Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2C934E8EBF7411F1A4F0C802CF1D38B0.roa
File:                     2C934E8EBF7411F1A4F0C802CF1D38B0.roa (raw, json)
Hash identifier:          705aKm4JQYDM6fEn9N1sBbtIyqAG8j3y1SJakFtin1c=
Subject key identifier:   52:5A:1F:44:F0:D4:63:FD:90:D1:3C:30:8D:92:F1:4D:B7:E1:AB:70
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0E19
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2C934E8EBF7411F1A4F0C802CF1D38B0.roa
Signing time:             Sat 03 Oct 2026 21:48:31 +0000
ROA not before:           Sat 03 Oct 2026 21:48:27 +0000
ROA not after:            Wed 31 Dec 2036 21:48:27 +0000
asID:                     834
IP address blocks:        165.49.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3609 (0xe19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Oct  3 21:48:27 2026 GMT
            Not After : Dec 31 21:48:27 2036 GMT
        Subject: CN=6ac1782f-6c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:11:c9:4c:16:3c:b9:4d:f1:30:5d:92:53:90:
                    39:9e:fd:80:41:86:0e:a5:aa:ba:48:d4:19:60:89:
                    9b:4f:a3:dd:37:a7:67:a3:eb:d7:21:50:c2:ea:53:
                    a9:9f:59:d2:a6:16:bb:a1:02:53:ca:e9:5b:b3:77:
                    fd:c3:a3:ab:b8:f5:99:69:9f:79:4e:b9:1f:9b:02:
                    cd:6d:96:ed:ac:ce:ba:0c:04:59:52:90:d7:69:fe:
                    79:63:23:db:9e:ed:40:73:30:c2:ca:9c:f1:26:e1:
                    5d:dc:ea:8f:dc:27:3d:ee:c4:2d:f1:7a:a8:35:f7:
                    05:17:f0:3b:07:85:a6:d9:ee:f6:fa:88:fd:fa:14:
                    44:ca:d8:2f:af:50:16:2f:d6:ea:04:55:c6:2a:bf:
                    49:f3:fa:7a:cc:4a:d5:4d:57:2f:18:c6:70:4a:30:
                    78:30:25:b5:ba:c5:05:0a:6a:6f:85:86:b7:4f:88:
                    a9:16:18:12:13:2d:72:b8:0c:6c:20:67:2a:bb:52:
                    4c:80:3c:dc:b1:00:35:7b:31:ed:03:ff:d9:a5:64:
                    1a:db:76:e7:24:c2:47:e5:84:83:05:f6:64:9a:7d:
                    c1:b8:a0:2d:89:0f:98:82:f4:69:8b:c3:c3:20:2c:
                    a3:51:c3:6c:04:fe:c2:7b:7a:68:37:29:e4:23:00:
                    5c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5A:1F:44:F0:D4:63:FD:90:D1:3C:30:8D:92:F1:4D:B7:E1:AB:70
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/2C934E8EBF7411F1A4F0C802CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:bc:44:73:a1:ce:bc:01:3d:97:6d:7e:e0:77:3e:41:35:fc:
         de:55:22:6c:12:99:54:83:92:ae:47:b1:aa:02:f1:e1:ad:2d:
         3a:04:75:c9:8a:d0:e4:d3:93:b0:49:92:30:88:eb:11:05:9b:
         a0:92:ac:8f:c6:e2:7f:08:73:53:23:59:6f:c3:19:83:f6:59:
         1a:47:b9:44:3d:f2:ac:9e:55:ed:5b:40:3d:7c:54:08:30:01:
         9e:ab:02:de:c8:55:c0:af:73:d0:c1:49:0f:d7:8c:0e:41:23:
         65:6b:87:52:7d:81:fd:4f:f7:09:8b:7e:24:14:8d:da:26:25:
         87:61:8d:c6:d3:81:9e:5f:01:4f:08:44:b1:e0:e7:8d:72:0a:
         d9:4a:95:fc:de:b7:7f:8f:45:95:8b:39:90:9e:01:ea:52:bc:
         d6:ad:ef:6a:47:52:23:8b:36:79:2f:79:78:fa:e8:bb:39:45:
         06:c9:d5:75:97:1b:ca:5a:cf:80:71:5e:d9:65:a5:35:19:83:
         c0:9b:35:b6:36:b3:96:7c:a6:12:65:75:5a:bb:54:11:fa:5d:
         e6:aa:85:69:04:d9:1a:8a:fa:94:e9:16:11:dc:b7:af:18:1c:
         2e:49:3b:ca:b8:c6:1e:1a:7d:63:24:08:2a:45:5d:96:eb:24:
         43:89:2f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----