Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/299D58469D9611F1B1069EDBCE1D38B0.roa
File:                     299D58469D9611F1B1069EDBCE1D38B0.roa (raw, json)
Hash identifier:          jERKy24jGrCWe5vBKLs8gp4KEbGdzcOFNx9/jKGlDig=
Subject key identifier:   6A:CD:B3:17:77:B8:EF:EC:D0:4B:B5:7D:A9:5F:11:88:E4:E0:C1:2D
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D47
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/299D58469D9611F1B1069EDBCE1D38B0.roa
Signing time:             Fri 21 Aug 2026 19:26:10 +0000
ROA not before:           Fri 21 Aug 2026 19:26:05 +0000
ROA not after:            Wed 31 Dec 2036 19:26:05 +0000
asID:                     152698
IP address blocks:        165.49.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Aug 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3399 (0xd47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Aug 21 19:26:05 2026 GMT
            Not After : Dec 31 19:26:05 2036 GMT
        Subject: CN=6a88a652-848e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:cc:1b:ca:19:33:6b:f8:6c:28:53:b3:00:25:
                    63:f5:e1:12:3d:56:95:e1:df:fa:f6:7e:b3:fb:3f:
                    f9:04:3e:77:8d:06:bd:2d:cf:20:77:93:d1:ea:cb:
                    b8:a9:fe:3e:e6:65:af:12:41:46:0b:07:90:18:04:
                    43:04:97:25:ec:03:35:c0:cb:4f:c8:eb:69:1b:5b:
                    3c:43:c0:f0:88:1f:2b:6a:c7:6e:a1:27:cf:35:09:
                    1d:15:7c:e2:cf:bb:77:9e:13:59:ae:4f:b3:9a:07:
                    be:a6:5c:6d:93:8d:17:12:c5:ee:b3:54:a1:98:ad:
                    b8:a7:36:0e:1b:a2:55:da:51:09:31:13:7a:fe:2e:
                    d1:05:e9:ed:3a:74:6c:89:bb:5e:8a:76:33:6a:38:
                    44:66:78:97:1d:22:74:9d:68:a1:1a:1f:1b:db:d4:
                    9c:90:e0:77:d5:ba:45:d9:2c:59:1b:63:ad:9d:5c:
                    14:e4:b4:66:94:e3:0b:77:24:03:df:ed:14:d6:a1:
                    64:af:68:46:3a:25:95:6d:9c:21:b9:b4:b1:c0:5a:
                    84:31:aa:07:48:85:9c:cc:e3:9f:93:60:fa:dc:c3:
                    51:a2:c0:21:92:35:50:4d:b4:53:25:29:36:fd:5e:
                    d3:bf:1b:30:2e:e0:e3:84:d7:f4:42:40:15:03:d0:
                    d0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CD:B3:17:77:B8:EF:EC:D0:4B:B5:7D:A9:5F:11:88:E4:E0:C1:2D
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/299D58469D9611F1B1069EDBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:c9:d7:73:91:99:ce:b9:a8:cd:c9:c0:63:15:9f:1e:8a:57:
         28:91:01:63:0d:d8:d6:24:92:1c:a1:3a:23:90:41:f2:ed:24:
         61:36:90:d4:30:e5:35:0c:c6:54:c0:5b:87:c1:a3:8f:0f:4c:
         f7:a4:48:bf:55:a8:48:cc:49:41:43:ac:6c:f0:67:77:a2:41:
         fb:75:fa:71:84:1d:fa:10:02:43:b9:b9:bc:11:db:cd:6b:94:
         ed:54:85:3a:31:63:e1:07:70:4e:32:e8:72:9d:20:86:05:2d:
         06:51:aa:43:c8:98:fc:36:7e:ec:2a:74:17:89:c8:97:3c:c3:
         e2:bd:1d:5b:b9:37:db:23:34:ef:1f:07:27:33:2e:9d:e6:df:
         69:df:bf:e3:06:ec:4d:d1:a2:8b:3b:37:6a:3e:b9:8a:2c:16:
         8a:f6:c3:24:74:a0:7a:92:1a:35:44:81:6e:e2:05:93:e8:0d:
         77:85:90:9c:6c:fb:3a:66:50:e6:16:d1:45:04:26:8c:cb:4f:
         07:43:ee:4b:0b:64:7a:44:e5:fb:c4:11:60:dc:62:c3:6b:de:
         b5:0c:aa:ea:0c:23:dc:2b:4b:63:52:0d:81:8f:3b:bb:a9:da:
         77:44:cb:c3:25:11:a2:94:4e:bf:5f:46:23:a7:cb:6b:77:58:
         d3:f9:1f:b3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDUcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA4MjExOTI2MDVaFw0zNjEyMzExOTI2MDVaMBgxFjAU
BgNVBAMTDTZhODhhNjUyLTg0OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjzBvKGTNr+GwoU7MAJWP14RI9VpXh3/r2frP7P/kEPneNBr0tzyB3k9Hq
y7ip/j7mZa8SQUYLB5AYBEMElyXsAzXAy0/I62kbWzxDwPCIHytqx26hJ881CR0V
fOLPu3eeE1muT7OaB76mXG2TjRcSxe6zVKGYrbinNg4bolXaUQkxE3r+LtEF6e06
dGyJu16KdjNqOERmeJcdInSdaKEaHxvb1JyQ4HfVukXZLFkbY62dXBTktGaU4wt3
JAPf7RTWoWSvaEY6JZVtnCG5tLHAWoQxqgdIhZzM45+TYPrcw1GiwCGSNVBNtFMl
KTb9XtO/GzAu4OOE1/RCQBUD0NA3AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUas2z
F3e47+zQS7V9qV8RiOTgwS0wHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzI5OUQ1ODQ2OUQ5NjExRjFCMTA2OUVEQkNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMUYwDQYJKoZIhvcNAQELBQAD
ggEBAIbJ13ORmc65qM3JwGMVnx6KVyiRAWMN2NYkkhyhOiOQQfLtJGE2kNQw5TUM
xlTAW4fBo48PTPekSL9VqEjMSUFDrGzwZ3eiQft1+nGEHfoQAkO5ubwR281rlO1U
hToxY+EHcE4y6HKdIIYFLQZRqkPImPw2fuwqdBeJyJc8w+K9HVu5N9sjNO8fBycz
Lp3m32nfv+MG7E3Roos7N2o+uYosFor2wyR0oHqSGjVEgW7iBZPoDXeFkJxs+zpm
UOYW0UUEJozLTwdD7ksLZHpE5fvEEWDcYsNr3rUMquoMI9wrS2NSDYGPO7up2ndE
y8MlEaKUTr9fRiOny2t3WNP5H7M=
-----END CERTIFICATE-----