Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/790AAB5E811C11F18B5FC7BCCE1D38B0.roa
File:                     790AAB5E811C11F18B5FC7BCCE1D38B0.roa (raw, json)
Hash identifier:          PUINqxsOEVTYV7i51ajkK1oJjfibF9o7v0ommeb8vSc=
Subject key identifier:   44:4C:B8:BC:97:82:F6:BC:88:A8:C6:2C:D5:2C:37:D2:89:3F:69:54
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0CD1
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/790AAB5E811C11F18B5FC7BCCE1D38B0.roa
Signing time:             Thu 16 Jul 2026 13:44:32 +0000
ROA not before:           Thu 16 Jul 2026 13:44:28 +0000
ROA not after:            Wed 31 Dec 2036 13:44:28 +0000
asID:                     7029
IP address blocks:        165.49.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Jul 2026 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3281 (0xcd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Jul 16 13:44:28 2026 GMT
            Not After : Dec 31 13:44:28 2036 GMT
        Subject: CN=6a58e040-2c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:13:b4:f9:e9:bc:96:88:1b:68:67:9b:a1:
                    d4:98:01:eb:ca:4c:1a:33:11:09:dc:54:1b:09:80:
                    19:b9:d4:85:ee:9e:d8:d9:5d:42:4e:e1:96:69:6b:
                    b0:39:ac:d3:1c:80:5a:7f:ba:ee:e6:de:3d:92:db:
                    00:cb:a2:0e:9a:2c:2e:92:c4:22:43:ea:0e:c6:fb:
                    ac:01:47:e8:91:f7:66:88:27:b9:ff:76:0d:7e:06:
                    f3:b3:7c:c1:d7:6b:3b:60:12:54:d7:3f:6a:b7:63:
                    6d:68:d1:16:3a:a4:ed:dd:4c:5c:be:df:17:e0:00:
                    6b:d1:8c:90:91:6d:98:62:0c:26:42:05:97:59:ed:
                    d4:b5:f3:9d:70:97:c9:5d:d7:ef:9f:20:3a:39:f3:
                    77:5b:db:9b:67:f7:87:25:64:d7:d6:34:29:30:cb:
                    ff:04:e6:01:ac:b5:3f:c3:94:27:da:ae:74:b9:22:
                    7d:70:c0:46:88:dd:ba:cc:f3:44:5e:71:3c:fa:68:
                    42:87:17:9d:4a:48:75:c2:ce:50:a6:9c:e7:a0:ae:
                    fa:e5:d3:df:1e:07:20:6f:ed:a1:7e:43:52:40:f2:
                    ff:18:70:3a:b7:54:c8:ed:97:58:ab:8f:91:d2:a7:
                    a4:9d:fc:cb:b4:21:e8:fb:39:79:c2:a1:01:21:77:
                    41:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4C:B8:BC:97:82:F6:BC:88:A8:C6:2C:D5:2C:37:D2:89:3F:69:54
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/790AAB5E811C11F18B5FC7BCCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ef:99:f0:23:89:48:10:56:7a:6e:61:ea:9f:c6:3c:94:6b:
         2b:d5:c2:9e:79:f0:a0:97:74:5c:89:af:99:d5:92:cd:57:60:
         8c:45:fb:ad:74:d7:92:79:69:42:c5:92:92:5f:60:54:20:65:
         bf:0d:d4:51:fd:ee:51:af:a2:14:14:d8:c1:01:b9:cb:a4:51:
         9b:53:00:6f:8a:7a:8b:da:23:32:fa:eb:63:14:40:fd:39:c0:
         32:95:9e:82:ab:b9:8d:98:b1:db:b7:5e:9b:44:37:0b:18:b5:
         c8:91:97:55:fa:db:0e:bf:5a:5c:87:b8:e9:41:a0:d0:6d:ac:
         3c:e3:9d:9e:1f:af:22:84:c0:1d:56:06:05:e8:74:25:2a:d1:
         a7:4b:c5:12:15:a4:4b:f5:dc:fe:a8:98:52:8b:16:8b:22:aa:
         fb:31:64:f7:d5:77:6a:7c:a1:2b:d0:dd:84:b2:ea:22:0d:e4:
         6c:cf:2c:11:03:dd:3d:a1:ed:96:34:93:15:6d:c8:46:5c:3c:
         28:29:a7:3d:78:36:9b:16:aa:f5:d1:6b:9d:5e:f4:40:53:69:
         eb:2e:7c:cb:1f:d1:30:5d:b8:8b:70:64:1b:05:24:d8:c7:14:
         90:71:16:50:fe:fc:5f:e6:c9:d4:61:bb:97:a4:54:4a:7d:7b:
         70:96:63:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:22 2026 by rpki-client