Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/51F67174962F11F188DB07FDCE1D38B0.roa
File:                     51F67174962F11F188DB07FDCE1D38B0.roa (raw, json)
Hash identifier:          C8vjN53fFmtWhX47uFtrZkO/tziLE7NPmO35j+SgWFQ=
Subject key identifier:   5C:07:75:96:BA:EE:D4:9E:0F:45:00:89:EC:36:C6:DB:41:21:3B:63
Certificate issuer:       /CN=F366DC11AR/serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
Certificate serial:       092A
Authority key identifier: 7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/51F67174962F11F188DB07FDCE1D38B0.roa
Signing time:             Wed 12 Aug 2026 09:22:21 +0000
ROA not before:           Wed 12 Aug 2026 09:22:17 +0000
ROA not after:            Wed 31 Mar 2032 09:22:17 +0000
asID:                     328638
IP address blocks:        160.226.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                          rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2346 (0x92a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AR, serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
        Validity
            Not Before: Aug 12 09:22:17 2026 GMT
            Not After : Mar 31 09:22:17 2032 GMT
        Subject: CN=6a7c3b4d-2222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1b:6b:f2:98:cd:f7:c8:79:9d:24:1d:f8:b6:
                    b4:e9:95:9a:c5:bc:89:dd:ab:1f:7e:58:8c:87:d8:
                    d9:55:7a:da:d2:b9:01:77:c0:22:b9:bd:35:d5:81:
                    50:9c:6e:c7:3e:09:95:dc:fb:0c:ad:7f:7e:2e:62:
                    39:4d:66:81:83:57:bf:e9:80:f3:6e:21:5b:b0:b1:
                    61:0f:bd:cb:53:e7:e3:03:3a:9e:92:44:cf:df:c5:
                    b2:83:b0:35:f6:cc:02:d9:59:5b:17:55:f6:58:23:
                    2a:35:36:b5:2d:c3:25:ec:5c:ee:6d:4a:f5:2e:d3:
                    13:f7:b1:d0:cd:c3:01:37:33:e2:15:92:be:75:a2:
                    2f:99:63:69:d9:de:a2:66:0f:bb:a0:55:2d:44:a1:
                    66:4d:2c:d2:e2:74:1f:a4:27:09:d9:c1:c8:cd:05:
                    23:ad:ea:bc:c1:df:9a:da:87:07:c0:fc:5e:bf:6b:
                    26:f4:59:2c:a0:c1:4a:25:bb:e8:9c:a5:80:ce:ba:
                    ec:c7:bc:2b:74:ab:58:65:2f:fb:ed:34:a4:30:b9:
                    27:2a:c5:4c:57:ae:fb:c1:8e:7f:53:1d:2d:5d:1d:
                    f1:13:d8:85:8f:4e:a7:21:26:30:d6:c7:17:10:e6:
                    de:6e:b4:9b:3d:26:e8:95:06:ee:53:fd:60:23:5d:
                    d7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:07:75:96:BA:EE:D4:9E:0F:45:00:89:EC:36:C6:DB:41:21:3B:63
            X509v3 Authority Key Identifier:
                keyid:7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/51F67174962F11F188DB07FDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.226.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         e8:e6:5c:d6:2b:b0:f0:6a:6a:96:c4:42:17:00:21:f7:71:07:
         7c:7f:0a:58:61:ad:c4:42:0b:ca:8f:a7:b1:8c:fa:d7:d2:c2:
         cb:86:e7:05:c6:09:f4:0b:02:32:fa:db:4e:fc:b5:c4:78:0b:
         0c:27:8c:92:b6:50:b2:b6:89:2c:ed:eb:d6:9f:c1:83:f0:7d:
         dd:36:5a:c3:b7:b1:90:2e:c4:bb:13:b2:8c:f5:65:e7:12:1c:
         5e:17:4a:1e:a3:3a:9c:cd:4e:fd:b5:a1:28:cd:f3:48:9a:cd:
         a4:4a:ea:af:72:ff:05:a4:48:87:fb:c5:3b:12:0d:dc:41:ea:
         e5:99:2a:dc:6f:bd:86:7e:a7:02:aa:5b:c8:7f:47:c9:21:d1:
         55:fa:7e:05:2d:4e:45:b3:c3:0b:81:fa:b7:27:50:96:95:7e:
         3c:85:90:dc:57:2e:f7:b8:91:0d:d3:48:3e:30:3d:4b:38:5c:
         40:ff:f6:8f:fd:c8:74:3d:1d:11:ae:b5:24:8f:32:5f:de:43:
         e0:a7:e7:1a:7d:3d:08:5a:ec:d3:77:e0:36:4b:fd:22:79:6a:
         8f:f5:25:19:eb:a9:d9:65:a1:6d:c1:95:a5:43:74:df:98:b3:
         1e:d5:fb:79:39:25:3b:36:47:44:58:26:f0:78:1a:04:55:69:
         12:e7:b7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----