Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8FDB7AAAB1C011F180B015C4CE1D38B0.roa
File:                     8FDB7AAAB1C011F180B015C4CE1D38B0.roa (raw, json)
Hash identifier:          54uMvIWnRpH9cVBFZkKSAKgRprsQP2EOdw3n/IUU02U=
Subject key identifier:   CE:90:B7:11:4B:56:CB:A0:46:03:83:A7:07:16:43:75:D2:F3:17:5B
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0DBA
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8FDB7AAAB1C011F180B015C4CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 11:20:03 +0000
ROA not before:           Wed 16 Sep 2026 11:19:59 +0000
ROA not after:            Wed 31 Dec 2036 11:19:59 +0000
asID:                     399275
IP address blocks:        165.49.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3514 (0xdba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Sep 16 11:19:59 2026 GMT
            Not After : Dec 31 11:19:59 2036 GMT
        Subject: CN=6aaa7b63-9c0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:18:81:b8:5d:18:80:5a:66:83:23:02:bb:bc:
                    3b:9e:6b:f7:83:3d:20:9b:bd:d3:49:4a:65:d9:be:
                    1a:2f:a7:29:ad:39:3f:c1:a8:02:07:31:f5:5b:c9:
                    4e:d9:d6:9e:bd:08:72:44:f0:c3:9c:eb:4d:f8:69:
                    9a:93:d5:73:b9:d6:b6:9c:c8:98:2f:30:d1:01:06:
                    69:cb:5a:e0:4b:4a:9b:9b:d1:88:ce:06:38:ee:35:
                    07:0e:28:da:6d:23:91:b4:dd:ca:cb:ae:8b:c5:6d:
                    58:c4:4b:e3:00:2c:9f:41:c5:d5:30:63:3e:fa:a7:
                    22:9e:8d:a6:0e:c3:c9:55:3c:b2:65:77:0d:87:c6:
                    dd:23:7e:91:1b:46:67:a5:46:49:f9:ed:70:ac:17:
                    aa:63:2b:3a:49:04:dd:58:84:1b:95:86:5a:ee:5c:
                    13:e6:8b:fe:19:a3:0c:ee:0b:78:06:4f:04:f2:60:
                    06:b7:cb:84:f9:0e:fe:79:b8:4b:8b:8b:1a:53:5d:
                    ae:e6:7b:ad:88:e2:9d:d7:b0:df:2c:ec:ff:db:d2:
                    52:3d:72:75:4c:bb:36:bf:a0:ee:6d:0c:48:3c:e3:
                    9f:e4:ed:57:b9:49:ca:f3:c6:ea:d1:c3:41:1c:ef:
                    dd:5c:5f:aa:71:5a:d7:d2:85:7b:7a:55:95:13:6c:
                    6e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:90:B7:11:4B:56:CB:A0:46:03:83:A7:07:16:43:75:D2:F3:17:5B
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/8FDB7AAAB1C011F180B015C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:ff:8f:ac:94:fd:18:b6:8f:99:6c:65:a1:98:b4:e0:94:db:
         6f:59:b1:f0:f4:37:87:58:bb:de:f1:3f:cf:7f:d4:d0:11:79:
         5c:96:7b:0c:06:61:fe:8a:73:7b:9f:f2:8e:7a:77:8d:71:d1:
         09:ac:cc:c5:6a:35:14:b4:87:5d:79:4e:68:2f:ae:10:f3:ef:
         93:6d:3f:da:0b:36:cd:05:13:af:51:0f:ec:e8:f6:7e:d2:0f:
         9b:14:84:2d:41:37:c7:09:64:3c:88:a1:df:3d:fb:c4:73:d5:
         68:57:fd:81:bd:52:6c:be:57:53:ab:62:b6:44:7d:fa:10:44:
         ff:59:0c:68:ae:6e:04:ea:86:5d:f6:c6:36:72:2c:c1:05:38:
         a6:06:16:d6:43:7d:76:92:72:a4:da:2b:7f:af:65:e0:07:62:
         68:44:f4:7f:7a:a1:5c:6f:51:31:05:77:d4:a7:d0:b6:e3:cc:
         e8:76:56:aa:a2:ca:58:de:df:b6:33:2e:a6:18:c0:2f:00:f8:
         8a:c5:6b:7d:f4:73:89:64:02:28:50:0a:65:51:02:f1:b4:28:
         ba:71:1f:73:b6:78:c2:d7:69:03:3c:13:c2:45:76:c8:b1:fd:
         a1:b4:a9:fb:e6:13:2d:a9:21:1f:fe:49:f3:9f:d5:0c:fe:01:
         ed:ba:be:bd
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDbowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA5MTYxMTE5NTlaFw0zNjEyMzExMTE5NTlaMBgxFjAU
BgNVBAMTDTZhYWE3YjYzLTljMGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDoGIG4XRiAWmaDIwK7vDuea/eDPSCbvdNJSmXZvhovpymtOT/BqAIHMfVb
yU7Z1p69CHJE8MOc6034aZqT1XO51racyJgvMNEBBmnLWuBLSpub0YjOBjjuNQcO
KNptI5G03crLrovFbVjES+MALJ9BxdUwYz76pyKejaYOw8lVPLJldw2Hxt0jfpEb
RmelRkn57XCsF6pjKzpJBN1YhBuVhlruXBPmi/4ZowzuC3gGTwTyYAa3y4T5Dv55
uEuLixpTXa7me62I4p3XsN8s7P/b0lI9cnVMuza/oO5tDEg845/k7Ve5ScrzxurR
w0Ec791cX6pxWtfShXt6VZUTbG4vAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUzpC3
EUtWy6BGA4OnBxZDddLzF1swHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzhGREI3QUFBQjFDMDExRjE4MEIwMTVDNENFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMWowDQYJKoZIhvcNAQELBQAD
ggEBAJb/j6yU/Ri2j5lsZaGYtOCU229ZsfD0N4dYu97xP89/1NAReVyWewwGYf6K
c3uf8o56d41x0QmszMVqNRS0h115TmgvrhDz75NtP9oLNs0FE69RD+zo9n7SD5sU
hC1BN8cJZDyIod89+8Rz1WhX/YG9Umy+V1OrYrZEffoQRP9ZDGiubgTqhl32xjZy
LMEFOKYGFtZDfXaScqTaK3+vZeAHYmhE9H96oVxvUTEFd9Sn0LbjzOh2Vqqiylje
37YzLqYYwC8A+IrFa330c4lkAihQCmVRAvG0KLpxH3O2eMLXaQM8E8JFdsix/aG0
qfvmEy2pIR/+SfOf1Qz+Ae26vr0=
-----END CERTIFICATE-----