Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B4BED4CD2B311F1AE7A50FBCE1D38B0.roa
File:                     0B4BED4CD2B311F1AE7A50FBCE1D38B0.roa (raw, json)
Hash identifier:          RLYiKr5oaM8n60j+qH9Z44p1kPwg7TEdg7cQL2Q5JTk=
Subject key identifier:   FB:66:BE:14:14:9B:95:2E:C8:02:29:A6:22:CC:B8:9E:66:B5:75:DF
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01E0F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B4BED4CD2B311F1AE7A50FBCE1D38B0.roa
Signing time:             Wed 28 Oct 2026 09:36:26 +0000
ROA not before:           Wed 28 Oct 2026 09:36:21 +0000
ROA not after:            Sun 06 Dec 2026 09:36:21 +0000
asID:                     395886
IP address blocks:        156.238.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123124 (0x1e0f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 28 09:36:21 2026 GMT
            Not After : Dec  6 09:36:21 2026 GMT
        Subject: CN=6ae1c21a-4c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:a8:b0:8c:83:ca:b7:4c:8b:1e:d5:18:ff:
                    5a:3b:11:4f:5a:ff:e1:84:cd:97:84:98:79:53:4b:
                    8d:26:db:9d:b0:74:16:ec:6e:a5:7d:32:28:29:98:
                    1b:54:b4:e7:e2:80:0d:c2:27:6f:c0:ea:2a:17:aa:
                    a3:85:51:fb:b1:98:f8:32:61:9f:a1:9c:c4:cd:99:
                    56:c7:a1:46:1f:88:2c:8d:ee:3e:ce:25:81:1a:33:
                    11:09:1f:0a:c3:37:d8:c2:1b:ba:54:f6:83:fa:d8:
                    03:71:d8:04:dc:29:71:15:3e:15:1a:5a:cc:d9:c9:
                    cb:dc:4d:90:ac:76:1a:a6:94:b5:d0:ba:7f:19:8a:
                    b5:3a:8d:99:f6:3c:a0:80:76:a6:54:49:1e:c5:cc:
                    5f:18:84:b8:49:bc:d9:1f:6e:8e:c7:98:f3:75:d6:
                    32:54:4c:87:9a:56:08:30:a0:d4:8c:be:dc:dd:6e:
                    9f:d0:31:f2:1a:28:7d:7c:50:7c:c0:de:91:77:c9:
                    91:29:1d:f0:c5:ff:ef:fd:e4:53:9f:2a:ff:c3:e3:
                    8a:91:39:9a:45:d7:b0:72:1b:d0:5e:14:b1:9c:6f:
                    31:6c:82:09:20:18:46:35:eb:75:ee:af:a5:6b:b4:
                    bd:f9:01:ef:75:4d:58:fa:d8:8c:aa:44:e9:3e:08:
                    ae:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:66:BE:14:14:9B:95:2E:C8:02:29:A6:22:CC:B8:9E:66:B5:75:DF
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B4BED4CD2B311F1AE7A50FBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.238.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:0b:18:69:93:e2:36:d9:dd:34:53:5e:72:4e:b4:ff:8d:8b:
         35:20:24:0f:b0:85:ca:06:37:b6:7c:5a:21:28:35:e7:8f:60:
         8d:66:d5:5d:20:07:12:27:53:f9:5e:ab:d6:65:8e:77:28:12:
         fa:fa:d3:76:df:be:53:8c:ed:a5:ef:2d:be:61:6d:62:e6:7e:
         b9:d7:1e:71:36:bd:e8:99:b2:28:c4:03:cb:9a:14:2d:e8:62:
         cf:28:89:5d:f3:6e:72:fa:17:33:78:f3:48:af:60:2f:32:81:
         61:66:f9:7f:d3:f1:53:9e:5a:c2:99:84:71:8b:ef:ba:86:ed:
         0e:7e:a0:fa:7a:8d:69:1d:0a:34:07:7c:f3:bc:0b:5d:44:fe:
         ad:79:20:0c:55:38:2e:01:2a:d1:44:f6:08:b9:6d:3d:34:60:
         14:23:e5:d3:dd:92:2c:70:e8:f3:4b:13:0e:1f:19:5d:9f:07:
         da:c4:1a:fe:04:95:b1:03:ad:32:65:0e:5d:6d:af:6c:13:5f:
         76:21:a4:20:40:90:03:5a:45:98:2b:6d:49:71:de:d4:1e:f5:
         bf:77:95:2c:88:64:9b:e0:ff:32:70:6f:b3:b3:9f:c4:dd:61:
         e1:d4:b4:62:e9:bc:9f:4d:50:be:86:bf:80:cb:29:cb:45:f3:
         08:83:53:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----