Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/53C325DAB8CE11F1B6270EB2CE1D38B0.roa
File:                     53C325DAB8CE11F1B6270EB2CE1D38B0.roa (raw, json)
Hash identifier:          2eSH/8+yMyytmPDw9ssyCrrdv4RN1EBF0oSG2pG4RoY=
Subject key identifier:   6E:68:D7:92:1D:F5:F0:83:E2:6A:73:8E:5C:D0:7C:D2:7A:E5:38:AA
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0DE7
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/53C325DAB8CE11F1B6270EB2CE1D38B0.roa
Signing time:             Fri 25 Sep 2026 10:46:14 +0000
ROA not before:           Fri 25 Sep 2026 10:46:09 +0000
ROA not after:            Wed 31 Dec 2036 10:46:09 +0000
asID:                     834
IP address blocks:        165.49.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3559 (0xde7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Sep 25 10:46:09 2026 GMT
            Not After : Dec 31 10:46:09 2036 GMT
        Subject: CN=6ab650f6-8220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:77:b4:6b:e6:02:47:73:bd:e9:a9:20:66:b8:
                    db:d8:bf:63:53:13:e8:38:28:56:6e:85:5d:64:bb:
                    ac:8c:ee:bf:b0:54:c2:13:6a:02:81:f4:9c:4f:36:
                    43:b2:32:96:39:73:00:0b:3b:82:3a:6a:7d:79:78:
                    62:bc:3a:ab:21:b1:c1:7b:9a:36:1f:dd:0c:7c:d4:
                    af:53:84:f3:05:8e:32:37:86:a7:7f:01:bb:8f:aa:
                    63:2f:73:41:82:38:31:51:9b:c2:0b:af:03:cb:f7:
                    2a:47:0d:48:99:e5:db:16:69:87:aa:0a:92:76:df:
                    5c:f4:86:f8:4d:bb:19:8c:5e:f9:fd:3b:86:b1:03:
                    0d:65:f8:bb:0f:b3:1d:a3:ce:df:61:f4:60:7c:ce:
                    5b:da:b3:e9:bd:b3:fb:e1:e3:9d:b0:76:d1:ff:41:
                    1e:3c:5e:9e:a9:2c:38:1a:e4:ca:27:11:62:96:ce:
                    4f:ca:7c:b2:6a:69:48:d0:90:da:5e:88:68:4a:67:
                    b9:dc:96:58:a7:81:2a:13:e3:78:61:96:55:7a:00:
                    15:74:d0:e2:a1:64:dc:cf:b5:21:0f:59:ea:ed:54:
                    f9:5a:8c:25:fc:69:0c:73:c1:b1:25:66:d9:71:6d:
                    10:0a:a4:84:6e:39:dd:88:a7:80:3f:05:c8:34:92:
                    91:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:68:D7:92:1D:F5:F0:83:E2:6A:73:8E:5C:D0:7C:D2:7A:E5:38:AA
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/53C325DAB8CE11F1B6270EB2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:4d:13:8c:20:e9:51:89:2c:71:cb:ce:2f:7d:40:0c:51:b7:
         63:4e:54:c7:86:08:85:aa:4a:aa:49:ef:8d:1f:01:59:d4:83:
         f0:ac:48:9e:4e:d8:ce:ac:74:e0:b2:44:31:0e:c4:79:e4:eb:
         ca:a0:9d:8b:86:84:b6:86:52:02:42:10:28:95:d3:da:1a:4f:
         5d:40:81:20:8e:d6:74:ea:01:cf:c4:53:e3:42:cd:12:9a:5b:
         3a:78:33:8d:41:2c:40:d2:c9:d3:c8:4d:c2:4c:ea:b4:52:bb:
         60:d1:a4:19:39:72:a4:2e:ff:31:2a:e8:5d:53:8a:a9:0d:4f:
         9c:7e:bb:ec:77:45:6f:6f:b2:2c:db:7d:9e:d1:d9:c2:c8:5d:
         8b:88:ab:1b:3e:5b:da:bb:e8:1e:4b:dd:12:e4:d2:37:ba:3b:
         25:e9:fe:f8:7b:45:9f:df:fb:ea:e5:a9:cf:2c:15:98:a1:1a:
         8a:c1:f1:92:1b:e7:ab:c3:09:68:41:3c:57:b1:01:cf:65:28:
         fb:11:39:30:01:bb:79:76:64:2a:d1:00:73:59:6a:a7:83:ef:
         e2:f7:25:08:13:27:0b:c3:bd:cf:23:fd:a2:14:8e:93:f5:c1:
         44:43:1a:dc:41:75:58:e6:f5:19:b3:20:22:7b:3f:c0:b9:e9:
         28:ea:e8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----