Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/B2906E2E926D11F197EF0BBCCE1D38B0.roa
File:                     B2906E2E926D11F197EF0BBCCE1D38B0.roa (raw, json)
Hash identifier:          1D5Zze4/5MRbI/UMoN9bRfW83r61QPBtLkIKPQ2Cye8=
Subject key identifier:   E4:3D:08:43:0C:7D:8B:F9:40:3B:AE:CA:73:33:D8:68:36:47:E3:EE
Certificate issuer:       /CN=F365E03DAR/serialNumber=0D0A98CA34260482B1B1780EA3210DF485AC0880
Certificate serial:       05CD
Authority key identifier: 0D:0A:98:CA:34:26:04:82:B1:B1:78:0E:A3:21:0D:F4:85:AC:08:80
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/B2906E2E926D11F197EF0BBCCE1D38B0.roa
Signing time:             Fri 07 Aug 2026 14:38:47 +0000
ROA not before:           Fri 07 Aug 2026 14:38:42 +0000
ROA not after:            Sun 29 Aug 2032 14:38:42 +0000
asID:                     328111
IP address blocks:        169.239.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft
                          rsync://rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485 (0x5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E03DAR, serialNumber=0D0A98CA34260482B1B1780EA3210DF485AC0880
        Validity
            Not Before: Aug  7 14:38:42 2026 GMT
            Not After : Aug 29 14:38:42 2032 GMT
        Subject: CN=6a75edf7-b0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:75:1d:7b:d1:d4:23:27:3a:ce:5e:b5:8a:ef:
                    6d:dc:02:31:66:ff:02:c8:c4:75:da:f8:f8:2f:ac:
                    59:ff:55:0c:02:68:a6:bf:b6:ec:62:1f:af:d1:b7:
                    c8:53:fd:cf:26:22:8b:37:a7:79:62:61:26:b4:60:
                    c4:62:4f:80:e6:30:2a:64:2e:a4:53:6e:17:2c:2b:
                    13:00:b4:b2:52:b1:97:21:80:97:70:53:fc:71:b4:
                    9d:01:5a:89:c5:7b:06:92:22:2b:26:22:85:f7:90:
                    2d:39:3a:3b:ad:3e:a2:b7:72:d6:7e:03:27:bb:a3:
                    99:45:23:ee:07:2d:d0:14:69:54:22:22:71:fc:35:
                    02:c8:ac:a9:81:4a:e9:23:88:d9:fa:70:b1:5e:57:
                    a2:d7:34:bf:67:67:51:92:e3:91:8c:c0:4a:85:5a:
                    db:0f:ee:53:c2:bf:3e:23:72:ff:33:6b:11:45:f2:
                    0a:18:f5:45:62:1e:3a:2b:8d:8b:61:a7:25:fa:a6:
                    29:dc:0b:c1:3b:d5:01:29:24:bd:05:1e:b4:4e:82:
                    dd:09:1d:b4:86:c1:3c:55:31:6c:6e:cb:85:cc:f6:
                    e3:d5:5b:dc:76:d1:ef:d9:6d:5a:ac:e5:9f:fd:a9:
                    36:e2:a7:0f:62:d1:08:5f:dc:37:99:33:af:88:5c:
                    a5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3D:08:43:0C:7D:8B:F9:40:3B:AE:CA:73:33:D8:68:36:47:E3:EE
            X509v3 Authority Key Identifier:
                keyid:0D:0A:98:CA:34:26:04:82:B1:B1:78:0E:A3:21:0D:F4:85:AC:08:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/B2906E2E926D11F197EF0BBCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.239.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:26:7e:df:21:a0:39:62:13:99:3f:de:33:0e:c2:2c:1f:41:
         ca:ed:89:c0:82:64:13:15:c0:c9:95:99:7d:76:48:06:1d:45:
         fc:5a:c4:77:41:da:a5:0b:f3:ec:28:dc:73:5f:4b:b0:36:e6:
         f2:89:78:f5:d4:8c:1f:06:8b:da:c9:57:9e:d6:15:7e:7b:51:
         e4:b6:93:e1:83:37:5d:fd:76:f3:64:25:c9:c6:78:6a:fe:34:
         ab:a9:e2:22:a8:2a:4e:78:6e:16:be:b9:c1:1f:b5:b2:2f:c6:
         12:02:68:b7:fa:f7:d4:3f:b0:88:d8:1d:1f:09:fb:30:61:d0:
         19:7a:b7:80:a1:22:42:77:94:4b:c6:41:77:d7:87:d7:a6:b7:
         4a:10:ba:dd:a1:53:49:64:d8:45:bf:03:b6:94:5a:0f:eb:cc:
         2e:e5:a5:bf:38:7f:18:45:b0:a7:19:28:7d:4f:b4:ee:d0:c7:
         8a:71:b7:c3:f3:fb:6c:2e:35:4f:9e:44:e5:13:c6:73:4e:83:
         54:85:f1:6c:1d:ac:68:50:d1:8b:92:3b:e1:45:67:a0:0d:46:
         c6:8e:0c:14:a3:3a:8f:87:a9:4b:ef:46:d6:0c:f0:6b:02:c0:
         85:bd:7f:c8:b3:07:64:22:4f:6f:f3:40:86:d4:b8:68:c5:e9:
         a3:d2:48:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----