Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7EEE0468A40211F1A8B86A00CF1D38B0.roa
File:                     7EEE0468A40211F1A8B86A00CF1D38B0.roa (raw, json)
Hash identifier:          ChBJNPqBzTHaUL7vcA5QQfISIjf7AMlmmOF+b4cZt+s=
Subject key identifier:   3B:DC:D4:E8:18:F7:82:82:AB:40:A4:8C:D2:71:0F:D5:A2:3D:86:A5
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D88
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7EEE0468A40211F1A8B86A00CF1D38B0.roa
Signing time:             Sat 29 Aug 2026 23:36:45 +0000
ROA not before:           Sat 29 Aug 2026 23:36:40 +0000
ROA not after:            Wed 31 Dec 2036 23:36:40 +0000
asID:                     214483
IP address blocks:        165.49.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 01:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3464 (0xd88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Aug 29 23:36:40 2026 GMT
            Not After : Dec 31 23:36:40 2036 GMT
        Subject: CN=6a936d0d-ac64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:9b:ec:2f:57:b9:bd:94:bd:b5:7f:e6:6d:
                    3d:9c:6e:b2:9b:de:b8:76:e8:aa:36:1c:79:d2:93:
                    88:de:39:e1:69:61:b1:99:3e:83:e8:86:fd:ca:df:
                    44:6f:25:62:5c:8b:c6:e3:5a:44:ef:18:5f:57:89:
                    e2:d3:17:54:e8:01:a1:d0:87:f3:b6:02:2e:59:77:
                    04:64:f9:b4:08:be:76:78:e5:74:c3:68:ba:ae:f3:
                    88:08:d1:c3:09:ce:99:8d:9c:dd:89:69:67:99:d5:
                    17:76:22:ab:8b:1b:35:11:16:e2:ab:c8:9c:57:ec:
                    35:e6:79:97:8f:d9:83:ae:95:55:b9:b3:be:71:83:
                    8c:ce:2f:76:b2:a7:3b:49:4d:b0:4d:b5:97:87:fb:
                    60:ca:10:2b:35:98:47:61:10:00:0f:15:b3:02:d1:
                    e4:72:fb:3b:b5:37:0c:40:88:5a:dc:14:9f:54:fc:
                    3e:75:51:82:ad:da:64:ee:19:a4:e9:15:ba:90:c5:
                    27:ce:51:c4:f6:e5:c6:64:7a:ac:08:4f:01:53:c9:
                    2b:7e:b4:7b:e7:66:8b:0c:8c:21:f4:8d:3d:31:07:
                    9b:ec:8f:03:ac:e7:01:92:80:a1:3b:ad:e7:14:a1:
                    00:fe:10:2c:be:11:80:f2:d3:af:4d:b5:53:e9:ef:
                    ac:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DC:D4:E8:18:F7:82:82:AB:40:A4:8C:D2:71:0F:D5:A2:3D:86:A5
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/7EEE0468A40211F1A8B86A00CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:10:57:d4:3d:97:ed:ed:16:6a:59:a6:82:57:cb:2e:0e:0c:
         a3:1b:b3:9b:6d:57:5d:a1:f5:37:8e:52:00:00:5e:23:db:e8:
         81:64:9a:42:71:21:c0:87:45:1a:2c:90:d6:d2:6e:5a:a3:0a:
         6d:f0:f3:a8:f0:a2:65:da:8f:73:13:ca:ae:a6:b5:66:56:bc:
         4a:a0:90:4d:b3:41:60:ab:ad:dd:39:9d:29:ad:b9:91:47:9c:
         43:c2:7b:29:29:8d:1c:31:a3:ed:bf:74:e1:be:9d:e6:c6:3f:
         c6:35:f5:c0:50:84:38:a3:33:c6:29:d5:62:fc:bd:af:95:54:
         37:e9:32:ff:cf:d8:7d:a9:0d:ed:e2:1e:4b:e2:b0:79:cd:8e:
         8e:46:88:87:76:40:d2:fa:49:7d:3e:a0:0c:0d:ed:b1:18:e9:
         c8:5b:89:e3:cd:7c:1f:db:af:3f:f8:71:70:27:33:88:4c:e3:
         e2:44:44:04:2b:ae:a8:f5:6b:69:a1:67:2a:05:d5:0c:e6:12:
         b0:b8:22:33:05:08:4e:b1:83:dd:48:17:d0:30:bf:d5:12:a8:
         33:b7:40:46:cf:c2:28:f1:72:82:69:f9:d1:a6:57:a0:67:40:
         73:de:29:c3:b9:fd:e4:47:0a:46:40:cb:81:fe:ee:bd:d6:47:
         fe:39:fe:71
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDYgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA4MjkyMzM2NDBaFw0zNjEyMzEyMzM2NDBaMBgxFjAU
BgNVBAMTDTZhOTM2ZDBkLWFjNjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLsZvsL1e5vZS9tX/mbT2cbrKb3rh26Ko2HHnSk4jeOeFpYbGZPoPohv3K
30RvJWJci8bjWkTvGF9XieLTF1ToAaHQh/O2Ai5ZdwRk+bQIvnZ45XTDaLqu84gI
0cMJzpmNnN2JaWeZ1Rd2IquLGzURFuKryJxX7DXmeZeP2YOulVW5s75xg4zOL3ay
pztJTbBNtZeH+2DKECs1mEdhEAAPFbMC0eRy+zu1NwxAiFrcFJ9U/D51UYKt2mTu
GaTpFbqQxSfOUcT25cZkeqwITwFTySt+tHvnZosMjCH0jT0xB5vsjwOs5wGSgKE7
recUoQD+ECy+EYDy069NtVPp76yjAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUO9zU
6Bj3goKrQKSM0nEP1aI9hqUwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzdFRUUwNDY4QTQwMjExRjFBOEI4NkEwMENGMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMeswDQYJKoZIhvcNAQELBQAD
ggEBAFoQV9Q9l+3tFmpZpoJXyy4ODKMbs5ttV12h9TeOUgAAXiPb6IFkmkJxIcCH
RRoskNbSblqjCm3w86jwomXaj3MTyq6mtWZWvEqgkE2zQWCrrd05nSmtuZFHnEPC
eykpjRwxo+2/dOG+nebGP8Y19cBQhDijM8Yp1WL8va+VVDfpMv/P2H2pDe3iHkvi
sHnNjo5GiId2QNL6SX0+oAwN7bEY6chbiePNfB/brz/4cXAnM4hM4+JERAQrrqj1
a2mhZyoF1QzmErC4IjMFCE6xg91IF9Awv9USqDO3QEbPwijxcoJp+dGmV6BnQHPe
KcO5/eRHCkZAy4H+7r3WR/45/nE=
-----END CERTIFICATE-----