Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A8DF8FC8B1C011F19EC661C4CE1D38B0.roa
File:                     A8DF8FC8B1C011F19EC661C4CE1D38B0.roa (raw, json)
Hash identifier:          6eddaRWR6RbMrherAYj4+GdQm9OKMpE/YzdaMuWdxg4=
Subject key identifier:   09:FA:7B:9C:F5:F4:0D:99:9F:52:0D:A2:7C:FD:5E:B5:B9:95:69:99
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0DBC
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A8DF8FC8B1C011F19EC661C4CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 11:20:45 +0000
ROA not before:           Wed 16 Sep 2026 11:20:41 +0000
ROA not after:            Wed 31 Dec 2036 11:20:41 +0000
asID:                     63099
IP address blocks:        165.49.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3516 (0xdbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Sep 16 11:20:41 2026 GMT
            Not After : Dec 31 11:20:41 2036 GMT
        Subject: CN=6aaa7b8d-88a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b9:b1:57:88:33:13:26:3a:04:3f:27:8c:8a:
                    2e:a5:c6:7a:ad:3e:4e:6e:b1:df:5e:61:ea:70:88:
                    2a:4e:1b:ce:e0:1e:0b:dd:a0:3e:91:fe:59:23:e1:
                    67:cc:62:1f:7e:ce:a0:91:b2:9f:f2:98:3d:73:15:
                    26:8f:84:5c:c5:f2:47:6f:d9:de:e4:dc:7c:e4:d8:
                    48:6a:1a:af:92:b6:fb:a5:96:ef:c1:d1:b1:42:5c:
                    93:25:66:25:da:6a:3b:d6:0e:50:4f:81:2b:cd:e9:
                    1f:b5:65:f4:8d:57:48:04:82:68:1f:32:7a:e4:91:
                    1d:b4:97:f3:8b:ea:c5:ec:e8:a2:46:d4:bf:e9:0e:
                    77:91:66:d2:e7:cc:fd:c4:3a:fc:d4:d2:7e:c0:5b:
                    0d:d6:be:ad:d4:43:9d:5c:92:26:37:a0:18:24:b1:
                    6e:b4:db:22:6c:56:68:39:31:8a:34:85:6e:db:b1:
                    80:4b:bf:35:bc:77:4d:4b:61:ed:20:42:ba:c2:8b:
                    dd:a2:20:a6:87:0a:f6:d9:25:ab:26:64:fd:6a:b6:
                    15:29:4a:67:0c:cf:a2:64:23:f6:7b:53:f7:8b:68:
                    96:ed:1c:ce:c6:21:ca:75:fe:2b:4d:1b:4c:f5:f5:
                    49:13:de:f5:80:ff:f0:f6:c6:e9:5f:75:fe:de:a8:
                    04:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FA:7B:9C:F5:F4:0D:99:9F:52:0D:A2:7C:FD:5E:B5:B9:95:69:99
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/A8DF8FC8B1C011F19EC661C4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:f4:38:67:64:1b:73:51:82:a7:bc:4a:cd:e3:b6:30:0c:95:
         95:ff:a7:49:cc:83:b4:5e:08:c0:13:32:30:3d:ad:11:1f:8a:
         ff:61:2a:a3:14:fb:b2:a5:1f:1b:40:86:9c:c8:4a:c3:84:52:
         8c:39:17:25:21:c5:92:8e:32:8e:55:5b:e5:88:f5:9d:ec:33:
         84:98:45:40:84:41:42:94:d1:f9:56:e6:4f:d9:b0:b2:1d:b5:
         31:f2:39:2e:96:34:29:91:d1:aa:e7:2b:46:7a:26:df:0a:ff:
         36:ed:a7:5d:2e:dc:9b:c1:11:ca:2a:4f:d4:b0:92:c7:74:f7:
         5e:e4:9a:87:a2:7c:95:cf:44:30:0e:a1:44:e2:4d:06:77:fb:
         81:a3:48:58:b4:61:d1:c5:23:97:ce:a1:6b:26:4f:9a:ec:84:
         ef:3d:a7:70:de:b0:b9:09:cb:08:4a:eb:81:11:9e:51:bc:02:
         61:18:df:36:07:98:f7:93:c6:15:46:d4:c7:93:92:06:0b:db:
         fe:35:77:29:fb:8c:1a:8a:ef:ac:3b:1d:90:29:52:2f:ef:5b:
         c9:a5:c7:3f:ff:a2:cd:49:29:7b:2a:78:f3:b4:27:bf:58:d8:
         bf:a2:e0:8b:7f:e4:b2:df:6c:33:e0:97:e2:3c:a7:9a:a6:ff:
         29:97:de:10
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDbwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA5MTYxMTIwNDFaFw0zNjEyMzExMTIwNDFaMBgxFjAU
BgNVBAMTDTZhYWE3YjhkLTg4YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD4ubFXiDMTJjoEPyeMii6lxnqtPk5usd9eYepwiCpOG87gHgvdoD6R/lkj
4WfMYh9+zqCRsp/ymD1zFSaPhFzF8kdv2d7k3Hzk2EhqGq+Stvullu/B0bFCXJMl
ZiXaajvWDlBPgSvN6R+1ZfSNV0gEgmgfMnrkkR20l/OL6sXs6KJG1L/pDneRZtLn
zP3EOvzU0n7AWw3Wvq3UQ51ckiY3oBgksW602yJsVmg5MYo0hW7bsYBLvzW8d01L
Ye0gQrrCi92iIKaHCvbZJasmZP1qthUpSmcMz6JkI/Z7U/eLaJbtHM7GIcp1/itN
G0z19UkT3vWA//D2xulfdf7eqAR7AgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUCfp7
nPX0DZmfUg2ifP1etbmVaZkwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0E4REY4RkM4QjFDMDExRjE5RUM2NjFDNENFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMe8wDQYJKoZIhvcNAQELBQAD
ggEBAEf0OGdkG3NRgqe8Ss3jtjAMlZX/p0nMg7ReCMATMjA9rREfiv9hKqMU+7Kl
HxtAhpzISsOEUow5FyUhxZKOMo5VW+WI9Z3sM4SYRUCEQUKU0flW5k/ZsLIdtTHy
OS6WNCmR0arnK0Z6Jt8K/zbtp10u3JvBEcoqT9Swksd0917kmoeifJXPRDAOoUTi
TQZ3+4GjSFi0YdHFI5fOoWsmT5rshO89p3DesLkJywhK64ERnlG8AmEY3zYHmPeT
xhVG1MeTkgYL2/41dyn7jBqK76w7HZApUi/vW8mlxz//os1JKXsqePO0J79Y2L+i
4It/5LLfbDPgl+I8p5qm/ymX3hA=
-----END CERTIFICATE-----