Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/039BE9709D2B11F1915926E2CE1D38B0.roa
File:                     039BE9709D2B11F1915926E2CE1D38B0.roa (raw, json)
Hash identifier:          Go60cssiYqrBJbKg27wlGzHIxN21ycwFXHePIbO+dRg=
Subject key identifier:   6A:41:82:B0:81:CB:33:F8:D2:8C:8A:4A:47:DF:86:DA:8E:E5:58:87
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CF4C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/039BE9709D2B11F1915926E2CE1D38B0.roa
Signing time:             Fri 21 Aug 2026 06:39:10 +0000
ROA not before:           Fri 21 Aug 2026 06:39:06 +0000
ROA not after:            Sat 19 Sep 2026 06:39:06 +0000
asID:                     398823
IP address blocks:        156.245.64.0/18 maxlen: 24
                          156.245.64.0/20 maxlen: 24
                          156.245.80.0/20 maxlen: 24
                          156.245.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118604 (0x1cf4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 06:39:06 2026 GMT
            Not After : Sep 19 06:39:06 2026 GMT
        Subject: CN=6a87f28e-513a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:d7:f1:37:e9:e5:6f:65:ca:3c:fe:79:a0:
                    99:a1:83:fd:d1:18:a7:a4:ca:28:03:5c:57:34:56:
                    90:15:3e:81:d9:d9:41:14:4f:cb:e1:1b:63:f8:36:
                    1e:9e:f0:f9:d4:46:b2:d1:64:44:b2:69:af:60:e4:
                    ed:fd:6a:9e:7a:9d:6e:4e:e8:72:26:b3:99:47:33:
                    96:50:5b:00:cb:74:c5:20:e2:53:35:06:5b:7b:a3:
                    7e:f8:b7:dc:51:93:67:18:1a:a3:45:a1:6b:39:1c:
                    4d:cf:a5:a0:5c:4d:e0:f8:86:e7:08:c3:ff:d4:71:
                    ee:ab:83:78:02:24:6b:fe:8a:e8:33:eb:7c:8a:91:
                    6e:1d:ff:1d:cf:35:4d:27:fb:00:4f:b3:65:b4:4a:
                    63:5b:63:21:a9:2a:94:81:ad:9a:37:56:d7:15:2a:
                    0a:dc:2a:95:72:b4:d4:3c:bd:d1:c8:35:b5:fe:13:
                    94:61:b0:b7:a8:5b:3a:14:b6:ac:71:3e:4d:25:11:
                    2d:9f:16:a2:5b:d6:93:ae:7f:e1:ba:3f:1e:2f:f4:
                    18:fc:99:09:e5:aa:6d:8f:45:a1:3c:b1:74:46:6e:
                    a6:e2:01:2b:29:7f:0a:33:8c:99:5b:a4:fe:f0:0c:
                    b8:d3:6a:9b:32:4a:32:c9:e1:ba:c1:be:fa:c3:ad:
                    1b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:41:82:B0:81:CB:33:F8:D2:8C:8A:4A:47:DF:86:DA:8E:E5:58:87
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/039BE9709D2B11F1915926E2CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.245.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5e:70:f1:50:a6:24:4a:7b:84:d8:7c:2f:32:18:a2:a9:ae:fd:
         6d:1f:16:a0:c9:be:a6:4f:9d:c9:e9:28:3a:04:69:e7:5c:94:
         ad:86:98:2f:c0:b2:0e:f8:3d:4d:17:c4:d4:34:21:33:6e:92:
         f0:cd:cb:0b:29:5d:fe:e3:7d:b3:0d:c6:17:12:a1:8d:6e:a6:
         cd:21:59:50:e2:d1:03:45:30:22:6d:08:0b:2f:37:1e:a1:45:
         aa:b9:70:ad:ce:cd:aa:56:f3:3a:f7:0c:82:9c:08:73:72:3a:
         f2:ff:23:78:9b:ba:90:33:1f:78:cc:60:69:92:6d:72:53:dc:
         be:f6:61:14:db:ca:2b:5a:63:a6:e3:29:f7:30:16:26:38:a2:
         b9:83:cc:8b:fa:9e:4d:f7:33:3f:75:ce:86:fc:35:c4:22:19:
         ab:6d:86:8d:a6:57:a2:a8:10:94:54:23:cb:c0:4d:b9:1d:28:
         4f:53:4b:9c:a0:a1:11:5d:37:21:33:a3:7c:ba:cd:1e:ea:3d:
         85:0e:ac:70:4e:df:0e:93:91:09:ee:97:04:0e:a3:1a:01:ee:
         53:3a:ad:01:39:f1:c5:6a:37:d8:14:24:eb:02:bf:41:c9:93:
         13:a4:d8:1e:5d:52:d6:2e:5a:3a:e9:0e:76:78:47:cb:1e:a1:
         bb:7e:01:86
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAc9MMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODIxMDYzOTA2WhcNMjYwOTE5MDYzOTA2WjAYMRYw
FAYDVQQDEw02YTg3ZjI4ZS01MTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvRrX8Tfp5W9lyjz+eaCZoYP90RinpMooA1xXNFaQFT6B2dlBFE/L4Rtj
+DYenvD51Eay0WREsmmvYOTt/Wqeep1uTuhyJrOZRzOWUFsAy3TFIOJTNQZbe6N+
+LfcUZNnGBqjRaFrORxNz6WgXE3g+IbnCMP/1HHuq4N4AiRr/oroM+t8ipFuHf8d
zzVNJ/sAT7NltEpjW2MhqSqUga2aN1bXFSoK3CqVcrTUPL3RyDW1/hOUYbC3qFs6
FLascT5NJREtnxaiW9aTrn/huj8eL/QY/JkJ5aptj0WhPLF0Rm6m4gErKX8KM4yZ
W6T+8Ay402qbMkoyyeG6wb76w60beQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFGpB
grCByzP40oyKSkffhtqO5ViHMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wMzlCRTk3MDlEMkIxMUYxOTE1OTI2RTJDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGnPVAMA0GCSqGSIb3DQEBCwUA
A4IBAQBecPFQpiRKe4TYfC8yGKKprv1tHxagyb6mT53J6Sg6BGnnXJSthpgvwLIO
+D1NF8TUNCEzbpLwzcsLKV3+432zDcYXEqGNbqbNIVlQ4tEDRTAibQgLLzceoUWq
uXCtzs2qVvM69wyCnAhzcjry/yN4m7qQMx94zGBpkm1yU9y+9mEU28orWmOm4yn3
MBYmOKK5g8yL+p5N9zM/dc6G/DXEIhmrbYaNpleiqBCUVCPLwE25HShPU0ucoKER
XTchM6N8us0e6j2FDqxwTt8Ok5EJ7pcEDqMaAe5TOq0BOfHFajfYFCTrAr9ByZMT
pNgeXVLWLlo66Q52eEfLHqG7fgGG
-----END CERTIFICATE-----