Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CD9DBA66853711F1ABBB9BB9CE1D38B0.roa
File:                     CD9DBA66853711F1ABBB9BB9CE1D38B0.roa (raw, json)
Hash identifier:          liY2BC4FcKXUS4VOrwqsj71PBW5VUgzznlR/YUUsQfg=
Subject key identifier:   B0:C0:BA:D9:AE:82:3B:A2:50:A4:61:13:E2:91:3F:16:DD:F7:A2:B7
Certificate issuer:       /CN=F36FA15DAR/serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
Certificate serial:       112D
Authority key identifier: 44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CD9DBA66853711F1ABBB9BB9CE1D38B0.roa
Signing time:             Tue 21 Jul 2026 19:10:15 +0000
ROA not before:           Tue 21 Jul 2026 19:10:11 +0000
ROA not after:            Sun 21 Jul 2030 19:10:11 +0000
asID:                     61290
IP address blocks:        161.123.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.mft
                          rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 25 Jul 2026 01:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4397 (0x112d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAR, serialNumber=44A9F69F4141DA76B7353EB0D581523AFE2B81E1
        Validity
            Not Before: Jul 21 19:10:11 2026 GMT
            Not After : Jul 21 19:10:11 2030 GMT
        Subject: CN=6a5fc417-6c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:48:44:b9:03:e1:8a:4b:6f:b5:b3:28:af:d2:
                    6b:51:51:5f:a5:1b:16:8b:d0:8d:30:53:c8:99:20:
                    53:38:19:03:89:42:18:6f:fc:60:8c:6e:f4:3f:48:
                    2f:c8:63:0c:15:8f:f0:cb:dd:6e:c4:f5:09:4e:4a:
                    9f:ce:72:5d:01:5c:84:b4:ad:c2:ab:e0:21:29:62:
                    87:4d:ff:ab:cf:9e:46:e9:44:ce:15:93:51:85:33:
                    82:dc:c2:6c:6d:5b:b0:d4:35:6a:4e:94:fa:7d:38:
                    59:d8:8a:6b:30:42:79:a7:a9:c5:7d:ac:b5:a5:69:
                    12:26:00:9d:49:96:41:b1:be:c6:c5:5e:e3:29:62:
                    c2:f1:9a:65:c8:74:76:e1:a8:53:b3:ac:e7:ba:fb:
                    44:7f:92:73:6e:60:62:7a:2a:f5:f7:be:e9:5c:7e:
                    33:8c:5a:48:fa:9c:30:0c:eb:24:a3:8b:04:19:db:
                    29:fa:88:fd:7e:3a:61:22:62:59:b9:25:2e:de:a3:
                    c9:88:17:62:ca:f3:47:21:81:46:82:8e:15:40:4b:
                    a1:9e:10:6e:7f:f5:d6:f9:60:a7:e7:13:c5:9c:0d:
                    d4:35:11:52:c4:65:3c:a9:e3:1b:50:19:9a:66:21:
                    d6:5f:5a:aa:c0:d5:91:41:a4:45:1d:0c:18:82:ed:
                    9b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C0:BA:D9:AE:82:3B:A2:50:A4:61:13:E2:91:3F:16:DD:F7:A2:B7
            X509v3 Authority Key Identifier:
                keyid:44:A9:F6:9F:41:41:DA:76:B7:35:3E:B0:D5:81:52:3A:FE:2B:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/RKn2n0FB2na3NT6w1YFSOv4rgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/RKn2n0FB2na3NT6w1YFSOv4rgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/98166C5E623711EB931CB859F8AEA228/CD9DBA66853711F1ABBB9BB9CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.123.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         10:8c:40:6f:63:25:c6:2b:68:53:13:3e:b1:99:13:98:ab:89:
         96:94:49:80:1f:65:78:9c:58:b6:31:2a:c3:e8:d8:d9:aa:72:
         ce:0c:f8:97:35:67:f8:ab:b7:2c:7c:27:c6:41:6b:e1:50:9e:
         bc:57:d2:22:0c:2d:e9:fa:0b:c4:b4:16:16:36:68:8f:6e:1e:
         8e:a3:70:cc:5f:28:9a:03:7c:c5:ac:8a:ae:1d:5a:db:85:f8:
         67:d4:93:f0:86:45:91:51:03:49:60:27:47:be:22:b8:5f:24:
         c5:81:5c:98:72:bf:a7:15:c8:f5:08:03:2b:da:e8:3f:79:b8:
         49:4b:49:d3:7d:01:58:94:29:f3:b6:55:79:e7:0b:db:75:d9:
         f5:28:6d:8b:da:27:f9:fc:69:7c:e5:98:a3:0d:ff:70:c7:cf:
         3e:f6:65:c7:84:4e:8d:c0:b2:5c:77:2e:b6:ef:5b:2d:63:6d:
         92:2b:28:aa:33:b2:3e:bd:98:54:75:83:c1:d1:73:14:e8:19:
         2c:30:f0:6a:e8:a0:5f:55:53:87:b0:f3:18:e6:53:5b:f5:f9:
         91:f9:e7:b7:53:3c:e7:cd:56:32:ae:fa:0b:7c:ab:c9:a0:6f:
         01:8c:98:24:62:eb:92:1f:42:01:b5:7a:47:8e:41:e9:63:c6:
         80:04:16:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----