Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E2BB0EDEB1C011F1BA5152C6CE1D38B0.roa
File:                     E2BB0EDEB1C011F1BA5152C6CE1D38B0.roa (raw, json)
Hash identifier:          cxN0C8TLsT2RnOaDFGlRwZ6LMBr38b/qNjUC3VzMraY=
Subject key identifier:   16:FC:9D:8B:13:34:C2:14:5C:6B:DA:43:0A:34:E9:E1:98:9F:0D:A1
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0DC2
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E2BB0EDEB1C011F1BA5152C6CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 11:22:22 +0000
ROA not before:           Wed 16 Sep 2026 11:22:18 +0000
ROA not after:            Wed 31 Dec 2036 11:22:18 +0000
asID:                     218797
IP address blocks:        165.49.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3522 (0xdc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Sep 16 11:22:18 2026 GMT
            Not After : Dec 31 11:22:18 2036 GMT
        Subject: CN=6aaa7bee-8a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b5:f9:16:90:7e:1e:b7:a8:09:6a:76:1b:71:
                    07:8e:3a:d3:77:f0:21:24:2b:4a:7b:f8:e3:8c:0f:
                    a4:fc:a0:eb:82:06:13:fe:d8:12:db:2c:38:9f:e5:
                    7f:bd:3b:5f:c6:af:fb:5f:5d:c9:ba:f6:20:3f:37:
                    78:9d:23:f2:a7:1e:42:1e:33:43:9f:88:19:72:40:
                    18:05:57:5c:63:42:21:29:e7:b2:c3:30:82:ce:b6:
                    92:7b:a0:b5:a6:0f:45:75:c0:38:ed:37:12:1a:4b:
                    32:31:83:cc:e5:f9:5b:66:b4:85:35:92:57:d2:fe:
                    67:94:85:08:dc:b0:d2:7f:25:de:af:86:76:6f:53:
                    84:fd:8b:af:53:28:51:42:42:4a:db:ce:30:31:d9:
                    43:60:45:78:5b:75:14:c0:b0:24:f4:aa:3d:55:66:
                    30:a0:c9:55:51:63:06:87:3e:4d:0c:5e:0b:11:9b:
                    35:21:d7:f3:a5:49:67:f5:0f:99:97:7f:ee:b5:2d:
                    3d:1d:c6:20:cb:b8:1f:b4:7a:68:0b:16:ff:bd:4c:
                    7f:4f:50:59:d7:db:c5:e2:88:c6:8f:b5:f1:e5:6f:
                    78:96:c1:50:4b:35:5d:3c:fd:c9:c9:d4:6f:3a:d5:
                    18:f5:95:67:39:ab:28:3c:6d:f1:11:f6:2d:5c:b7:
                    1d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FC:9D:8B:13:34:C2:14:5C:6B:DA:43:0A:34:E9:E1:98:9F:0D:A1
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/E2BB0EDEB1C011F1BA5152C6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:7b:db:4b:b4:c5:77:57:4c:b0:4d:fa:26:27:bf:4d:c7:65:
         38:52:2d:19:2f:1a:ad:4a:34:7d:e1:34:ee:2f:81:ac:0c:7e:
         d9:64:aa:11:fd:d4:ef:7c:b7:a5:24:6b:7d:c8:89:04:9c:c2:
         6a:43:a1:10:7f:17:c0:43:b6:09:38:2d:fc:7c:f7:95:4c:b9:
         92:48:ec:c8:1a:1c:b6:a9:48:c0:88:e7:ac:78:3f:b9:c4:66:
         25:17:cd:1d:b9:eb:68:cd:77:9a:25:24:3e:59:66:db:69:37:
         4c:c4:3b:ec:b1:49:e0:f0:44:0e:e1:44:fc:82:9e:e5:94:61:
         af:55:ee:3c:9a:73:af:cf:ae:47:71:0c:92:38:e9:3e:a6:c4:
         3d:dd:8d:4e:fc:5c:09:10:cc:78:29:c3:6d:04:06:67:78:5b:
         bd:87:e2:1c:c7:34:ec:00:7d:5e:d5:f0:03:23:90:62:72:bd:
         26:7c:9c:19:af:aa:b6:d0:fa:75:c5:65:57:e8:32:9a:24:cf:
         2f:6e:83:6f:85:78:8a:76:7b:dd:50:1b:fb:72:e1:bb:19:08:
         55:b0:52:d4:b1:6e:9d:c6:de:39:fd:55:3f:41:0b:d6:63:b4:
         7a:df:e6:2b:d3:8d:82:f3:47:76:ef:71:37:67:12:62:63:ee:
         d7:42:93:aa
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDcIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA5MTYxMTIyMThaFw0zNjEyMzExMTIyMThaMBgxFjAU
BgNVBAMTDTZhYWE3YmVlLThhMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbtfkWkH4et6gJanYbcQeOOtN38CEkK0p7+OOMD6T8oOuCBhP+2BLbLDif
5X+9O1/Gr/tfXcm69iA/N3idI/KnHkIeM0OfiBlyQBgFV1xjQiEp57LDMILOtpJ7
oLWmD0V1wDjtNxIaSzIxg8zl+VtmtIU1klfS/meUhQjcsNJ/Jd6vhnZvU4T9i69T
KFFCQkrbzjAx2UNgRXhbdRTAsCT0qj1VZjCgyVVRYwaHPk0MXgsRmzUh1/OlSWf1
D5mXf+61LT0dxiDLuB+0emgLFv+9TH9PUFnX28XiiMaPtfHlb3iWwVBLNV08/cnJ
1G861Rj1lWc5qyg8bfER9i1ctx3dAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUFvyd
ixM0whRca9pDCjTp4ZifDaEwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0UyQkIwRURFQjFDMDExRjFCQTUxNTJDNkNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMXQwDQYJKoZIhvcNAQELBQAD
ggEBADp720u0xXdXTLBN+iYnv03HZThSLRkvGq1KNH3hNO4vgawMftlkqhH91O98
t6Uka33IiQScwmpDoRB/F8BDtgk4Lfx895VMuZJI7MgaHLapSMCI56x4P7nEZiUX
zR2562jNd5olJD5ZZttpN0zEO+yxSeDwRA7hRPyCnuWUYa9V7jyac6/PrkdxDJI4
6T6mxD3djU78XAkQzHgpw20EBmd4W72H4hzHNOwAfV7V8AMjkGJyvSZ8nBmvqrbQ
+nXFZVfoMpokzy9ug2+FeIp2e91QG/ty4bsZCFWwUtSxbp3G3jn9VT9BC9ZjtHrf
5ivTjYLzR3bvcTdnEmJj7tdCk6o=
-----END CERTIFICATE-----