Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/347202C2BA9611F1980F7AC6CE1D38B0.roa
File:                     347202C2BA9611F1980F7AC6CE1D38B0.roa (raw, json)
Hash identifier:          cJzjMOLxH3+R7U3A/QQIBIjMuFPoegvdq2XqvWT9nTA=
Subject key identifier:   FA:6A:24:90:9F:69:D8:4A:0E:07:48:F5:D3:1A:17:51:F6:59:57:F6
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0DEE
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/347202C2BA9611F1980F7AC6CE1D38B0.roa
Signing time:             Sun 27 Sep 2026 17:09:32 +0000
ROA not before:           Sun 27 Sep 2026 17:09:28 +0000
ROA not after:            Wed 31 Dec 2036 17:09:28 +0000
asID:                     834
IP address blocks:        165.49.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 10:51:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3566 (0xdee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Sep 27 17:09:28 2026 GMT
            Not After : Dec 31 17:09:28 2036 GMT
        Subject: CN=6ab94dcb-6bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ec:33:3e:a3:b4:ea:6e:6b:34:59:80:db:f6:
                    ae:01:3a:6e:1f:3e:1d:59:f7:43:10:72:b3:da:92:
                    9a:1f:16:95:fa:a1:c0:48:fa:87:89:e3:91:9a:f5:
                    90:0c:5b:77:28:8b:2c:fe:a3:ec:95:ed:db:98:5a:
                    36:c4:14:ae:1b:80:60:cd:54:83:89:87:94:04:c8:
                    e8:b8:e5:b5:f0:ec:cc:5d:58:66:ca:c4:f1:b5:23:
                    13:c8:fc:76:f2:34:4c:db:0c:58:47:4d:51:0a:85:
                    31:67:6b:5f:f3:64:97:6d:2b:fb:e2:79:f7:eb:80:
                    de:14:8c:8a:65:21:ad:d5:7f:21:5c:a4:d5:6a:91:
                    85:4b:be:51:51:27:8e:78:c6:3c:49:2f:f9:7d:ce:
                    b4:ba:88:37:40:26:2f:62:f3:1f:50:0d:60:59:94:
                    b8:d2:f5:c9:8a:3f:c2:bc:91:09:75:f4:ca:e0:b0:
                    20:f6:12:97:98:f6:3c:eb:ba:e7:a4:70:ca:18:88:
                    ea:49:e4:78:2e:0f:48:5d:ff:f2:7c:21:f8:e0:2d:
                    e0:5c:64:12:86:8a:99:b0:4c:05:1b:20:76:20:03:
                    b5:02:6d:1d:2a:f5:61:0c:90:25:1a:3b:e4:40:03:
                    10:2d:c6:1d:28:be:05:25:6d:fc:96:d8:be:33:63:
                    db:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:6A:24:90:9F:69:D8:4A:0E:07:48:F5:D3:1A:17:51:F6:59:57:F6
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/347202C2BA9611F1980F7AC6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:bc:19:49:8f:ef:3f:05:e6:e7:68:ce:d8:bd:da:3b:4d:71:
         b8:98:d5:7c:d8:32:d4:d7:3b:be:b5:1a:52:23:0e:5e:2b:e7:
         92:0b:6a:7d:64:df:95:ce:ac:db:36:93:ec:f2:8f:5c:8e:37:
         a3:1e:61:b6:e8:a1:2e:67:58:a3:e0:77:8d:ff:1e:1e:8c:09:
         8b:51:ab:73:38:5a:7e:49:33:81:bd:47:50:a8:6b:a5:95:4f:
         0e:9d:f1:b0:ea:c6:48:fa:6a:b6:63:86:13:b8:b8:74:a7:9b:
         61:21:1e:7e:f8:a7:b9:a5:f4:bf:b1:31:d7:e7:89:f2:1d:9d:
         27:21:6d:36:49:39:35:dc:43:6b:0f:bd:f6:a7:44:03:c3:f3:
         09:b1:d4:3a:69:8e:0a:6b:a2:7b:2f:a7:26:65:90:9a:d5:ac:
         15:3c:38:e4:a8:74:0e:af:aa:59:65:b3:96:e6:ba:88:c3:50:
         cf:7d:3c:b5:eb:61:45:5b:60:be:e5:f4:61:13:b3:e6:e5:95:
         f4:e7:2d:4b:98:37:5f:1d:d7:9e:6c:c1:0b:52:e0:c8:26:33:
         ff:4e:76:7a:0a:d9:38:e7:0a:61:6e:f0:ca:20:7c:c9:06:62:
         75:80:77:60:11:0c:89:3b:0e:5d:28:b0:8c:b3:66:0b:21:d7:
         8c:05:ef:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----