Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/80BAFC42585811F1B9D7D7A3CE1D38B0.roa
File:                     80BAFC42585811F1B9D7D7A3CE1D38B0.roa (raw, json)
Hash identifier:          m81zyJhSrCBf0ZvaOI/IIP9AsTOzjFb2z1/+O8Lbr00=
Subject key identifier:   6F:57:5C:F2:0B:C6:29:69:D8:7B:38:27:91:33:82:CC:F8:3B:93:F8
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0BF3
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/80BAFC42585811F1B9D7D7A3CE1D38B0.roa
Signing time:             Mon 25 May 2026 16:40:57 +0000
ROA not before:           Mon 25 May 2026 16:40:52 +0000
ROA not after:            Wed 31 Dec 2036 16:40:52 +0000
asID:                     400308
IP address blocks:        165.49.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 06 Jun 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3059 (0xbf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: May 25 16:40:52 2026 GMT
            Not After : Dec 31 16:40:52 2036 GMT
        Subject: CN=6a147b99-d2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c9:5a:5a:98:90:69:a8:0c:ef:08:24:3a:b3:
                    ce:24:86:6a:97:09:a5:f5:46:58:38:bb:5b:31:4f:
                    7a:c0:ae:38:87:e0:17:64:92:19:30:ed:b0:78:44:
                    d0:9a:ae:a3:9c:96:6a:7d:5e:48:eb:8b:12:3a:fc:
                    b2:ae:a5:c3:f1:3e:7d:75:3e:67:23:32:e0:39:ec:
                    45:65:2b:3e:26:10:b7:a5:f6:38:95:be:d7:b7:79:
                    13:21:07:04:1c:72:da:a4:93:3d:43:de:14:fa:60:
                    39:e5:8f:b7:13:59:8e:bc:28:e8:91:2b:f8:49:f5:
                    2a:fd:c9:6c:68:98:1c:cc:28:d0:7a:6e:3a:55:1b:
                    df:62:7f:2c:58:2a:aa:27:6c:18:aa:af:97:a4:aa:
                    89:a4:f0:92:d3:c9:d0:3c:67:a4:33:7f:75:b4:9f:
                    89:24:b5:43:a9:59:7a:df:12:d7:c4:f4:49:d7:63:
                    a1:96:15:c3:b5:77:be:6e:bc:94:25:36:02:28:2b:
                    b0:20:8c:c5:b4:01:d4:08:72:09:d1:77:be:c4:f3:
                    f4:eb:e1:f3:b1:48:47:89:0f:04:86:f2:a9:8d:de:
                    c7:61:27:4b:90:bc:c5:8b:dc:e2:c0:9f:ab:04:06:
                    b6:0a:19:b9:e9:53:6d:76:59:94:94:61:11:79:17:
                    de:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:57:5C:F2:0B:C6:29:69:D8:7B:38:27:91:33:82:CC:F8:3B:93:F8
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/80BAFC42585811F1B9D7D7A3CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:2e:08:c3:1a:aa:71:0d:f1:53:5f:19:89:1d:5d:d2:f9:ee:
         30:7e:11:4b:c8:56:fd:8a:1b:4b:91:99:89:a0:72:77:0e:80:
         9b:67:cd:ee:c1:4b:66:83:81:23:74:3d:11:05:3a:eb:5e:50:
         9a:92:ee:7d:3e:9d:62:ad:e0:45:f5:d1:27:a2:7f:27:49:71:
         d4:d9:d0:46:ed:9a:94:fe:b1:42:ca:78:af:ad:62:86:45:45:
         48:3b:88:37:a3:96:cb:d0:83:41:39:b1:73:51:42:b5:9e:f2:
         92:4a:12:4b:9a:bd:6f:45:2b:60:d8:32:41:5f:9e:dc:58:f3:
         23:51:2d:74:d8:bb:13:41:59:c2:fd:63:0d:d8:1f:8e:0a:0c:
         cb:af:7c:8f:19:f6:47:78:77:c7:41:38:2f:89:51:01:2a:55:
         40:02:28:eb:2c:93:82:43:ad:51:ad:99:5f:c6:d5:d7:6d:5d:
         e8:ef:8c:a4:71:31:48:c1:ab:7d:e2:9b:01:98:dd:21:19:08:
         47:26:43:40:18:04:6a:36:50:71:b3:1a:14:82:ab:e3:91:80:
         6d:bc:b8:89:db:fd:98:52:e4:b7:81:09:55:db:c1:e1:b3:5f:
         d5:6a:c9:73:7b:2a:e2:fa:41:a2:c9:ee:b3:3e:e9:42:ac:ac:
         13:77:4e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:20:04 2026 by rpki-client