Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/59B4CBC8BA9611F1BB0FD4C6CE1D38B0.roa
File:                     59B4CBC8BA9611F1BB0FD4C6CE1D38B0.roa (raw, json)
Hash identifier:          P29C7gfH+qL7S0N2YrV/ayCLyD1qJIoe7AONe72iBPw=
Subject key identifier:   BF:A3:AA:C8:FB:3D:3F:53:ED:32:77:9E:A7:02:CF:25:2A:A4:07:2E
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0DF2
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/59B4CBC8BA9611F1BB0FD4C6CE1D38B0.roa
Signing time:             Sun 27 Sep 2026 17:10:34 +0000
ROA not before:           Sun 27 Sep 2026 17:10:30 +0000
ROA not after:            Wed 31 Dec 2036 17:10:30 +0000
asID:                     834
IP address blocks:        165.49.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3570 (0xdf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Sep 27 17:10:30 2026 GMT
            Not After : Dec 31 17:10:30 2036 GMT
        Subject: CN=6ab94e0a-8c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:df:17:32:ee:15:02:30:7f:57:87:cf:1e:95:
                    4a:84:c9:0e:89:d0:d3:5d:a5:c8:90:dd:17:7f:fe:
                    aa:9b:df:e6:a6:2a:8f:09:d5:90:65:5e:6d:da:3e:
                    64:f2:6e:69:fe:1d:9a:4d:9d:b3:22:55:6e:08:7e:
                    78:98:72:3a:51:47:89:56:1e:43:1f:90:3f:5e:62:
                    5f:a0:65:63:2e:4c:b1:b6:60:a1:9c:be:e4:8c:a1:
                    73:1f:05:06:c5:14:07:7d:14:d6:b9:cb:e7:13:e1:
                    f6:ea:5c:85:98:ce:01:ae:e5:fa:6c:1f:a1:6c:73:
                    ae:dd:85:1d:06:fc:f7:86:9b:b4:d3:e6:e9:99:8c:
                    1d:ff:36:cf:07:d0:7a:6d:96:a3:5b:ba:59:84:b0:
                    17:f0:a1:03:4e:74:d2:d0:f2:d9:6d:b5:b1:0e:92:
                    b7:ac:cf:9e:81:36:e8:93:fa:a3:58:fd:11:c7:e9:
                    a4:ee:80:92:5f:ba:6b:67:c1:a9:eb:f1:90:07:c7:
                    72:41:9c:62:5a:1c:96:1a:88:43:36:d6:94:cc:64:
                    ff:fa:e7:da:87:79:72:77:a7:c7:5a:f3:58:ea:30:
                    1d:66:39:c0:02:18:9a:e0:7b:97:2a:20:06:c1:d4:
                    8e:ca:a5:9a:37:e8:7e:dd:5d:6a:13:a8:1f:39:64:
                    a5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A3:AA:C8:FB:3D:3F:53:ED:32:77:9E:A7:02:CF:25:2A:A4:07:2E
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/59B4CBC8BA9611F1BB0FD4C6CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:e4:a2:60:b5:ea:64:f7:ed:ea:7c:3c:b4:35:12:46:27:0c:
         68:97:fb:64:10:1b:43:64:dd:ab:92:dc:04:3d:1f:15:cd:95:
         3f:60:ed:f5:ff:e3:15:39:16:c4:d6:87:4b:06:d7:ff:b5:37:
         08:52:c4:8c:d3:df:2b:31:0a:49:c6:54:e8:31:68:a1:fb:78:
         0b:39:a3:b5:ba:2d:e9:ad:cb:b4:86:56:80:f5:2e:f9:c5:2d:
         66:c3:cb:b5:6f:9c:16:9e:fd:2f:75:95:4f:83:65:12:b6:4a:
         fa:bc:07:9c:41:10:7b:aa:ad:a6:cb:94:d3:3a:1f:8c:84:97:
         4a:4c:c8:6d:34:4e:f0:58:fb:55:e8:02:43:1c:61:37:fc:36:
         00:88:88:87:74:11:1f:d0:ca:ab:b8:9b:b1:f0:47:14:30:aa:
         3b:01:1f:59:36:b0:88:06:01:9a:73:d8:a4:22:57:01:6c:aa:
         43:33:b8:23:40:e1:44:b7:55:dd:d5:b0:1c:4a:8a:d1:26:16:
         e6:a7:8c:20:ab:88:f1:4d:48:66:75:00:0d:84:9f:5b:70:9b:
         5e:d1:7a:51:4f:d4:f5:87:bb:34:76:e1:cf:26:be:90:c2:7a:
         07:f2:0c:2e:ff:36:ef:f7:84:72:d2:63:c8:b1:ff:22:a8:a6:
         d9:3d:ab:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----