Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6E5BA1AE811C11F1A4CBC2BCCE1D38B0.roa
File:                     6E5BA1AE811C11F1A4CBC2BCCE1D38B0.roa (raw, json)
Hash identifier:          wHXql071Vn537pmeSF2775zO6ASM/xVXAuMuGhmvJww=
Subject key identifier:   DA:87:DC:EB:9F:9D:47:88:89:D4:0D:E3:5A:2D:E0:CB:21:0F:9D:70
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0CCF
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6E5BA1AE811C11F1A4CBC2BCCE1D38B0.roa
Signing time:             Thu 16 Jul 2026 13:44:14 +0000
ROA not before:           Thu 16 Jul 2026 13:44:10 +0000
ROA not after:            Wed 31 Dec 2036 13:44:10 +0000
asID:                     7029
IP address blocks:        165.49.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3279 (0xccf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Jul 16 13:44:10 2026 GMT
            Not After : Dec 31 13:44:10 2036 GMT
        Subject: CN=6a58e02e-9806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:fd:4e:27:77:06:20:04:b0:58:bf:77:eb:
                    9e:8e:ca:00:52:a1:e2:45:6a:29:98:50:e1:97:2f:
                    6e:ef:02:75:93:af:a6:82:97:c5:57:96:83:0a:da:
                    c7:82:7f:5c:e3:49:67:e0:ba:aa:b2:35:fd:b0:8c:
                    77:25:b2:a7:92:d8:32:e0:90:ef:45:dd:a9:c1:11:
                    7f:57:2e:d9:44:e4:43:80:fe:59:c6:7e:6c:45:80:
                    99:83:e0:ee:54:69:b7:63:3b:e1:c3:90:bd:60:32:
                    0e:72:53:8b:42:7f:a7:d1:36:24:63:6a:a4:19:63:
                    2f:73:85:70:bd:95:eb:c7:ad:1b:e3:97:cb:3e:23:
                    26:c8:13:7f:e4:67:3f:ec:ee:42:26:71:29:8e:17:
                    92:de:aa:fe:d0:23:5f:e8:85:8c:48:46:d4:8a:3d:
                    ac:cb:b8:23:8d:f6:f1:b0:f5:6e:b4:99:02:0c:1a:
                    e0:70:03:53:ce:f5:6d:85:84:23:9f:55:bb:54:ab:
                    2f:06:6d:e2:96:4d:ca:45:83:e0:bf:2f:c3:68:c9:
                    48:88:dc:12:bd:a8:a3:30:8b:a7:e8:c8:b5:84:03:
                    9f:92:e1:5b:98:6f:5d:e3:47:16:27:f7:d6:84:c6:
                    7e:0d:1f:6b:38:08:40:67:75:76:61:4e:5e:80:ed:
                    b0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:87:DC:EB:9F:9D:47:88:89:D4:0D:E3:5A:2D:E0:CB:21:0F:9D:70
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/6E5BA1AE811C11F1A4CBC2BCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:2b:77:6d:20:80:ff:23:af:4e:5e:f6:d6:b4:54:93:bb:f3:
         58:9c:c0:9d:69:bd:bb:8a:6b:5e:ed:f5:9d:2d:1e:95:61:2b:
         a1:a0:5f:84:c7:6f:39:7f:e3:39:73:a6:a1:39:29:b8:39:71:
         2e:f9:5e:0a:f3:90:2b:62:82:cd:5d:da:16:27:3b:d7:b4:c3:
         26:2d:89:5c:18:63:55:1c:1f:f3:ce:62:87:25:a6:f4:7e:a6:
         88:07:a9:73:d3:78:02:49:23:0e:2a:92:46:d5:8d:4f:5a:ae:
         3b:be:41:19:35:80:96:d1:29:72:8c:d0:dc:32:e2:09:e2:a4:
         ba:5e:c2:72:3b:82:a2:57:bd:2e:eb:82:dd:ab:1a:1b:88:91:
         3c:8f:89:87:90:e2:35:38:d5:4c:78:ce:00:42:b7:4c:af:09:
         8d:e9:f2:69:9e:4f:57:4c:b6:53:12:dd:3f:3b:54:d1:60:1d:
         11:f8:9c:02:e3:8a:b2:bd:56:15:ca:8b:f2:a3:77:86:81:9a:
         ed:07:32:73:04:88:21:09:22:96:9a:b7:74:fa:35:af:c6:28:
         5d:f3:8b:83:4f:02:09:88:c5:1d:8e:27:14:28:36:26:f3:7e:
         32:f6:02:54:d8:40:22:c7:99:6c:c9:b2:e7:0e:95:3b:ef:14:
         6f:e9:47:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:17 2026 by rpki-client