Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/D5732EDCA63F11F19349560DCF1D38B0.roa
File:                     D5732EDCA63F11F19349560DCF1D38B0.roa (raw, json)
Hash identifier:          uoex2NMZibdzYxCta8VEsPtoDJtXo0i9+IYVxE8s6Do=
Subject key identifier:   A2:81:FD:6E:36:A1:5F:A2:7E:21:6D:F5:BA:8C:BA:D9:00:1F:A4:96
Certificate issuer:       /CN=F36C8371AR/serialNumber=158B6A2C254C57F47CE2AF511368D9B63CF8E0D2
Certificate serial:       0AC3
Authority key identifier: 15:8B:6A:2C:25:4C:57:F4:7C:E2:AF:51:13:68:D9:B6:3C:F8:E0:D2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/D5732EDCA63F11F19349560DCF1D38B0.roa
Signing time:             Tue 01 Sep 2026 20:00:52 +0000
ROA not before:           Tue 01 Sep 2026 20:00:48 +0000
ROA not after:            Mon 01 Sep 2036 20:00:48 +0000
asID:                     327804
IP address blocks:        160.119.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.mft
                          rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Oct 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2755 (0xac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8371AR, serialNumber=158B6A2C254C57F47CE2AF511368D9B63CF8E0D2
        Validity
            Not Before: Sep  1 20:00:48 2026 GMT
            Not After : Sep  1 20:00:48 2036 GMT
        Subject: CN=6a972ef4-7bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:80:fc:ee:ea:46:eb:22:27:75:55:f3:a4:bd:
                    4d:29:47:83:bf:5f:ba:ca:38:88:26:33:57:12:2b:
                    86:4f:1d:9d:78:3e:68:1c:d2:f8:8a:f3:91:7c:60:
                    da:a1:50:ca:8f:56:0a:98:6a:05:69:b0:1a:98:ab:
                    dd:51:48:2f:d1:45:01:5d:27:4a:04:48:83:9a:90:
                    8b:50:3e:3b:d9:27:b6:ea:9a:16:c7:e6:78:c6:2a:
                    e3:a1:6f:ae:28:83:00:e3:00:5a:fa:91:f5:fe:1a:
                    9f:a0:41:00:77:22:e9:6b:a7:6c:3e:00:1d:c1:ab:
                    88:1c:06:2a:d2:13:34:48:09:87:37:fb:e2:96:6a:
                    f5:c8:a6:d2:b1:6c:85:f8:71:26:0d:8b:45:01:87:
                    0e:ff:8b:e5:a2:10:a9:ca:9f:ee:0b:64:fc:f6:4e:
                    56:b9:30:23:6f:07:de:81:9b:40:e1:39:63:50:78:
                    5a:fc:19:e9:85:f5:f7:39:92:70:e9:1f:bb:66:87:
                    c4:ea:3f:f0:15:1c:b4:8e:c1:d0:21:5d:02:1c:d5:
                    03:41:3c:e1:eb:ef:da:80:f7:f9:9b:14:3b:bf:ca:
                    e0:48:b4:c5:cd:72:52:c1:83:ae:c6:41:97:26:b2:
                    b5:84:05:c7:af:09:89:01:2a:b8:07:83:dc:4f:d4:
                    76:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:81:FD:6E:36:A1:5F:A2:7E:21:6D:F5:BA:8C:BA:D9:00:1F:A4:96
            X509v3 Authority Key Identifier:
                keyid:15:8B:6A:2C:25:4C:57:F4:7C:E2:AF:51:13:68:D9:B6:3C:F8:E0:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/FYtqLCVMV_R84q9RE2jZtjz44NI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FYtqLCVMV_R84q9RE2jZtjz44NI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8371/FD8CE0E87AFA11E9B7D8D33CF8AEA228/D5732EDCA63F11F19349560DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.119.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         71:ae:ce:0f:da:f8:b0:9c:27:34:9e:b7:f2:f7:70:08:c6:a3:
         c1:81:67:e6:3a:a1:42:13:e2:08:bf:cf:d9:88:a8:40:0a:1d:
         a6:ac:7e:00:c0:87:26:ff:7e:21:ad:84:b3:b5:81:3c:db:56:
         df:64:b1:ca:8d:43:fb:85:60:08:36:18:7d:07:7f:c5:5f:0a:
         67:37:e5:57:c8:4e:9e:f5:45:bd:3e:d2:d3:99:6f:6c:9b:96:
         dc:8a:87:06:78:e5:6b:a5:7b:aa:bc:f4:8b:b5:59:74:2d:af:
         60:66:6d:63:56:98:23:c8:e1:23:27:61:25:f2:cc:7b:eb:3e:
         21:ca:77:20:79:50:2f:17:7b:ba:a2:b6:77:45:7e:3b:f7:29:
         df:65:37:2d:a2:57:28:64:dd:ba:30:b4:59:ba:4d:8b:9f:93:
         73:e1:5d:52:6a:4f:ec:ab:fa:78:6f:82:0d:97:0b:c9:e6:f0:
         13:2a:d7:53:30:4a:e6:19:8d:ee:f1:ee:cc:e9:b8:6c:c4:c2:
         f3:1d:4e:1b:be:7f:33:83:c8:7c:ad:65:96:90:56:07:48:53:
         a1:33:c6:4d:58:c4:8e:7b:b9:2f:6b:e9:c1:6d:09:df:dd:ed:
         9d:6f:11:99:73:dd:83:e4:e4:8c:46:3b:1e:a4:bd:a2:02:1b:
         63:79:4e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----