Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/026B37FAC93011F198F067AFCE1D38B0.roa
File:                     026B37FAC93011F198F067AFCE1D38B0.roa (raw, json)
Hash identifier:          m2NrNVJ1MQThTZtGjwRntWqTb25K5eBAMuuGpz+iJhA=
Subject key identifier:   77:56:87:5B:F5:E5:C0:78:80:BE:27:86:61:91:82:E6:F4:1C:FE:2E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DDD0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/026B37FAC93011F198F067AFCE1D38B0.roa
Signing time:             Fri 16 Oct 2026 07:05:46 +0000
ROA not before:           Fri 16 Oct 2026 07:05:42 +0000
ROA not after:            Sun 22 Nov 2026 07:05:42 +0000
asID:                     269070
IP address blocks:        156.249.64.0/24 maxlen: 24
                          156.249.65.0/24 maxlen: 24
                          156.249.66.0/24 maxlen: 24
                          156.249.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122320 (0x1ddd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 16 07:05:42 2026 GMT
            Not After : Nov 22 07:05:42 2026 GMT
        Subject: CN=6ad1ccca-b52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:12:d8:83:b6:59:cc:bc:63:d0:4e:d7:55:f4:
                    86:43:6d:9f:07:bb:ff:4d:ff:79:16:84:5f:aa:88:
                    02:50:bd:68:bb:35:ca:d2:ca:af:cb:8c:d6:4e:7a:
                    d4:99:a7:67:36:70:04:c6:e2:0d:30:0f:e8:77:69:
                    31:9e:93:08:ae:aa:72:a0:20:da:dc:b8:2c:c6:16:
                    8a:8c:ad:8d:7f:2e:77:82:85:16:b1:ee:ae:a7:ec:
                    ef:e6:e8:7a:5e:44:7a:c7:63:f4:f5:09:5d:fe:70:
                    4a:12:54:d7:67:21:85:ea:71:24:9f:31:2e:5d:a1:
                    93:52:85:67:b9:7f:a2:18:c8:af:03:4f:3d:b5:1e:
                    1f:4b:c9:dc:5e:bd:f1:05:a9:30:20:6d:53:7f:e9:
                    f0:d6:de:ac:45:85:5d:e6:75:bb:7d:4f:33:b1:a1:
                    a9:a8:b0:64:bb:b9:ca:f8:96:4d:e9:17:8f:5e:60:
                    d8:53:a0:48:0e:b2:74:bf:27:a4:e1:b3:93:d9:f1:
                    92:62:cb:e4:a1:be:b4:29:5d:ff:be:72:7e:62:28:
                    12:22:4c:4d:fa:de:ec:a1:8e:3a:e8:51:27:01:bf:
                    2b:3f:28:b5:ba:ea:b8:4b:75:33:87:7e:34:f9:da:
                    ca:63:a1:33:51:78:fe:60:62:99:94:62:76:3a:56:
                    c0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:56:87:5B:F5:E5:C0:78:80:BE:27:86:61:91:82:E6:F4:1C:FE:2E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/026B37FAC93011F198F067AFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.249.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:e5:2a:f0:75:bb:f4:f8:ba:05:1a:65:3e:04:03:a8:56:0f:
         a4:c6:e0:f1:5f:10:b1:39:ca:a4:71:18:4a:24:a0:c9:09:05:
         0d:99:3c:28:d6:8e:c4:ae:7b:18:31:94:35:34:59:7b:bb:d8:
         b7:f5:f4:27:3e:2a:fe:3f:0e:98:53:94:bd:de:3c:94:e8:b7:
         65:9f:d2:2e:1a:97:10:8c:25:08:d1:8d:e2:a0:f2:67:5a:50:
         dc:7f:97:86:88:c1:0d:bf:53:ce:82:2c:d1:17:a8:65:c6:54:
         86:ec:a6:bf:8b:8f:f0:10:14:ff:73:96:fb:17:3e:2f:23:b2:
         fc:55:26:2f:38:9f:ce:5b:76:2a:ef:51:64:b6:f6:17:3c:22:
         52:3b:6d:26:00:7d:4a:c6:70:de:df:44:2f:5a:c4:d8:93:13:
         0b:5f:6e:c4:74:c9:aa:8a:43:7a:8e:60:f4:df:23:f2:fa:d8:
         a9:cb:7f:93:2d:a5:cf:00:33:4f:05:5b:f6:34:e7:14:b5:8d:
         86:fd:da:7b:6c:95:bd:a6:ab:a2:de:8a:c3:ec:6e:9b:f6:08:
         ef:7e:7b:ba:b6:9d:9a:49:af:29:b4:2b:cc:ec:34:47:d5:a1:
         4c:db:57:01:f7:81:38:b0:ac:db:c6:8e:fb:c3:b9:52:6e:1e:
         54:e6:6b:21
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAd3QMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDE2MDcwNTQyWhcNMjYxMTIyMDcwNTQyWjAYMRYw
FAYDVQQDEw02YWQxY2NjYS1iNTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvhLYg7ZZzLxj0E7XVfSGQ22fB7v/Tf95FoRfqogCUL1ouzXK0sqvy4zW
TnrUmadnNnAExuINMA/od2kxnpMIrqpyoCDa3LgsxhaKjK2Nfy53goUWse6up+zv
5uh6XkR6x2P09Qld/nBKElTXZyGF6nEknzEuXaGTUoVnuX+iGMivA089tR4fS8nc
Xr3xBakwIG1Tf+nw1t6sRYVd5nW7fU8zsaGpqLBku7nK+JZN6RePXmDYU6BIDrJ0
vyek4bOT2fGSYsvkob60KV3/vnJ+YigSIkxN+t7soY466FEnAb8rPyi1uuq4S3Uz
h340+drKY6EzUXj+YGKZlGJ2OlbAlQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFHdW
h1v15cB4gL4nhmGRgub0HP4uMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMjZCMzdGQUM5MzAxMUYxOThGMDY3QUZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnPlAMA0GCSqGSIb3DQEBCwUA
A4IBAQBq5Srwdbv0+LoFGmU+BAOoVg+kxuDxXxCxOcqkcRhKJKDJCQUNmTwo1o7E
rnsYMZQ1NFl7u9i39fQnPir+Pw6YU5S93jyU6Ldln9IuGpcQjCUI0Y3ioPJnWlDc
f5eGiMENv1POgizRF6hlxlSG7Ka/i4/wEBT/c5b7Fz4vI7L8VSYvOJ/OW3Yq71Fk
tvYXPCJSO20mAH1KxnDe30QvWsTYkxMLX27EdMmqikN6jmD03yPy+tipy3+TLaXP
ADNPBVv2NOcUtY2G/dp7bJW9pqui3orD7G6b9gjvfnu6tp2aSa8ptCvM7DRH1aFM
21cB94E4sKzbxo77w7lSbh5U5msh
-----END CERTIFICATE-----