Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3505A668BD9711F1A99356E6CE1D38B0.roa
File:                     3505A668BD9711F1A99356E6CE1D38B0.roa (raw, json)
Hash identifier:          amyIw7GJkBeA5DN+tUdQqnB41axFDjpul+hM7HzWUuM=
Subject key identifier:   7E:BE:B4:81:2E:01:B6:9A:F1:B5:C2:51:90:D1:CC:03:50:AB:20:37
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0E11
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3505A668BD9711F1A99356E6CE1D38B0.roa
Signing time:             Thu 01 Oct 2026 12:54:15 +0000
ROA not before:           Thu 01 Oct 2026 12:54:11 +0000
ROA not after:            Wed 31 Dec 2036 12:54:11 +0000
asID:                     834
IP address blocks:        165.49.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3601 (0xe11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Oct  1 12:54:11 2026 GMT
            Not After : Dec 31 12:54:11 2036 GMT
        Subject: CN=6abe57f7-60ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f3:da:7d:07:25:1d:9d:05:08:cf:bd:5d:50:
                    3b:bc:c5:b1:8d:44:03:ce:c4:2d:89:f3:c5:91:41:
                    ee:10:27:c6:49:45:3a:1c:eb:cf:cb:a8:e3:d9:b4:
                    aa:1a:63:f7:9b:d0:06:bd:b0:6a:52:c4:38:70:38:
                    69:27:fa:ad:ea:ad:9d:56:93:42:5c:e0:ed:1f:1d:
                    c5:c3:56:b4:25:f5:55:a3:bf:06:41:17:f5:8c:d4:
                    ed:63:29:8a:55:99:89:79:71:0d:3a:a1:4c:3e:be:
                    d5:ff:2f:71:5f:f3:5b:49:7b:be:e6:71:10:66:f0:
                    9b:28:40:be:3e:08:c4:6b:10:5b:b2:ea:e1:42:93:
                    25:4b:5c:c9:80:32:50:a2:9c:fc:83:9a:09:dc:02:
                    53:6e:09:7e:10:a8:11:db:38:7d:1d:5d:52:13:cd:
                    df:03:17:a8:78:ac:ba:64:21:ea:03:70:f9:57:62:
                    07:1a:2c:af:1f:39:d8:f7:88:61:c7:ea:04:01:c2:
                    e5:d9:74:18:d8:3a:02:5f:db:b4:91:44:c4:aa:99:
                    28:a0:73:df:44:dc:79:33:91:3f:c1:b7:a2:bc:3d:
                    92:b4:c5:04:5f:ab:56:d0:c1:27:47:54:22:d5:bc:
                    62:83:c9:c8:44:4b:54:52:aa:41:b1:10:69:8e:8c:
                    a1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:BE:B4:81:2E:01:B6:9A:F1:B5:C2:51:90:D1:CC:03:50:AB:20:37
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/3505A668BD9711F1A99356E6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:ed:52:35:8c:ca:a8:fb:05:65:fd:c1:fb:fb:a0:e3:47:04:
         9f:3a:79:89:e6:de:7d:3a:01:b4:60:e6:f0:a3:f4:52:c0:e3:
         17:7f:3f:88:c4:c2:fe:bf:d1:b7:67:06:5a:02:9e:0d:d2:dd:
         55:42:39:39:0b:34:af:d9:63:52:f3:9d:11:92:5d:4c:3e:ff:
         5b:e8:59:56:1f:2c:28:b1:8b:7a:21:60:48:a1:cd:c1:bd:da:
         e4:4c:78:eb:ec:fc:31:be:16:84:df:1c:55:87:40:af:e5:b7:
         02:09:57:56:4b:ba:b6:95:21:72:21:7d:60:74:ea:cd:69:04:
         fd:eb:76:a0:ad:fe:91:99:c5:89:a7:f7:34:fa:39:7e:e1:23:
         7f:a9:c7:59:7e:4d:32:a1:2f:a7:dc:52:81:64:e0:76:48:9b:
         8c:4b:32:3a:67:a7:8d:85:8a:1e:50:47:fb:d6:24:45:e1:d2:
         68:93:00:79:b0:89:b6:48:3d:10:09:a5:00:24:ea:ae:be:c9:
         3b:a0:4c:11:f8:17:ed:4b:1f:1f:3d:3e:08:4b:80:78:e3:e9:
         91:83:e5:4d:2a:a7:f8:af:86:55:ed:f6:1b:41:18:53:00:8a:
         08:18:ca:74:c2:52:63:d9:15:13:13:70:95:ab:e2:8a:01:8a:
         30:9a:94:9f
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDhEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjEwMDExMjU0MTFaFw0zNjEyMzExMjU0MTFaMBgxFjAU
BgNVBAMTDTZhYmU1N2Y3LTYwZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZ89p9ByUdnQUIz71dUDu8xbGNRAPOxC2J88WRQe4QJ8ZJRToc68/LqOPZ
tKoaY/eb0Aa9sGpSxDhwOGkn+q3qrZ1Wk0Jc4O0fHcXDVrQl9VWjvwZBF/WM1O1j
KYpVmYl5cQ06oUw+vtX/L3Ff81tJe77mcRBm8JsoQL4+CMRrEFuy6uFCkyVLXMmA
MlCinPyDmgncAlNuCX4QqBHbOH0dXVITzd8DF6h4rLpkIeoDcPlXYgcaLK8fOdj3
iGHH6gQBwuXZdBjYOgJf27SRRMSqmSigc99E3HkzkT/Bt6K8PZK0xQRfq1bQwSdH
VCLVvGKDychES1RSqkGxEGmOjKGXAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUfr60
gS4BtprxtcJRkNHMA1CrIDcwHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzM1MDVBNjY4QkQ5NzExRjFBOTkzNTZFNkNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMVMwDQYJKoZIhvcNAQELBQAD
ggEBADDtUjWMyqj7BWX9wfv7oONHBJ86eYnm3n06AbRg5vCj9FLA4xd/P4jEwv6/
0bdnBloCng3S3VVCOTkLNK/ZY1LznRGSXUw+/1voWVYfLCixi3ohYEihzcG92uRM
eOvs/DG+FoTfHFWHQK/ltwIJV1ZLuraVIXIhfWB06s1pBP3rdqCt/pGZxYmn9zT6
OX7hI3+px1l+TTKhL6fcUoFk4HZIm4xLMjpnp42Fih5QR/vWJEXh0miTAHmwibZI
PRAJpQAk6q6+yTugTBH4F+1LHx89PghLgHjj6ZGD5U0qp/ivhlXt9htBGFMAiggY
ynTCUmPZFRMTcJWr4ooBijCalJ8=
-----END CERTIFICATE-----