Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8F09D3A4A08311F18E8918DDCE1D38B0.roa
File:                     8F09D3A4A08311F18E8918DDCE1D38B0.roa (raw, json)
Hash identifier:          /r1Meo3oyanwGTizwkgQtKks8b84VQWy+WcgPZBZKIc=
Subject key identifier:   C9:9E:10:A3:E8:8C:B0:F5:39:1D:C9:F5:77:7F:E9:BF:F5:47:F1:36
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0D5D
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8F09D3A4A08311F18E8918DDCE1D38B0.roa
Signing time:             Tue 25 Aug 2026 12:50:33 +0000
ROA not before:           Tue 25 Aug 2026 12:50:29 +0000
ROA not after:            Wed 31 Dec 2036 12:50:29 +0000
asID:                     152179
IP address blocks:        165.49.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3421 (0xd5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Aug 25 12:50:29 2026 GMT
            Not After : Dec 31 12:50:29 2036 GMT
        Subject: CN=6a8d8f99-42d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:46:fe:da:a1:1c:2b:69:5a:22:77:55:29:e6:
                    8a:ac:cf:e7:b9:e8:9f:8c:3f:43:b9:7f:3a:34:78:
                    a5:33:21:83:43:ca:3e:a3:68:07:e8:d2:03:da:ac:
                    7a:b2:e4:dc:02:9b:0f:97:d5:c1:53:20:95:ac:02:
                    01:88:39:59:37:94:fb:be:c2:a8:ce:a5:ff:93:c2:
                    ba:ec:ac:b4:40:52:27:ca:0d:f2:41:04:5f:54:a5:
                    2c:77:5b:27:49:2a:59:ec:4b:6f:a9:03:87:50:a4:
                    43:ac:15:1f:91:46:02:fc:e9:f3:21:0b:f4:1f:6f:
                    70:52:82:89:3e:78:e8:06:f6:86:c7:5f:e3:7f:a5:
                    42:d6:d1:55:fd:13:ee:e2:d0:ad:4b:c8:cb:1f:00:
                    89:93:8e:f4:aa:93:18:31:b6:b0:05:b9:31:59:f7:
                    9f:7d:8a:f1:3a:01:73:e9:19:79:40:dc:28:ea:9a:
                    2c:cf:5b:fc:58:d0:66:ed:eb:4f:cf:e1:22:98:2f:
                    ba:dc:63:e8:07:94:15:7f:a1:76:1c:d8:da:4e:42:
                    71:42:74:f0:79:43:26:1e:7d:b3:32:2e:ae:79:30:
                    03:5c:e5:e1:6a:3c:a4:85:9a:ac:43:bc:c0:05:06:
                    2f:26:15:b3:a5:68:32:3f:3c:e4:e5:a3:1e:52:58:
                    f6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:9E:10:A3:E8:8C:B0:F5:39:1D:C9:F5:77:7F:E9:BF:F5:47:F1:36
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8F09D3A4A08311F18E8918DDCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:a0:d7:c2:cc:13:04:ac:33:63:0d:40:17:45:2b:11:49:76:
         e4:82:94:84:13:b1:79:d8:6c:e6:0c:dc:c8:ee:e4:7e:d9:9b:
         94:80:4b:51:84:09:0b:b5:e2:a1:38:1a:20:74:c5:64:21:c2:
         1c:05:66:0c:8f:45:38:72:be:a5:06:4e:46:79:77:16:62:98:
         ff:fa:c9:a9:de:cb:8f:e1:ee:60:f0:2c:fb:59:9f:5c:3a:2c:
         82:40:e2:ea:5c:a5:52:94:97:2f:6a:bc:85:99:12:9e:03:68:
         93:52:29:16:e5:b8:d6:03:cd:24:14:05:dd:81:97:8f:75:37:
         0c:16:e0:33:6b:30:40:a8:62:8e:5d:b5:93:1a:54:a9:34:bf:
         29:81:42:5f:d8:5b:76:99:86:ea:d3:c5:7f:8e:32:98:a1:9b:
         d8:1a:5d:2b:90:50:68:80:c2:e1:05:65:45:19:b0:2d:68:f9:
         ce:16:b3:38:23:6b:7a:5a:ab:2b:c4:e4:b2:52:df:5c:15:07:
         66:1f:d1:d4:e8:78:e3:60:25:81:61:6b:c9:5f:45:78:c2:44:
         71:d5:29:fe:32:04:11:21:a1:f5:f9:56:8f:ed:53:a3:9e:bd:
         5f:01:2b:bd:c4:52:ca:f8:6b:97:df:5c:f6:e8:c9:23:ba:11:
         7d:99:e1:c6
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDV0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA4MjUxMjUwMjlaFw0zNjEyMzExMjUwMjlaMBgxFjAU
BgNVBAMTDTZhOGQ4Zjk5LTQyZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCbRv7aoRwraVoid1Up5oqsz+e56J+MP0O5fzo0eKUzIYNDyj6jaAfo0gPa
rHqy5NwCmw+X1cFTIJWsAgGIOVk3lPu+wqjOpf+TwrrsrLRAUifKDfJBBF9UpSx3
WydJKlnsS2+pA4dQpEOsFR+RRgL86fMhC/Qfb3BSgok+eOgG9obHX+N/pULW0VX9
E+7i0K1LyMsfAImTjvSqkxgxtrAFuTFZ9599ivE6AXPpGXlA3CjqmizPW/xY0Gbt
60/P4SKYL7rcY+gHlBV/oXYc2NpOQnFCdPB5QyYefbMyLq55MANc5eFqPKSFmqxD
vMAFBi8mFbOlaDI/POTlox5SWPbDAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUyZ4Q
o+iMsPU5Hcn1d3/pv/VH8TYwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzhGMDlEM0E0QTA4MzExRjE4RTg5MThERENFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMfkwDQYJKoZIhvcNAQELBQAD
ggEBABCg18LMEwSsM2MNQBdFKxFJduSClIQTsXnYbOYM3Mju5H7Zm5SAS1GECQu1
4qE4GiB0xWQhwhwFZgyPRThyvqUGTkZ5dxZimP/6yaney4/h7mDwLPtZn1w6LIJA
4upcpVKUly9qvIWZEp4DaJNSKRbluNYDzSQUBd2Bl491NwwW4DNrMECoYo5dtZMa
VKk0vymBQl/YW3aZhurTxX+OMpihm9gaXSuQUGiAwuEFZUUZsC1o+c4Wszgja3pa
qyvE5LJS31wVB2Yf0dToeONgJYFha8lfRXjCRHHVKf4yBBEhofX5Vo/tU6OevV8B
K73EUsr4a5ffXPboySO6EX2Z4cY=
-----END CERTIFICATE-----