Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6E0723B0211B11F1A7259AD8DAE4EC9C.roa
File:                     6E0723B0211B11F1A7259AD8DAE4EC9C.roa (raw, json)
Hash identifier:          tIKVwjBiKjAtdT0PpbYc+KgYDVIisWqWijM1JQ9QRQ0=
Subject key identifier:   6C:EC:93:29:E5:E1:87:2E:94:15:99:20:D3:D0:64:C1:92:52:0C:0C
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0B37
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6E0723B0211B11F1A7259AD8DAE4EC9C.roa
Signing time:             Mon 16 Mar 2026 09:35:12 +0000
ROA not before:           Mon 16 Mar 2026 09:35:08 +0000
ROA not after:            Wed 31 Dec 2036 09:35:08 +0000
asID:                     398465
IP address blocks:        165.49.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 23 Mar 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2871 (0xb37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Mar 16 09:35:08 2026 GMT
            Not After : Dec 31 09:35:08 2036 GMT
        Subject: CN=69b7ced0-74c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:b0:0d:a4:13:0e:6e:7c:1f:a1:dd:d5:58:
                    f7:cb:9e:0a:9a:24:67:85:be:78:53:e3:f5:08:98:
                    9a:0c:fb:01:b7:96:d1:1d:4e:71:39:b6:a4:14:79:
                    50:60:fb:a0:5d:3c:20:64:eb:6e:a5:ea:1b:2f:98:
                    d3:a0:8d:eb:e1:d4:84:a3:d3:18:67:05:4c:96:37:
                    9b:d5:87:b6:fb:d8:58:74:bc:1b:fd:e0:0a:6b:10:
                    51:3c:b6:2f:79:32:91:d3:57:2c:cc:0e:b5:b4:41:
                    f7:65:70:dd:ef:e9:68:e3:1b:a1:90:d8:1f:05:df:
                    b8:d1:28:a6:4f:14:3a:1e:9a:ba:82:31:83:07:4a:
                    84:98:fe:51:73:33:10:d2:a2:60:e0:2d:eb:83:09:
                    a4:93:aa:56:f6:39:ed:ff:e9:80:a5:a5:1c:76:97:
                    99:6b:c2:f4:bd:cc:66:a9:5c:75:6e:99:e1:2a:79:
                    53:64:75:42:1f:f3:7f:44:ae:a8:10:a9:65:df:9a:
                    62:42:34:95:99:9b:18:a7:f8:cf:57:23:e3:38:85:
                    ad:b1:c4:82:4a:2e:43:f1:34:7a:5d:63:20:82:ed:
                    21:45:ac:cf:6c:7f:09:d4:87:6b:0b:b9:0d:74:30:
                    88:21:c9:61:af:99:f6:56:95:ec:4b:09:94:a7:ef:
                    b8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EC:93:29:E5:E1:87:2E:94:15:99:20:D3:D0:64:C1:92:52:0C:0C
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6E0723B0211B11F1A7259AD8DAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:10:c3:ed:5b:33:03:23:ac:47:d9:0c:92:06:09:ee:e2:ad:
         68:8b:81:3e:22:49:6e:1f:23:d5:ff:48:b9:65:63:ae:15:58:
         76:0d:49:2c:2f:1d:3f:33:ef:51:33:da:62:93:f8:bc:e9:cd:
         18:a5:75:b5:c6:66:1c:56:ee:28:91:75:b1:8e:ef:d6:30:66:
         3a:d5:88:82:58:3b:4e:d3:0e:11:47:87:15:17:f6:39:ce:22:
         31:7e:71:0f:7f:32:9c:39:5f:e2:4a:8f:e6:66:95:d5:d6:77:
         65:e0:d0:e5:62:15:c2:21:cc:b6:3d:e7:0c:5d:6e:9b:1f:91:
         5e:ab:b4:b4:2c:9b:11:a2:c7:a7:8a:e0:c0:29:dc:7f:0a:15:
         aa:e6:35:a2:49:b9:89:60:10:54:64:ae:dd:1c:bd:8b:5f:2d:
         34:ab:ad:41:6a:c8:20:0f:fc:92:3d:0c:47:72:11:e6:53:f8:
         ed:39:92:d2:e3:11:4e:c8:89:73:bc:f3:9b:c8:27:24:78:25:
         92:9b:1a:c6:2a:30:36:63:cf:50:f7:5c:3d:51:75:2b:20:00:
         71:c3:7c:a7:35:43:3e:a4:2c:2b:19:11:ec:f2:62:94:bd:87:
         bd:56:42:11:62:47:71:52:d8:eb:55:74:70:44:1c:7e:ad:6a:
         0f:33:bd:2e
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCzcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjAzMTYwOTM1MDhaFw0zNjEyMzEwOTM1MDhaMBgxFjAU
BgNVBAMTDTY5YjdjZWQwLTc0YzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGQrANpBMObnwfod3VWPfLngqaJGeFvnhT4/UImJoM+wG3ltEdTnE5tqQU
eVBg+6BdPCBk626l6hsvmNOgjevh1ISj0xhnBUyWN5vVh7b72Fh0vBv94AprEFE8
ti95MpHTVyzMDrW0QfdlcN3v6WjjG6GQ2B8F37jRKKZPFDoemrqCMYMHSoSY/lFz
MxDSomDgLeuDCaSTqlb2Oe3/6YClpRx2l5lrwvS9zGapXHVumeEqeVNkdUIf839E
rqgQqWXfmmJCNJWZmxin+M9XI+M4ha2xxIJKLkPxNHpdYyCC7SFFrM9sfwnUh2sL
uQ10MIghyWGvmfZWlexLCZSn77hPAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUbOyT
KeXhhy6UFZkg09BkwZJSDAwwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzZFMDcyM0IwMjExQjExRjFBNzI1OUFEOERBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMdMwDQYJKoZIhvcNAQELBQAD
ggEBAEoQw+1bMwMjrEfZDJIGCe7irWiLgT4iSW4fI9X/SLllY64VWHYNSSwvHT8z
71Ez2mKT+LzpzRildbXGZhxW7iiRdbGO79YwZjrViIJYO07TDhFHhxUX9jnOIjF+
cQ9/Mpw5X+JKj+ZmldXWd2Xg0OViFcIhzLY95wxdbpsfkV6rtLQsmxGix6eK4MAp
3H8KFarmNaJJuYlgEFRkrt0cvYtfLTSrrUFqyCAP/JI9DEdyEeZT+O05ktLjEU7I
iXO885vIJyR4JZKbGsYqMDZjz1D3XD1RdSsgAHHDfKc1Qz6kLCsZEezyYpS9h71W
QhFiR3FS2OtVdHBEHH6tag8zvS4=
-----END CERTIFICATE-----
Generated at Sat Mar 21 09:56:45 2026 by rpki-client