Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BB400338BB6511F1ABAB760ECF1D38B0.roa
File:                     BB400338BB6511F1ABAB760ECF1D38B0.roa (raw, json)
Hash identifier:          deNpJOktCRdbynGoYxyBcwf8avqTGybhi//dUAifVGw=
Subject key identifier:   54:C1:8F:43:2D:CD:70:7C:20:B7:B6:30:C8:EA:7A:C5:08:35:CD:5B
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0E05
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BB400338BB6511F1ABAB760ECF1D38B0.roa
Signing time:             Mon 28 Sep 2026 17:55:04 +0000
ROA not before:           Mon 28 Sep 2026 17:55:00 +0000
ROA not after:            Wed 31 Dec 2036 17:55:00 +0000
asID:                     9009
IP address blocks:        165.49.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 00:26:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3589 (0xe05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Sep 28 17:55:00 2026 GMT
            Not After : Dec 31 17:55:00 2036 GMT
        Subject: CN=6abaa9f7-d8ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:ab:a5:3d:1a:9e:48:15:db:71:10:53:91:
                    25:6c:8c:4a:ba:98:2f:69:bd:9d:62:48:29:fc:4b:
                    0e:e6:32:07:28:d6:d3:c9:e9:c5:91:94:cc:dd:1b:
                    0d:ce:4d:04:73:1b:a6:2f:8b:b3:91:64:47:68:2e:
                    97:42:38:23:5f:bf:3d:20:a9:b5:31:48:43:0b:8b:
                    7b:fa:01:48:68:e8:63:7f:08:2f:34:56:57:1f:a7:
                    3b:30:2f:3e:02:0c:8f:fd:e9:d7:67:fd:48:61:0e:
                    f9:74:b3:3a:f6:18:8a:75:a1:e7:c5:5d:2a:ab:17:
                    48:b7:87:36:25:73:ee:b6:25:e2:38:a9:1e:90:61:
                    6a:5d:1d:d5:29:5a:27:7b:67:a2:b8:51:f3:75:75:
                    01:30:aa:65:87:e0:24:7f:00:53:f7:07:26:a2:99:
                    e5:46:d4:a2:e9:ca:69:ef:a2:cb:27:2c:7c:fb:be:
                    37:bd:7d:3d:49:bb:9f:f5:5e:f9:27:13:40:83:cc:
                    ee:37:f0:d9:a9:cf:cd:dd:97:c2:41:86:25:e0:bf:
                    fe:1c:0f:6f:f4:f1:1a:06:d5:a6:28:58:4f:8a:d3:
                    f4:18:91:d3:d3:82:0d:e2:45:d1:84:b6:cf:67:e1:
                    d4:df:2b:ba:15:05:68:3b:67:f4:71:e0:dc:15:7c:
                    db:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C1:8F:43:2D:CD:70:7C:20:B7:B6:30:C8:EA:7A:C5:08:35:CD:5B
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/BB400338BB6511F1ABAB760ECF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:18:c3:f4:61:0a:8a:ee:82:74:42:ae:a1:9f:ca:32:72:64:
         eb:eb:a8:20:1e:e5:83:5d:2e:37:fe:71:3c:9f:f6:7d:ed:62:
         40:44:c0:76:67:e2:95:c2:45:ec:2a:50:58:b0:1f:b9:7b:b2:
         12:89:5f:66:12:37:9a:bb:1c:3c:0d:df:d3:69:2b:49:d3:10:
         24:6b:83:23:ff:91:ac:85:ae:bc:c0:aa:14:2a:e5:79:37:b0:
         f1:aa:36:7c:ca:d3:91:6c:61:9d:61:5c:6d:2b:8c:e1:98:67:
         6d:32:73:e1:33:8c:7e:e3:a8:af:af:58:d9:1a:12:f4:41:d8:
         d9:b3:99:ca:e2:b1:02:c3:2e:48:ee:21:5f:fb:a4:9f:a1:1b:
         24:3c:03:23:54:b1:6f:87:e1:65:b7:3d:f3:f0:c6:76:5f:e9:
         a2:9f:f1:45:0c:a1:a8:fe:8b:3a:fa:ba:15:4f:f4:9b:ec:37:
         58:29:54:e2:51:94:09:a8:f1:13:bb:66:5c:2c:de:a0:ff:0b:
         eb:77:b8:63:90:59:94:99:4a:fe:b0:7f:5f:e9:98:15:2f:91:
         81:b7:d6:e3:bb:7e:6a:02:9d:27:3b:58:45:88:9c:9d:d6:db:
         81:fb:11:7f:1b:f0:31:3a:0d:1f:c7:c8:c6:69:ce:c9:a1:f4:
         63:e8:60:41
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICDgUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA5MjgxNzU1MDBaFw0zNjEyMzExNzU1MDBaMBgxFjAU
BgNVBAMTDTZhYmFhOWY3LWQ4ZWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvnaulPRqeSBXbcRBTkSVsjEq6mC9pvZ1iSCn8Sw7mMgco1tPJ6cWRlMzd
Gw3OTQRzG6Yvi7ORZEdoLpdCOCNfvz0gqbUxSEMLi3v6AUho6GN/CC80Vlcfpzsw
Lz4CDI/96ddn/UhhDvl0szr2GIp1oefFXSqrF0i3hzYlc+62JeI4qR6QYWpdHdUp
Wid7Z6K4UfN1dQEwqmWH4CR/AFP3ByaimeVG1KLpymnvossnLHz7vje9fT1Ju5/1
XvknE0CDzO438Nmpz83dl8JBhiXgv/4cD2/08RoG1aYoWE+K0/QYkdPTgg3iRdGE
ts9n4dTfK7oVBWg7Z/Rx4NwVfNubAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUVMGP
Qy3NcHwgt7YwyOp6xQg1zVswHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0JCNDAwMzM4QkI2NTExRjFBQkFCNzYwRUNGMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMUYwDQYJKoZIhvcNAQELBQAD
ggEBAFEYw/RhCorugnRCrqGfyjJyZOvrqCAe5YNdLjf+cTyf9n3tYkBEwHZn4pXC
RewqUFiwH7l7shKJX2YSN5q7HDwN39NpK0nTECRrgyP/kayFrrzAqhQq5Xk3sPGq
NnzK05FsYZ1hXG0rjOGYZ20yc+EzjH7jqK+vWNkaEvRB2NmzmcrisQLDLkjuIV/7
pJ+hGyQ8AyNUsW+H4WW3PfPwxnZf6aKf8UUMoaj+izr6uhVP9JvsN1gpVOJRlAmo
8RO7Zlws3qD/C+t3uGOQWZSZSv6wf1/pmBUvkYG31uO7fmoCnSc7WEWInJ3W24H7
EX8b8DE6DR/HyMZpzsmh9GPoYEE=
-----END CERTIFICATE-----