Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D3D016727A4211F1BDB1B801CF1D38B0.roa
File:                     D3D016727A4211F1BDB1B801CF1D38B0.roa (raw, json)
Hash identifier:          YiRYbc6Jv1gsoWasZLkadUQs+CfUC4If3lHJxHA0Yxc=
Subject key identifier:   71:9D:3A:BA:71:06:FB:B8:0E:5B:AD:46:E3:7D:F8:C1:D7:49:3C:0E
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0C5E
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D3D016727A4211F1BDB1B801CF1D38B0.roa
Signing time:             Tue 07 Jul 2026 20:31:27 +0000
ROA not before:           Tue 07 Jul 2026 20:31:22 +0000
ROA not after:            Wed 31 Dec 2036 20:31:22 +0000
asID:                     214143
IP address blocks:        165.49.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Jul 2026 01:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3166 (0xc5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Jul  7 20:31:22 2026 GMT
            Not After : Dec 31 20:31:22 2036 GMT
        Subject: CN=6a4d621f-2a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d8:7e:26:fb:0d:b5:e9:da:33:bc:50:fd:ce:
                    79:6a:d4:10:6f:8a:59:a9:a6:40:3a:0e:8c:3e:e3:
                    42:ae:50:e1:35:1e:0a:e8:b9:4b:19:cb:e7:0c:e3:
                    15:cc:9d:1f:05:6a:c4:d1:f0:e6:59:d8:d9:be:60:
                    bc:68:a2:dc:86:14:c7:cf:06:09:43:54:f9:5e:f0:
                    db:86:b1:c5:37:7a:9e:7c:6b:df:d7:28:43:1e:1c:
                    10:2c:2f:f8:e3:28:f8:14:bb:79:dd:43:72:27:2c:
                    cb:67:56:28:b2:a8:89:1d:51:4c:32:c9:bd:bd:b1:
                    65:80:63:3a:79:9a:3d:e5:bd:43:d1:9a:98:5c:86:
                    af:a9:51:75:46:80:e3:8f:62:b4:05:70:ad:6c:a7:
                    a1:27:b6:f5:58:a5:41:cc:e4:72:64:f2:17:f3:42:
                    c6:f2:5f:53:f5:b9:5c:a9:9f:7b:9e:f6:52:8a:01:
                    85:b8:a8:f2:08:8b:15:62:12:ed:30:5e:8f:3f:5c:
                    15:06:16:60:1e:4e:9a:1a:53:4f:2c:ad:ae:0d:03:
                    93:fc:4e:25:11:e8:d5:54:1c:19:fa:fa:a6:e6:0c:
                    34:ab:26:f4:c1:b2:54:86:6f:c8:e1:43:e2:11:88:
                    a0:2c:9b:72:92:98:f6:86:cb:36:28:cd:4c:76:89:
                    e0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9D:3A:BA:71:06:FB:B8:0E:5B:AD:46:E3:7D:F8:C1:D7:49:3C:0E
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/D3D016727A4211F1BDB1B801CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:99:a9:f3:df:ae:3f:84:2c:b4:c7:5e:a1:d8:78:e5:5f:29:
         4c:17:bc:77:41:f7:4f:71:c7:0c:74:82:32:06:ae:6b:5e:28:
         52:f2:9f:b1:39:ad:ff:6d:85:03:ad:90:a1:5a:af:50:e7:fe:
         58:9a:f7:4f:a4:90:6f:cb:63:19:bf:21:7a:4f:d9:ec:43:07:
         63:5a:ce:bd:00:74:d7:0b:64:63:8f:d0:3c:c5:a1:4b:e4:9e:
         6c:88:ec:30:63:bb:c8:3b:34:51:49:5b:26:ea:d9:c7:64:b9:
         98:c9:92:5e:00:27:fc:cb:7e:0c:12:95:d8:18:3e:95:2c:e2:
         0c:3c:a9:85:56:29:8f:22:dc:f1:2c:29:cb:bc:99:e8:0b:b1:
         4f:64:a3:51:70:ee:8c:3d:9d:b5:64:23:e8:f2:87:48:8f:ba:
         c8:8b:39:62:e8:8d:af:e8:ac:2c:7d:50:3c:c3:20:67:10:6d:
         d5:2b:2b:cc:76:50:8f:d9:d3:1b:4e:fb:18:e0:89:ff:9e:b5:
         10:46:67:b2:c7:81:88:d9:cc:95:00:6b:87:66:60:2e:f9:62:
         61:ad:6e:25:81:96:75:02:38:e4:3b:42:7c:ec:ca:1d:7a:92:
         c5:5f:c4:0c:fb:fb:1a:51:04:71:db:29:b5:47:08:d7:73:48:
         fb:19:d9:d3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDF4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA3MDcyMDMxMjJaFw0zNjEyMzEyMDMxMjJaMBgxFjAU
BgNVBAMTDTZhNGQ2MjFmLTJhMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC72H4m+w216dozvFD9znlq1BBvilmppkA6Dow+40KuUOE1HgrouUsZy+cM
4xXMnR8FasTR8OZZ2Nm+YLxootyGFMfPBglDVPle8NuGscU3ep58a9/XKEMeHBAs
L/jjKPgUu3ndQ3InLMtnViiyqIkdUUwyyb29sWWAYzp5mj3lvUPRmphchq+pUXVG
gOOPYrQFcK1sp6EntvVYpUHM5HJk8hfzQsbyX1P1uVypn3ue9lKKAYW4qPIIixVi
Eu0wXo8/XBUGFmAeTpoaU08sra4NA5P8TiUR6NVUHBn6+qbmDDSrJvTBslSGb8jh
Q+IRiKAsm3KSmPaGyzYozUx2ieDHAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUcZ06
unEG+7gOW61G4334wddJPA4wHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0QzRDAxNjcyN0E0MjExRjFCREIxQjgwMUNGMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMeUwDQYJKoZIhvcNAQELBQAD
ggEBADeZqfPfrj+ELLTHXqHYeOVfKUwXvHdB909xxwx0gjIGrmteKFLyn7E5rf9t
hQOtkKFar1Dn/lia90+kkG/LYxm/IXpP2exDB2Nazr0AdNcLZGOP0DzFoUvknmyI
7DBju8g7NFFJWybq2cdkuZjJkl4AJ/zLfgwSldgYPpUs4gw8qYVWKY8i3PEsKcu8
megLsU9ko1Fw7ow9nbVkI+jyh0iPusiLOWLoja/orCx9UDzDIGcQbdUrK8x2UI/Z
0xtO+xjgif+etRBGZ7LHgYjZzJUAa4dmYC75YmGtbiWBlnUCOOQ7Qnzsyh16ksVf
xAz7+xpRBHHbKbVHCNdzSPsZ2dM=
-----END CERTIFICATE-----
Generated at Mon Jul 20 19:14:52 2026 by rpki-client