Route Origin Authorization

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FB952F2E557311F1894540F8CE1D38B0.roa
File:                     FB952F2E557311F1894540F8CE1D38B0.roa (raw, json)
Hash identifier:          R14zAfX3pD8RPWLHbMAMKDUdCrWSAWERu48lWjwIgm0=
Subject key identifier:   CF:30:D4:FA:AE:46:5F:37:98:86:99:AB:8D:08:C9:82:F5:04:73:EA
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       0BE6
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FB952F2E557311F1894540F8CE1D38B0.roa
Signing time:             Fri 22 May 2026 00:20:06 +0000
ROA not before:           Fri 22 May 2026 00:00:01 +0000
ROA not after:            Wed 31 Dec 2036 00:00:01 +0000
asID:                     15022
IP address blocks:        165.49.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 01:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3046 (0xbe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: May 22 00:00:01 2026 GMT
            Not After : Dec 31 00:00:01 2036 GMT
        Subject: CN=6a0fa136-db7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7c:3a:19:2e:32:dc:e4:f1:72:a1:bc:f0:37:
                    6d:de:a2:06:87:a4:40:54:f3:af:22:56:36:f8:1f:
                    9c:4d:cd:02:db:69:60:d0:b3:27:7b:50:f8:50:eb:
                    8c:92:a7:cb:b2:e3:00:74:e2:bb:62:2c:69:e3:63:
                    f1:f4:28:6d:9a:5e:8e:80:55:7c:e6:a1:dd:38:fc:
                    e5:a2:06:63:5c:21:75:bf:e5:e9:b2:f5:9b:e7:1e:
                    03:26:10:a8:93:d7:f7:68:87:59:d1:a9:7b:81:e8:
                    ba:19:87:89:b3:51:0c:00:42:4a:4c:3f:3a:d9:c1:
                    a6:88:e9:5e:09:51:4e:2a:2a:7b:9d:78:45:06:48:
                    31:25:07:af:6a:1b:71:bc:7f:7b:a0:5b:d4:42:95:
                    ed:2e:01:51:2e:d6:07:22:d8:62:ab:15:1f:d8:7b:
                    47:b1:9d:82:95:61:21:63:85:1d:87:d8:27:e9:c5:
                    61:a3:44:a6:91:31:41:0d:4a:df:97:c8:00:d6:a6:
                    b8:02:e0:0f:48:f4:c1:5a:57:2a:fd:c0:4d:4c:58:
                    df:f3:22:38:e9:ba:fa:bf:e3:d6:7f:3a:40:c0:4a:
                    eb:2c:6a:c5:29:10:ae:e6:f7:bd:97:67:9e:2d:11:
                    de:aa:6e:06:9a:80:b9:34:10:b8:df:a9:80:68:95:
                    a7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:30:D4:FA:AE:46:5F:37:98:86:99:AB:8D:08:C9:82:F5:04:73:EA
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/FB952F2E557311F1894540F8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.49.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:20:45:93:e6:be:26:29:77:95:1f:30:9a:3a:8d:08:ca:7a:
         b5:ca:7e:30:56:26:ae:db:36:c8:f4:ee:1c:24:e1:6c:cb:fe:
         10:0b:49:e8:90:7f:c5:af:cc:9a:9a:94:4b:66:26:94:b2:61:
         cf:57:08:18:43:6b:8a:00:70:0d:f9:7e:df:3b:3c:d9:b5:41:
         c6:1e:a2:a3:91:1c:df:4e:88:50:d4:b1:75:2f:a1:b1:33:9a:
         f3:a0:b6:bc:ce:a5:5b:69:d1:ce:2c:84:80:46:58:14:7b:04:
         60:c8:65:da:65:98:8c:56:2f:2d:8d:47:ef:e5:c1:28:66:d1:
         ec:f1:21:0a:b0:65:92:ea:9d:9f:0a:37:6e:86:ad:1e:ff:91:
         4a:78:fc:d7:04:06:bd:be:d7:3b:2d:35:5f:37:45:16:8d:e4:
         b4:b3:ee:65:b9:22:88:66:fc:71:13:9c:81:30:1c:32:4d:2b:
         c5:42:f0:dc:c3:c9:80:9c:78:33:6b:67:73:bf:59:b4:1c:74:
         1f:11:9b:75:a4:76:da:d6:88:db:dd:4d:ca:40:8f:0b:86:f7:
         8a:89:17:2f:50:69:52:dc:10:1e:d8:0a:bb:fe:c0:6a:77:c5:
         ae:73:6c:b4:ec:eb:b8:3d:53:c1:e5:7b:c0:03:20:fa:c0:6d:
         dd:b6:df:db
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICC+YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBUjExMC8GA1UEBRMoRjg1QkI0OTg1NDM5MjIyOEZCOEIzMERCMDVEOTZB
QzY2NENFODNBQjAeFw0yNjA1MjIwMDAwMDFaFw0zNjEyMzEwMDAwMDFaMBgxFjAU
BgNVBAMTDTZhMGZhMTM2LWRiN2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmfDoZLjLc5PFyobzwN23eogaHpEBU868iVjb4H5xNzQLbaWDQsyd7UPhQ
64ySp8uy4wB04rtiLGnjY/H0KG2aXo6AVXzmod04/OWiBmNcIXW/5emy9ZvnHgMm
EKiT1/doh1nRqXuB6LoZh4mzUQwAQkpMPzrZwaaI6V4JUU4qKnudeEUGSDElB69q
G3G8f3ugW9RCle0uAVEu1gci2GKrFR/Ye0exnYKVYSFjhR2H2CfpxWGjRKaRMUEN
St+XyADWprgC4A9I9MFaVyr9wE1MWN/zIjjpuvq/49Z/OkDASussasUpEK7m972X
Z54tEd6qbgaagLk0ELjfqYBoladxAgMBAAGjggKiMIICnjAdBgNVHQ4EFgQUzzDU
+q5GXzeYhpmrjQjJgvUEc+owHwYDVR0jBBgwFoAU+Fu0mFQ5Iij7izDbBdlqxmTO
g6swDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVBMjI4Ly1GdTBt
RlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
Ly1GdTBtRlE1SWlqN2l6RGJCZGxxeG1UT2c2cy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdsGCCsGAQUFBwELBIHOMIHLMIGRBggrBgEFBQcw
C4aBhHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9y
ZXBvc2l0b3J5L0YzNkE0NEVBL0E4QjdFQzFDODkwOTExRTlCNTdFNjg1RkY4QUVB
MjI4L0ZCOTUyRjJFNTU3MzExRjE4OTQ1NDBGOENFMUQzOEIwLnJvYTA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAClMfgwDQYJKoZIhvcNAQELBQAD
ggEBAJMgRZPmviYpd5UfMJo6jQjKerXKfjBWJq7bNsj07hwk4WzL/hALSeiQf8Wv
zJqalEtmJpSyYc9XCBhDa4oAcA35ft87PNm1QcYeoqORHN9OiFDUsXUvobEzmvOg
trzOpVtp0c4shIBGWBR7BGDIZdplmIxWLy2NR+/lwShm0ezxIQqwZZLqnZ8KN26G
rR7/kUp4/NcEBr2+1zstNV83RRaN5LSz7mW5Iohm/HETnIEwHDJNK8VC8NzDyYCc
eDNrZ3O/WbQcdB8Rm3WkdtrWiNvdTcpAjwuG94qJFy9QaVLcEB7YCrv+wGp3xa5z
bLTs67g9U8Hle8ADIPrAbd2239s=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:44:27 2026 by rpki-client