Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/357089666C3E11F0BC71ACECDAE4EC9C.roa
File:                     357089666C3E11F0BC71ACECDAE4EC9C.roa (raw, json)
Hash identifier:          qggZFmzZXXAr4a086aPRdvIxxVtSdfqR/bbhmNmdsu8=
Subject key identifier:   82:34:FB:11:8A:95:CD:3C:9A:AA:86:E7:08:96:BE:E5:FF:63:5F:1F
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       090D
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/357089666C3E11F0BC71ACECDAE4EC9C.roa
Signing time:             Tue 29 Jul 2025 05:38:09 +0000
ROA not before:           Tue 29 Jul 2025 05:38:04 +0000
ROA not after:            Mon 31 Dec 2035 05:38:04 +0000
asID:                     5650
IP address blocks:        165.49.84.0/24 maxlen: 24
                          165.49.85.0/24 maxlen: 24
                          165.49.86.0/24 maxlen: 24
                          165.49.87.0/24 maxlen: 24
                          165.49.111.0/24 maxlen: 24
                          165.49.112.0/24 maxlen: 24
                          165.49.113.0/24 maxlen: 24
                          165.49.114.0/24 maxlen: 24
                          165.49.115.0/24 maxlen: 24
                          165.49.117.0/24 maxlen: 24
                          165.49.118.0/24 maxlen: 24
                          165.49.121.0/24 maxlen: 24
                          165.49.122.0/24 maxlen: 24
                          165.49.123.0/24 maxlen: 24
                          165.49.124.0/24 maxlen: 24
                          165.49.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 Aug 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2317 (0x90d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Jul 29 05:38:04 2025 GMT
            Not After : Dec 31 05:38:04 2035 GMT
        Subject: CN=68885e41-9f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:73:5f:09:74:d3:29:2a:8e:85:ae:1f:62:cb:
                    7e:3c:5a:28:c9:32:93:9f:92:2f:ba:9f:66:9e:3e:
                    6f:a5:9f:75:9c:8b:92:4c:e3:52:a5:69:a9:53:95:
                    a3:9e:79:7b:e9:53:0e:04:06:9b:36:69:3a:a3:90:
                    ec:03:1e:0c:2e:00:e2:84:dd:37:52:aa:39:f5:a8:
                    66:b8:a1:e8:b5:21:11:b6:5d:a6:04:7f:d1:4e:10:
                    11:c7:a9:ca:1a:dd:46:d7:0f:f7:10:29:de:ae:73:
                    9c:21:46:7a:ab:9d:a6:92:82:7a:77:20:a4:94:9a:
                    00:6f:26:46:e4:62:29:60:96:7d:e3:98:42:15:25:
                    d9:1a:f4:5d:08:72:04:23:78:56:2f:31:71:4a:a6:
                    cd:79:ae:0c:f6:ca:87:b5:12:79:b4:c9:5d:f9:a2:
                    8a:7e:a5:70:f9:bd:57:e7:1a:44:1d:3d:f7:02:0f:
                    17:78:bd:0e:58:e2:3a:09:4f:94:e0:03:0f:ad:42:
                    3b:bc:25:93:15:d5:75:ff:9b:e1:3c:8c:53:55:5b:
                    f5:5a:55:8d:14:18:86:df:64:f0:03:33:d8:8f:d7:
                    74:90:4a:7c:e2:79:f5:76:b5:09:f6:75:cd:07:8e:
                    07:5b:c5:56:d8:50:1f:ee:6c:ea:be:10:3c:f5:8c:
                    f8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:34:FB:11:8A:95:CD:3C:9A:AA:86:E7:08:96:BE:E5:FF:63:5F:1F
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/357089666C3E11F0BC71ACECDAE4EC9C.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.84.0/22
                  165.49.111.0-165.49.115.255
                  165.49.117.0-165.49.118.255
                  165.49.121.0-165.49.125.255

    Signature Algorithm: sha256WithRSAEncryption
         59:44:d2:92:9c:a6:5a:56:b4:ce:ea:d0:a5:fa:74:13:95:fc:
         d7:fe:51:71:a8:0a:e5:c0:d8:ed:68:6c:a3:41:4b:95:36:fe:
         f0:71:24:06:3f:cd:32:b7:06:cc:b0:0e:d6:c4:96:07:30:5f:
         de:22:2d:ae:ad:fd:68:6a:a5:6f:26:f8:85:e4:d6:d8:5a:89:
         d2:cc:72:6a:e5:8c:e1:85:bb:9d:64:84:3f:13:56:01:c6:29:
         9e:b6:f0:10:21:82:3c:04:f1:d1:40:22:01:d7:ef:30:86:77:
         3d:0f:1b:21:05:ec:a3:46:9b:d1:48:e6:c2:2e:de:fd:3d:2c:
         7c:36:9c:02:4b:a4:e6:d8:fc:5d:33:c9:70:c8:ff:13:87:cd:
         90:5c:00:18:5e:98:ae:41:52:97:61:96:e0:ec:f4:3f:10:12:
         59:33:a3:be:f0:c8:ce:ee:37:f7:83:df:b7:21:ee:e4:b7:82:
         f3:ce:c6:36:fd:ab:6f:ce:b0:f1:f8:6b:f9:55:42:3c:54:09:
         72:11:dd:22:91:c1:6e:f9:90:47:a0:74:1c:0c:79:a6:69:f7:
         06:6c:af:35:bb:04:0e:fc:86:4f:92:4f:87:e3:30:be:79:48:
         59:c4:44:88:19:8f:df:63:53:ed:96:f2:22:7e:4e:51:d8:ce:
         31:ea:9d:6d
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgICCQ0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNTA3MjkwNTM4MDRaFw0zNTEyMzEwNTM4MDRaMBgxFjAU
BgNVBAMTDTY4ODg1ZTQxLTlmNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCec18JdNMpKo6Frh9iy348WijJMpOfki+6n2aePm+ln3Wci5JM41KlaalT
laOeeXvpUw4EBps2aTqjkOwDHgwuAOKE3TdSqjn1qGa4oei1IRG2XaYEf9FOEBHH
qcoa3UbXD/cQKd6uc5whRnqrnaaSgnp3IKSUmgBvJkbkYilgln3jmEIVJdka9F0I
cgQjeFYvMXFKps15rgz2yoe1Enm0yV35oop+pXD5vVfnGkQdPfcCDxd4vQ5Y4joJ
T5TgAw+tQju8JZMV1XX/m+E8jFNVW/VaVY0UGIbfZPADM9iP13SQSnziefV2tQn2
dc0HjgdbxVbYUB/ubOq+EDz1jPhtAgMBAAGjggLMMIICyDAdBgNVHQ4EFgQUgjT7
EYqVzTyaqobnCJa+5f9jXx8wHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4LzM1NzA4OTY2NkMzRTExRjBCQzcxQUNFQ0RBRTRFQzlDLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
SQYIKwYBBQUHAQcBAf8EOjA4MDYEAgABMDADBAKlMVQwDAMEAKUxbwMEAqUxcDAM
AwQApTF1AwQApTF2MAwDBAClMXkDBAGlMXwwDQYJKoZIhvcNAQELBQADggEBAFlE
0pKcplpWtM7q0KX6dBOV/Nf+UXGoCuXA2O1obKNBS5U2/vBxJAY/zTK3BsywDtbE
lgcwX94iLa6t/WhqpW8m+IXk1thaidLMcmrljOGFu51khD8TVgHGKZ628BAhgjwE
8dFAIgHX7zCGdz0PGyEF7KNGm9FI5sIu3v09LHw2nAJLpObY/F0zyXDI/xOHzZBc
ABhemK5BUpdhluDs9D8QElkzo77wyM7uN/eD37ch7uS3gvPOxjb9q2/OsPH4a/lV
QjxUCXIR3SKRwW75kEegdBwMeaZp9wZsrzW7BA78hk+ST4fjML55SFnERIgZj99j
U+2W8iJ+TlHYzjHqnW0=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:51:06 2025 by rpki-client