjqtwV0tcDhuvSvzCi4FdZ+JlOfZ0YLWhVQO+HsOu8rv4UzmvPmZBzCFlFsc43d
a/Ud4X3NMnVc31FMp2b0U/KqcjN9LhKZ6d5/8+0+aOtpfxDhQj7MV3JCRQsVj2tJ
Y1XwXsqEjfPFNsdTb03bWlL3ci5AuwK3SzFsIkkuLppYfyGVyjouTiltHaRV/1XN
TmBSl7WptBYkCLuaFmLRGP7tI4KmXsLC62FXD3eEK5iQBVmyyLnLK3wA/EqGpFbA
MMbzFAJuleGywfe9fpfPKEsbw/E=
-----END CERTIFICATE-----