Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/AAA8FD148A9F11F1B7F1C5BFCE1D38B0.roa
File:                     AAA8FD148A9F11F1B7F1C5BFCE1D38B0.roa (raw, json)
Hash identifier:          dz765FPwaB+5wxde/u8L5pYmK3QlEBYhFKkoBSC18WE=
Subject key identifier:   2F:A8:AD:15:4B:70:79:C4:92:2A:1A:F9:0B:A4:AA:17:89:50:A2:ED
Certificate issuer:       /CN=F367D0C5AR/serialNumber=6C17A00CE7A5EE9B7072DA0B8CD628213074D001
Certificate serial:       0521
Authority key identifier: 6C:17:A0:0C:E7:A5:EE:9B:70:72:DA:0B:8C:D6:28:21:30:74:D0:01
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bBegDOel7ptwctoLjNYoITB00AE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/AAA8FD148A9F11F1B7F1C5BFCE1D38B0.roa
Signing time:             Tue 28 Jul 2026 16:16:20 +0000
ROA not before:           Tue 28 Jul 2026 16:16:15 +0000
ROA not after:            Thu 10 Sep 2026 16:16:15 +0000
asID:                     37284
IP address blocks:        165.16.0.0/17 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.mft
                          rsync://rpki.afrinic.net/repository/arin/bBegDOel7ptwctoLjNYoITB00AE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313 (0x521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D0C5AR, serialNumber=6C17A00CE7A5EE9B7072DA0B8CD628213074D001
        Validity
            Not Before: Jul 28 16:16:15 2026 GMT
            Not After : Sep 10 16:16:15 2026 GMT
        Subject: CN=6a68d5d3-3c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a3:a8:a0:0a:41:36:d5:24:54:19:33:d8:fa:
                    ea:14:10:63:16:d7:b1:d1:9b:d3:90:a1:c1:46:50:
                    58:9c:0c:6f:6c:79:3e:68:28:30:aa:6a:c3:2c:92:
                    de:73:c0:de:06:be:ed:f4:0d:9f:3d:bd:bb:fd:65:
                    86:54:a2:f5:d6:73:a3:f6:00:e0:4b:ce:b3:85:d6:
                    36:8e:0d:c3:63:b4:b2:ad:27:79:5e:8c:68:00:81:
                    05:90:5d:45:96:16:43:ad:ac:0d:d8:a2:6f:29:8d:
                    e4:6f:53:d2:70:97:47:21:57:2c:3f:f9:6c:ff:ad:
                    65:1a:65:e3:01:e9:f8:aa:21:54:18:9c:e1:c9:c5:
                    c5:1c:f3:68:8f:cc:e7:d2:1a:d1:a7:d1:9d:0c:07:
                    79:68:53:1e:42:1f:ab:35:59:bc:92:b2:68:7f:56:
                    69:2f:5d:18:46:1f:99:d3:62:ea:3d:65:1a:ae:b7:
                    78:b3:a4:92:30:ee:d4:a7:2c:f8:50:5d:e3:55:d3:
                    21:02:30:a4:d4:db:5c:e3:d6:bb:96:71:24:87:b3:
                    b9:9e:39:21:11:54:15:9d:0f:d0:8d:c2:5a:07:52:
                    a2:bb:2d:8a:82:94:5d:eb:bc:62:39:4d:e7:a0:56:
                    b0:07:a0:f9:0c:02:2d:6f:d3:68:3e:4b:7e:0c:cf:
                    c1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A8:AD:15:4B:70:79:C4:92:2A:1A:F9:0B:A4:AA:17:89:50:A2:ED
            X509v3 Authority Key Identifier:
                keyid:6C:17:A0:0C:E7:A5:EE:9B:70:72:DA:0B:8C:D6:28:21:30:74:D0:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/bBegDOel7ptwctoLjNYoITB00AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bBegDOel7ptwctoLjNYoITB00AE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/4D5FB986A48911ED90607E87F1222468/AAA8FD148A9F11F1B7F1C5BFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.16.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3a:c7:ad:c0:5f:df:5c:3b:bc:8c:8f:1b:15:c8:ab:01:2e:09:
         a4:7c:c7:c7:cc:b4:04:3d:92:da:cd:81:e4:f3:2e:fa:c3:4b:
         3c:90:f5:fa:d7:36:db:6e:ea:e2:8b:a6:27:e1:f9:bf:5d:4f:
         55:66:8b:ad:19:f9:81:b7:83:12:66:08:01:59:97:a5:79:cf:
         64:da:72:7f:48:0c:0f:0d:d3:75:6f:84:f5:03:42:0d:a6:6c:
         8b:e9:50:79:2b:2a:dc:be:4a:07:16:9d:d0:ff:48:f6:8e:9f:
         58:4a:e6:52:28:d2:bd:4b:4c:8b:62:b3:21:63:03:8b:3b:de:
         a1:14:c2:d7:e2:58:40:b0:ab:fc:ac:c2:d6:07:15:42:06:0c:
         55:be:6c:55:d9:6e:88:5f:44:cd:f4:8e:1e:58:c2:d7:c4:04:
         16:d4:29:e2:1e:1b:b6:17:66:40:2c:e5:ff:8c:3a:be:61:f0:
         13:54:df:d6:10:af:15:6b:eb:ae:e0:1d:c4:ca:47:94:0a:9f:
         a2:01:61:09:9c:d0:2e:4d:32:96:b5:d3:d7:eb:bf:03:03:34:
         3a:f4:2e:08:d8:30:07:44:d3:b3:62:d5:c2:cb:85:9d:4c:87:
         d4:f0:a3:04:6c:e3:ea:ca:93:99:d7:6c:95:14:f0:d5:3e:f3:
         36:df:c6:00
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICBSEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0QwQzVBUjExMC8GA1UEBRMoNkMxN0EwMENFN0E1RUU5QjcwNzJEQTBCOENENjI4
MjEzMDc0RDAwMTAeFw0yNjA3MjgxNjE2MTVaFw0yNjA5MTAxNjE2MTVaMBgxFjAU
BgNVBAMTDTZhNjhkNWQzLTNjOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHo6igCkE21SRUGTPY+uoUEGMW17HRm9OQocFGUFicDG9seT5oKDCqasMs
kt5zwN4Gvu30DZ89vbv9ZYZUovXWc6P2AOBLzrOF1jaODcNjtLKtJ3lejGgAgQWQ
XUWWFkOtrA3Yom8pjeRvU9Jwl0chVyw/+Wz/rWUaZeMB6fiqIVQYnOHJxcUc82iP
zOfSGtGn0Z0MB3loUx5CH6s1WbySsmh/VmkvXRhGH5nTYuo9ZRqut3izpJIw7tSn
LPhQXeNV0yECMKTU21zj1ruWcSSHs7meOSERVBWdD9CNwloHUqK7LYqClF3rvGI5
TeegVrAHoPkMAi1v02g+S34Mz8ENAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUL6it
FUtwecSSKhr5C6SqF4lQou0wHwYDVR0jBBgwFoAUbBegDOel7ptwctoLjNYoITB0
0AEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdEMEM1LzRENUZCOTg2QTQ4OTExRUQ5MDYwN0U4N0YxMjIyNDY4L2JCZWdE
T2VsN3B0d2N0b0xqTllvSVRCMDBBRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2JCZWdET2VsN3B0d2N0b0xqTllvSVRCMDBBRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNjdEMEM1LzRENUZCOTg2QTQ4OTExRUQ5MDYwN0U4N0YxMjIy
NDY4L0FBQThGRDE0OEE5RjExRjFCN0YxQzVCRkNFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAelEAAwDQYJKoZIhvcNAQELBQAD
ggEBADrHrcBf31w7vIyPGxXIqwEuCaR8x8fMtAQ9ktrNgeTzLvrDSzyQ9frXNttu
6uKLpifh+b9dT1Vmi60Z+YG3gxJmCAFZl6V5z2Tacn9IDA8N03VvhPUDQg2mbIvp
UHkrKty+SgcWndD/SPaOn1hK5lIo0r1LTItisyFjA4s73qEUwtfiWECwq/yswtYH
FUIGDFW+bFXZbohfRM30jh5YwtfEBBbUKeIeG7YXZkAs5f+MOr5h8BNU39YQrxVr
667gHcTKR5QKn6IBYQmc0C5NMpa109frvwMDNDr0LgjYMAdE07Ni1cLLhZ1Mh9Tw
owRs4+rKk5nXbJUU8NU+8zbfxgA=
-----END CERTIFICATE-----