Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/347848E2802D11F1B25C23CBCE1D38B0.roa
File:                     347848E2802D11F1B25C23CBCE1D38B0.roa (raw, json)
Hash identifier:          Ff5eceMQhaexj6tfb5Oz2XeN6SZGqFP9E6qwgXwIazk=
Subject key identifier:   F7:61:89:46:0C:62:0A:78:B0:11:77:F3:4D:06:06:D1:E2:0E:19:EB
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0C8F
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/347848E2802D11F1B25C23CBCE1D38B0.roa
Signing time:             Wed 15 Jul 2026 09:11:47 +0000
ROA not before:           Wed 15 Jul 2026 09:11:43 +0000
ROA not after:            Wed 31 Dec 2036 09:11:43 +0000
asID:                     12083
IP address blocks:        165.49.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 Jul 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3215 (0xc8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Jul 15 09:11:43 2026 GMT
            Not After : Dec 31 09:11:43 2036 GMT
        Subject: CN=6a574ed3-7256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:28:a8:45:72:2a:cf:98:06:94:97:a9:1b:1c:
                    fc:e4:0b:bb:b1:19:a4:61:67:0b:30:2c:b8:b8:1d:
                    b8:ae:2e:ab:a5:5c:43:e0:2b:a0:a6:8d:61:e0:e7:
                    6a:45:0f:cf:2c:26:a7:cc:a6:26:cd:9b:c1:1b:58:
                    ef:08:b9:3b:1b:1d:28:c2:36:f3:32:21:09:ef:7c:
                    df:e3:a6:d5:4d:af:ef:2f:42:88:ad:5f:ae:07:4f:
                    90:74:5b:66:c1:23:c9:3a:48:3a:5c:ed:49:0d:bb:
                    82:bd:d1:f3:d4:24:4b:8e:17:59:86:c5:21:2d:87:
                    84:a5:3c:c0:39:08:ad:69:4c:55:1f:bc:34:c1:84:
                    ab:82:9a:08:c5:75:7a:b0:28:fc:da:04:0b:19:f2:
                    3c:b0:00:30:9d:a1:8b:25:d3:91:2b:4e:9c:29:80:
                    7e:b1:e8:8d:7b:e1:4b:05:3f:e1:b5:d6:d2:e4:19:
                    97:e1:be:00:9c:ab:4b:43:58:56:09:54:90:e9:47:
                    c0:bb:0c:3d:bd:32:8b:56:77:4e:d2:6b:0f:07:ae:
                    ad:d4:67:6a:68:e7:24:71:19:51:97:b5:f3:dc:b9:
                    ca:c1:ec:30:e3:d6:5f:ee:60:d2:9e:ab:8d:e6:50:
                    d3:be:0a:90:2e:eb:c8:5e:32:64:f6:74:8c:66:3a:
                    f0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:61:89:46:0C:62:0A:78:B0:11:77:F3:4D:06:06:D1:E2:0E:19:EB
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/347848E2802D11F1B25C23CBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:89:6e:bd:bb:b7:d0:40:4e:af:bb:3a:36:b3:fa:7b:4f:0a:
         23:df:56:40:fd:d6:99:76:04:ba:46:90:fb:ed:b6:86:56:54:
         19:e3:84:83:b3:bf:eb:49:88:27:78:30:13:da:16:0e:89:00:
         46:22:3a:81:88:ae:01:9f:1a:e4:a1:63:b2:13:aa:23:78:f6:
         5d:d7:4c:3a:fc:71:47:1c:63:22:20:01:17:fd:12:0f:88:73:
         14:f7:ce:57:63:91:aa:ff:80:9b:84:d6:67:eb:93:d0:9b:84:
         42:1e:b4:9a:66:19:93:a2:be:69:2f:af:b1:a3:c1:78:f3:49:
         38:c1:97:b2:2f:fa:21:34:7e:b5:35:2c:f6:98:dc:8f:7a:32:
         86:7d:d6:09:20:92:f0:95:10:cb:0d:42:04:9d:67:84:3d:5c:
         94:81:32:40:f3:f8:aa:49:95:6a:a1:83:ee:6f:29:a6:40:e0:
         72:b5:63:b9:77:dc:15:f1:9d:d2:eb:bb:b5:48:ba:b3:a5:ab:
         81:99:e3:cf:4d:44:6a:18:03:76:55:4d:5c:1b:2f:96:12:22:
         bb:de:86:4f:03:c4:da:cf:d7:0c:b5:06:de:0b:1e:ea:c1:f4:
         24:72:7d:f3:fe:3d:bb:fe:d6:2b:eb:de:3d:2e:ed:99:e0:64:
         d7:73:d3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:35:26 2026 by rpki-client