Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/3227743CB1C911F1A1270FF8CE1D38B0.roa
File:                     3227743CB1C911F1A1270FF8CE1D38B0.roa (raw, json)
Hash identifier:          r/89Dv3rxjY+lpFgaaHLliiD4KSRvscX6Ur3brQazoU=
Subject key identifier:   39:49:3F:C1:4F:42:F2:82:51:70:8A:7F:08:34:BC:3B:34:B0:A4:DF
Certificate issuer:       /CN=F36F6034AR/serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
Certificate serial:       095F
Authority key identifier: E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/3227743CB1C911F1A1270FF8CE1D38B0.roa
Signing time:             Wed 16 Sep 2026 12:21:52 +0000
ROA not before:           Wed 16 Sep 2026 12:21:47 +0000
ROA not after:            Tue 16 Sep 2036 12:21:47 +0000
asID:                     37518
IP address blocks:        165.231.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                          rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2399 (0x95f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AR, serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
        Validity
            Not Before: Sep 16 12:21:47 2026 GMT
            Not After : Sep 16 12:21:47 2036 GMT
        Subject: CN=6aaa89df-9a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:84:70:f4:ba:21:c0:e8:5c:47:2a:e5:40:69:
                    2e:7b:0e:54:71:a3:4b:09:e4:bd:ac:c3:f1:4f:a4:
                    4b:a9:5b:cf:c9:93:f9:72:cd:9a:5a:0c:f8:c2:bc:
                    02:0b:15:58:63:f1:bd:79:13:0b:3b:53:c2:bb:dd:
                    db:d7:7d:9c:7e:a7:6f:3d:34:d7:cf:b2:74:92:a9:
                    a8:0e:95:de:df:e9:56:c3:8a:df:ce:b2:13:b5:4c:
                    28:58:0d:44:79:cb:4f:e9:02:00:b2:8d:b5:3a:68:
                    70:db:6e:dc:89:aa:11:a1:00:62:b7:ea:61:bf:ad:
                    4d:e4:70:c5:28:52:e4:ca:d9:9e:ce:26:4d:55:bb:
                    83:cc:93:9f:56:1e:d9:ae:01:80:5b:11:e3:c2:2f:
                    25:81:b8:b5:71:0d:18:18:8b:ab:ac:17:c3:97:ce:
                    58:a5:fd:a6:0c:a9:81:89:17:2e:bb:c8:00:88:87:
                    23:b9:b2:88:18:d0:36:3c:3a:9f:22:f6:c7:8f:a3:
                    56:e3:ec:85:8a:2f:60:6f:7d:a2:de:c4:c1:ba:51:
                    64:b3:71:e4:ba:16:c7:7a:07:6d:67:c2:47:1b:00:
                    64:86:e4:df:ea:72:01:c1:9b:5c:48:5c:09:7c:fd:
                    9d:41:8d:61:e1:eb:7f:6a:23:1d:eb:e5:e5:b1:05:
                    d4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:49:3F:C1:4F:42:F2:82:51:70:8A:7F:08:34:BC:3B:34:B0:A4:DF
            X509v3 Authority Key Identifier:
                keyid:E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/3227743CB1C911F1A1270FF8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.231.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:fa:0a:bb:84:02:99:c6:22:7e:63:21:82:7d:ad:1d:49:d5:
         28:6b:eb:c6:af:98:39:0a:dc:97:15:b3:85:81:24:4f:d4:76:
         ea:98:d1:3f:41:27:16:43:51:50:cc:1e:04:c0:c0:5c:a9:66:
         44:2f:9d:e5:28:2b:fa:5c:88:5d:06:7e:a5:44:bc:dd:ef:36:
         76:41:f2:f2:8a:91:cd:28:4a:08:de:39:82:cf:a0:8d:37:27:
         f5:28:e7:90:b4:fd:03:d8:36:9b:4f:f9:2d:5b:86:42:d1:4b:
         ed:d7:e2:b8:a5:71:7e:71:0e:eb:03:ca:58:87:ff:bf:f9:f4:
         0c:73:5c:ce:b9:98:f0:bd:4a:f5:55:87:fe:dd:83:c3:5d:67:
         c3:c9:4f:db:4f:3e:bc:f4:a5:d0:3a:6a:87:48:9f:96:20:69:
         72:84:cd:54:e1:6d:02:0d:04:01:c1:d7:cc:fd:f5:2e:ed:77:
         95:c0:2b:b4:f3:c8:29:20:a2:53:1d:ff:3b:27:74:f5:88:18:
         b5:94:a6:17:4a:60:e1:7b:8a:34:e8:a3:74:b1:df:2b:96:a9:
         ed:75:d7:e1:7a:4f:c0:66:63:4a:33:37:78:06:13:e8:8b:6c:
         09:f0:89:c3:91:8e:5a:d2:81:d5:80:53:f2:b5:d9:fa:78:91:
         b9:26:cf:39
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICCV8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjYwMzRBUjExMC8GA1UEBRMoRTczNTM0RjhFMENDQjlDMzg0MTMxMThENzdGREVB
NEU4MDhGRUEzMTAeFw0yNjA5MTYxMjIxNDdaFw0zNjA5MTYxMjIxNDdaMBgxFjAU
BgNVBAMTDTZhYWE4OWRmLTlhNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRhHD0uiHA6FxHKuVAaS57DlRxo0sJ5L2sw/FPpEupW8/Jk/lyzZpaDPjC
vAILFVhj8b15Ews7U8K73dvXfZx+p289NNfPsnSSqagOld7f6VbDit/OshO1TChY
DUR5y0/pAgCyjbU6aHDbbtyJqhGhAGK36mG/rU3kcMUoUuTK2Z7OJk1Vu4PMk59W
HtmuAYBbEePCLyWBuLVxDRgYi6usF8OXzlil/aYMqYGJFy67yACIhyO5sogY0DY8
Op8i9sePo1bj7IWKL2BvfaLexMG6UWSzceS6Fsd6B21nwkcbAGSG5N/qcgHBm1xI
XAl8/Z1BjWHh639qIx3r5eWxBdTnAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUOUk/
wU9C8oJRcIp/CDS8OzSwpN8wHwYDVR0jBBgwFoAU5zU0+ODMucOEExGNd/3qToCP
6jEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY2MDM0L0VBMTc2NzA0OTBGQzExRUE4QzRGNUI2RUY4QUVBMjI4LzV6VTAt
T0RNdWNPRUV4R05kXzNxVG9DUDZqRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzV6VTAtT0RNdWNPRUV4R05kXzNxVG9DUDZqRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkY2MDM0L0VBMTc2NzA0OTBGQzExRUE4QzRGNUI2RUY4QUVB
MjI4LzMyMjc3NDNDQjFDOTExRjFBMTI3MEZGOENFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACl57wwDQYJKoZIhvcNAQELBQAD
ggEBAHf6CruEApnGIn5jIYJ9rR1J1Shr68avmDkK3JcVs4WBJE/UduqY0T9BJxZD
UVDMHgTAwFypZkQvneUoK/pciF0GfqVEvN3vNnZB8vKKkc0oSgjeOYLPoI03J/Uo
55C0/QPYNptP+S1bhkLRS+3X4rilcX5xDusDyliH/7/59AxzXM65mPC9SvVVh/7d
g8NdZ8PJT9tPPrz0pdA6aodIn5YgaXKEzVThbQINBAHB18z99S7td5XAK7TzyCkg
olMd/zsndPWIGLWUphdKYOF7ijToo3Sx3yuWqe111+F6T8BmY0ozN3gGE+iLbAnw
icORjlrSgdWAU/K12fp4kbkmzzk=
-----END CERTIFICATE-----