Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/415DD07AC54911F1A01D33BBCE1D38B0.roa
File:                     415DD07AC54911F1A01D33BBCE1D38B0.roa (raw, json)
Hash identifier:          xStVpQFGSUeXExSwuQwVvlvToq18/LUx4gCwQwOqVaM=
Subject key identifier:   EF:22:F7:8D:DC:45:15:72:AF:8A:3D:3E:FE:F9:CF:96:2C:50:FC:85
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0E24
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/415DD07AC54911F1A01D33BBCE1D38B0.roa
Signing time:             Sun 11 Oct 2026 07:56:25 +0000
ROA not before:           Sun 11 Oct 2026 07:56:20 +0000
ROA not after:            Wed 31 Dec 2036 07:56:20 +0000
asID:                     218878
IP address blocks:        165.49.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3620 (0xe24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Oct 11 07:56:20 2026 GMT
            Not After : Dec 31 07:56:20 2036 GMT
        Subject: CN=6acb4129-fe40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8f:e2:06:61:b8:bb:25:31:02:55:1b:26:c1:
                    53:ee:95:1b:96:2b:60:0f:d4:4f:63:be:4f:22:59:
                    64:6b:94:b1:80:01:aa:f2:6a:fd:65:29:9b:03:c1:
                    14:1e:57:87:55:10:8f:61:b4:72:ba:46:30:42:2f:
                    04:a0:6e:fd:49:1e:a3:f8:d5:b6:99:ec:1b:51:17:
                    88:35:40:2b:b8:da:76:5e:3e:f0:31:67:fa:02:39:
                    f3:4e:68:67:66:71:9e:69:5d:3f:b9:eb:bb:fa:0b:
                    b4:28:7c:13:08:a1:3d:16:2b:8f:9b:bf:4f:ae:6d:
                    05:d0:e8:3e:15:27:b0:0f:31:03:c1:63:af:50:21:
                    7e:81:ab:d3:fe:cb:a6:c2:ac:6e:f7:7a:d2:17:9f:
                    e2:eb:58:d2:a0:b4:f7:d7:a0:ea:9a:3c:87:66:6f:
                    cf:fc:e3:7e:6c:a7:56:4e:a4:0b:ee:fb:7e:34:87:
                    1f:33:92:fa:d2:2f:87:f1:d7:d2:f7:1c:38:3a:3d:
                    e1:08:73:08:d7:79:fe:21:ae:f2:37:9b:87:21:54:
                    ca:c4:10:ef:ba:f6:0f:29:37:19:32:65:2c:a9:45:
                    1a:f3:e7:36:c1:88:9f:87:94:f0:7a:8d:66:86:2f:
                    42:f3:37:0c:52:e2:76:ba:0a:81:86:81:f9:ce:b8:
                    78:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:22:F7:8D:DC:45:15:72:AF:8A:3D:3E:FE:F9:CF:96:2C:50:FC:85
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/415DD07AC54911F1A01D33BBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:10:56:5d:fe:5d:79:0b:2c:49:0c:25:81:a5:2a:3a:65:6e:
         54:17:d0:e0:ce:7e:fa:2a:71:e8:37:16:26:0e:10:8d:13:c0:
         50:1b:a1:5d:68:7c:51:3a:29:fa:25:58:8d:c5:96:26:19:b8:
         d6:50:b0:22:88:22:d2:72:82:f4:e0:be:c7:42:f1:fb:ff:fb:
         e3:a7:30:b8:f8:63:d1:d8:ce:43:23:a7:25:cf:02:b5:a2:58:
         cc:6c:f5:70:2f:e0:39:87:81:53:5b:66:ca:87:77:86:98:b3:
         69:06:bb:d2:b5:08:7f:a0:9f:21:55:dd:38:cc:15:c4:b4:4b:
         c8:d2:dd:74:a2:77:23:f8:62:ea:d1:31:d0:14:e4:a9:5f:48:
         75:f1:cd:48:a1:da:60:43:ce:5b:7f:20:c3:df:59:96:55:22:
         c2:8b:84:d5:3d:d3:04:07:26:8f:98:eb:22:e6:13:76:5e:4d:
         f2:05:3b:8a:05:7f:56:d5:09:17:90:aa:29:60:f1:94:a2:e4:
         ed:55:05:10:02:0a:78:0b:f0:c1:92:c4:3b:ab:e3:d7:3b:cf:
         73:97:75:c9:26:b0:8d:90:d3:3f:dd:73:2a:d3:85:79:9f:76:
         39:b5:84:7c:39:54:18:bb:a2:ec:20:65:02:1c:63:ac:ad:5a:
         79:20:80:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----