Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/1A457ABCB1BF11F1B0B4C5BBCE1D38B0.roa
File:                     1A457ABCB1BF11F1B0B4C5BBCE1D38B0.roa (raw, json)
Hash identifier:          CIW7+WqWfPvXdsaqDAQNOoi0+5TKrhqiA2Ws99+AvuU=
Subject key identifier:   AA:45:AB:E1:C5:FA:86:F6:62:87:A6:94:E5:29:5A:4C:16:C1:2E:32
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0DB3
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/1A457ABCB1BF11F1B0B4C5BBCE1D38B0.roa
Signing time:             Wed 16 Sep 2026 11:09:37 +0000
ROA not before:           Wed 16 Sep 2026 11:09:33 +0000
ROA not after:            Wed 31 Dec 2036 11:09:33 +0000
asID:                     32043
IP address blocks:        165.49.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3507 (0xdb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Sep 16 11:09:33 2026 GMT
            Not After : Dec 31 11:09:33 2036 GMT
        Subject: CN=6aaa78f0-c16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:5e:96:bc:e7:60:a1:e2:08:d0:1e:b8:54:21:
                    ee:13:56:02:ef:dd:fb:d9:f2:8e:fa:08:3b:3d:b8:
                    bc:bc:50:84:29:a2:01:75:72:84:20:50:9a:2c:ef:
                    10:13:13:48:e2:3f:2e:3e:f0:9e:16:e7:52:1c:ca:
                    17:4e:f8:03:13:85:bf:f4:d5:85:8a:a5:b6:d5:80:
                    24:d9:69:9c:99:07:7e:6e:94:33:ba:69:f4:b9:e7:
                    fb:e6:7e:35:e2:1c:db:e8:9e:de:3a:3e:c6:03:7e:
                    58:f0:65:63:01:68:f6:3a:8d:91:ad:5b:03:16:2a:
                    07:f8:40:6a:5f:05:67:d0:77:4d:8b:98:15:ad:79:
                    99:5d:4c:a6:99:13:85:1c:41:c4:fd:ca:cd:87:16:
                    3d:06:43:0f:40:33:ea:21:a9:3c:f5:dc:f7:b1:4d:
                    bf:0c:bf:0f:29:95:8f:b1:9c:d7:39:31:8d:28:d0:
                    d6:ff:fa:bc:2f:52:2b:30:66:d6:ae:ee:0e:3a:3a:
                    49:63:ef:55:82:40:33:ac:00:c4:20:17:62:28:7b:
                    75:17:88:02:b9:e9:ff:13:a7:9a:1d:f1:3c:23:5b:
                    cd:86:da:05:8d:fd:06:17:48:6a:11:e3:16:95:3d:
                    f4:e4:a8:8a:06:14:c0:b4:38:55:67:83:62:19:be:
                    25:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:45:AB:E1:C5:FA:86:F6:62:87:A6:94:E5:29:5A:4C:16:C1:2E:32
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/1A457ABCB1BF11F1B0B4C5BBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:40:1a:f9:8e:0d:1c:83:47:e9:7f:1a:f9:98:5f:6b:25:7b:
         5c:86:dc:c1:80:b1:93:73:f4:43:c6:7f:9d:86:e3:9c:59:f7:
         90:9d:88:1d:c5:22:78:92:9e:48:cc:b5:c0:da:f5:3f:22:ec:
         be:67:69:19:8e:5d:9f:b3:f2:9a:08:8f:5a:af:ab:3f:70:63:
         b5:2f:66:cb:c9:d5:a6:9e:57:72:d7:4c:2c:f4:00:1d:23:dc:
         1e:31:25:32:ff:9f:cb:35:54:2e:4d:d1:1c:9e:c1:c4:5c:2e:
         9d:f4:3e:ac:fe:09:11:ca:3c:e3:ab:05:2b:d8:87:e4:e2:2b:
         22:2f:f8:13:7e:cc:5a:a1:16:fd:63:97:67:c5:90:45:c7:50:
         e3:2b:cf:80:3f:19:00:68:20:b1:bb:2b:a7:9f:d9:db:51:12:
         b8:55:2e:6a:40:c7:b0:4d:4d:87:56:55:a4:63:a3:22:1c:a0:
         6d:46:41:1a:1a:88:cc:24:ca:a7:89:cf:b0:7d:e0:61:76:68:
         a0:93:08:6d:5c:dc:2e:cf:44:99:b5:c4:67:ca:b8:d7:25:59:
         0a:d9:55:71:eb:21:43:d7:02:8c:4e:24:11:d7:eb:c2:c2:21:
         40:cd:70:d2:5b:25:00:71:4b:65:2a:8b:98:a3:9a:b8:e8:1e:
         38:d9:9f:82
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDbMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA5MTYxMTA5MzNaFw0zNjEyMzExMTA5MzNaMBgxFjAU
BgNVBAMTDTZhYWE3OGYwLWMxNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDwXpa852Ch4gjQHrhUIe4TVgLv3fvZ8o76CDs9uLy8UIQpogF1coQgUJos
7xATE0jiPy4+8J4W51IcyhdO+AMThb/01YWKpbbVgCTZaZyZB35ulDO6afS55/vm
fjXiHNvont46PsYDfljwZWMBaPY6jZGtWwMWKgf4QGpfBWfQd02LmBWteZldTKaZ
E4UcQcT9ys2HFj0GQw9AM+ohqTz13PexTb8Mvw8plY+xnNc5MY0o0Nb/+rwvUisw
Ztau7g46Oklj71WCQDOsAMQgF2Ioe3UXiAK56f8Tp5od8TwjW82G2gWN/QYXSGoR
4xaVPfTkqIoGFMC0OFVng2IZviXjAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUqkWr
4cX6hvZih6aU5SlaTBbBLjIwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzFBNDU3QUJDQjFCRjExRjFCMEI0QzVCQkNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMe0wDQYJKoZIhvcNAQELBQAD
ggEBAE5AGvmODRyDR+l/GvmYX2sle1yG3MGAsZNz9EPGf52G45xZ95CdiB3FIniS
nkjMtcDa9T8i7L5naRmOXZ+z8poIj1qvqz9wY7UvZsvJ1aaeV3LXTCz0AB0j3B4x
JTL/n8s1VC5N0RyewcRcLp30Pqz+CRHKPOOrBSvYh+TiKyIv+BN+zFqhFv1jl2fF
kEXHUOMrz4A/GQBoILG7K6ef2dtRErhVLmpAx7BNTYdWVaRjoyIcoG1GQRoaiMwk
yqeJz7B94GF2aKCTCG1c3C7PRJm1xGfKuNclWQrZVXHrIUPXAoxOJBHX68LCIUDN
cNJbJQBxS2Uqi5ijmrjoHjjZn4I=
-----END CERTIFICATE-----