Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/572B0E1EBB3411F1A64B7DD3CE1D38B0.roa
File:                     572B0E1EBB3411F1A64B7DD3CE1D38B0.roa (raw, json)
Hash identifier:          oIs4yuXi4euWEmBdHXaTivtw8E4cUSC8hVVNBIEfAp8=
Subject key identifier:   F2:FA:6C:99:19:99:20:76:A5:99:13:DA:40:C4:97:30:9F:BB:1E:E8
Certificate issuer:       /CN=F3610D4EAF/serialNumber=66545216D4FFC80389DA19CB321AE07A8AF5EBDC
Certificate serial:       26
Authority key identifier: 66:54:52:16:D4:FF:C8:03:89:DA:19:CB:32:1A:E0:7A:8A:F5:EB:DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZlRSFtT_yAOJ2hnLMhrgeor169w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/572B0E1EBB3411F1A64B7DD3CE1D38B0.roa
Signing time:             Mon 28 Sep 2026 12:01:30 +0000
ROA not before:           Mon 28 Sep 2026 12:01:26 +0000
ROA not after:            Sun 01 Jan 2040 12:01:26 +0000
asID:                     328290
IP address blocks:        2c0f:5620::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZlRSFtT_yAOJ2hnLMhrgeor169w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 12:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610D4EAF, serialNumber=66545216D4FFC80389DA19CB321AE07A8AF5EBDC
        Validity
            Not Before: Sep 28 12:01:26 2026 GMT
            Not After : Jan  1 12:01:26 2040 GMT
        Subject: CN=6aba571a-f870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5d:76:31:b6:45:ab:21:3c:07:ee:7b:79:13:
                    8a:53:80:34:7d:12:cf:13:a2:49:52:e2:7c:b3:1b:
                    92:47:6c:64:a9:fe:8f:a3:0a:a1:62:d4:4c:d7:40:
                    54:29:fe:d9:dc:75:3d:8b:43:24:31:d9:84:e3:e0:
                    6c:b1:1c:80:7f:4a:27:1c:76:68:38:ef:8d:dc:96:
                    72:ba:0d:40:df:98:8d:14:fd:1b:26:d5:04:db:8e:
                    0c:cc:f0:51:cc:2d:cc:11:6d:44:51:5a:77:d4:c2:
                    fc:ff:eb:f6:c5:c6:5f:2f:55:1f:18:7c:32:68:c2:
                    31:d3:1b:a2:97:bc:6b:02:91:d4:1e:40:62:26:95:
                    4e:9a:c2:c0:88:c7:36:fa:73:bc:66:bf:ef:ce:11:
                    89:65:8c:aa:d0:da:06:39:9b:05:a2:c5:40:a0:3b:
                    1a:6f:93:8d:a3:2e:1d:25:ec:2a:4a:45:f2:be:95:
                    31:70:8a:cc:50:52:ad:4b:7c:e5:6f:92:b7:61:1c:
                    6d:04:7c:57:75:b8:d9:54:16:9f:82:bf:f9:ad:a6:
                    a8:78:a2:4d:4d:f4:1f:9d:0a:be:b0:3b:49:f7:f0:
                    9f:f1:48:65:1b:ea:1c:29:87:87:1a:dc:f7:36:a8:
                    fc:5d:02:27:dd:9e:50:e2:75:17:09:c0:ad:73:f7:
                    aa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FA:6C:99:19:99:20:76:A5:99:13:DA:40:C4:97:30:9F:BB:1E:E8
            X509v3 Authority Key Identifier:
                keyid:66:54:52:16:D4:FF:C8:03:89:DA:19:CB:32:1A:E0:7A:8A:F5:EB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZlRSFtT_yAOJ2hnLMhrgeor169w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/572B0E1EBB3411F1A64B7DD3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2c0f:5620::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:4f:04:bc:d2:47:d7:29:a1:69:c6:19:b5:65:f5:47:56:eb:
         20:cf:32:30:da:34:03:1b:35:a9:79:c2:25:6c:ea:c1:91:44:
         8a:9a:64:a7:69:af:df:0d:14:27:a8:6e:53:be:ec:a0:95:9c:
         6c:ed:84:01:09:2f:aa:dd:66:dc:ba:5f:50:38:01:bb:71:03:
         f9:cc:c1:46:bc:e3:3b:93:a4:b6:a2:c1:5f:ff:c8:d7:a1:08:
         74:21:e7:a4:78:9e:ca:d2:29:d3:4d:43:cf:68:ba:db:bc:aa:
         ff:f0:a1:5e:ce:ba:96:92:0d:42:f1:02:a8:5b:e5:93:7e:a7:
         e2:f6:8f:87:d6:19:f9:e2:76:51:43:7f:31:5e:1c:71:bc:ed:
         eb:7b:53:ab:ec:a7:00:ba:1b:73:ad:14:c0:14:46:9d:14:24:
         28:9e:6e:2f:86:f8:ff:2a:44:60:ec:49:72:2e:c8:34:39:68:
         c0:b5:93:6f:81:d7:04:e1:af:2a:80:b5:5e:1d:90:71:ec:82:
         3c:6a:52:27:d1:31:c7:35:12:db:a7:be:c6:b5:7a:e5:2c:83:
         37:7e:70:4a:71:b8:85:ab:6e:4e:37:f8:da:8c:73:b2:66:b1:
         55:3e:b0:42:07:de:bf:aa:78:9f:e3:ae:73:d1:f0:08:b6:1e:
         aa:87:2e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----