Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14BFAB76BC0F11F190EFB0E5CE1D38B0.roa
File:                     14BFAB76BC0F11F190EFB0E5CE1D38B0.roa (raw, json)
Hash identifier:          cC4ZLvuUCUOmYFca76SxjTK5tJ5dVTPefzKQ4D5xZ4I=
Subject key identifier:   98:30:AB:A2:3B:D4:53:A4:C0:BC:1B:EC:9E:06:CA:1D:84:B9:28:EA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D98B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14BFAB76BC0F11F190EFB0E5CE1D38B0.roa
Signing time:             Tue 29 Sep 2026 14:07:19 +0000
ROA not before:           Tue 29 Sep 2026 14:07:15 +0000
ROA not after:            Mon 26 Oct 2026 14:07:15 +0000
asID:                     274728
IP address blocks:        156.235.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Oct 2026 08:20:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121227 (0x1d98b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 29 14:07:15 2026 GMT
            Not After : Oct 26 14:07:15 2026 GMT
        Subject: CN=6abbc617-76ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6c:89:62:6c:6b:92:c5:61:49:80:cf:d3:ba:
                    96:db:c3:88:58:ac:77:17:07:b5:75:fe:3a:a5:70:
                    ab:3e:6f:d1:a7:6f:4c:4c:b7:f2:8f:f3:c6:77:4f:
                    a3:5b:a2:44:69:ad:38:6c:e6:1e:2b:81:a3:52:5a:
                    de:bb:1f:ea:be:e6:d9:05:a8:04:ae:b2:d9:90:a0:
                    ee:a6:2c:67:ce:bb:04:63:67:6d:77:9f:7f:f6:1b:
                    e9:8b:10:f4:b8:62:f3:83:92:69:85:58:e0:3a:cb:
                    f9:47:09:f0:1c:26:ae:ec:79:e7:37:65:7f:d7:ca:
                    e0:cd:f9:4e:99:d3:2c:6a:d7:6f:33:51:2b:d1:2d:
                    b5:f4:4e:06:c8:e4:e0:63:8a:6b:11:50:f1:06:6a:
                    4b:ee:71:e1:e5:32:b4:77:a7:48:63:66:53:95:48:
                    e8:c6:a7:0a:fc:b1:4a:50:81:bc:ae:27:7e:ec:40:
                    37:79:a6:45:44:58:b5:6f:5c:c5:f4:61:e0:2e:a1:
                    1c:02:21:a3:3b:9a:d3:29:de:60:5d:b1:ba:e2:87:
                    12:98:97:8b:83:47:dd:30:59:95:04:6b:ce:9e:1b:
                    f5:de:b5:b7:67:48:97:cf:4a:91:0f:a6:e3:34:84:
                    1c:28:d7:06:bf:fa:fc:3d:70:c6:cc:e7:66:3c:fb:
                    b1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:30:AB:A2:3B:D4:53:A4:C0:BC:1B:EC:9E:06:CA:1D:84:B9:28:EA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14BFAB76BC0F11F190EFB0E5CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:d6:6d:1a:5e:ea:34:29:19:59:39:51:f2:66:73:f3:e6:ea:
         22:d3:ba:3e:7f:d4:3e:51:23:7b:7b:8c:93:5e:22:3c:02:fd:
         2e:88:d8:da:ea:00:50:cf:9c:76:de:f3:c8:a0:41:ec:3f:36:
         5f:11:8f:b1:73:27:cd:d3:9a:63:0f:ea:47:9e:cc:78:95:f7:
         2c:ae:61:4f:ed:df:2e:5f:78:78:88:16:01:b9:6e:96:0d:2c:
         26:4f:ee:e0:a5:47:bf:4e:46:88:f8:62:ce:ea:00:70:a2:95:
         8c:00:56:cf:33:da:8f:d3:4e:00:4b:ec:4c:77:a8:62:8f:8d:
         0f:66:02:31:17:fc:1a:7f:dc:19:2c:19:71:ac:d6:9e:58:02:
         f6:0f:6f:57:54:e5:d5:94:5d:f5:64:31:b7:74:e8:3c:0d:16:
         12:59:81:fc:29:4f:e8:d8:29:3f:d4:cc:e7:c0:e2:94:94:c5:
         84:5e:0d:7a:0d:0b:d3:9e:3e:93:cf:6d:14:f9:1e:ff:75:6c:
         49:54:09:8d:69:2f:55:e5:33:54:a1:24:d2:17:af:4c:45:d6:
         3c:39:e0:1c:05:52:63:e7:e4:8e:36:2e:40:e4:06:74:7b:1f:
         57:7d:82:5c:b0:b5:8c:22:18:7e:22:77:d7:3b:04:20:f6:1d:
         d9:05:44:69
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdmLMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwOTI5MTQwNzE1WhcNMjYxMDI2MTQwNzE1WjAYMRYw
FAYDVQQDEw02YWJiYzYxNy03NmVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAumyJYmxrksVhSYDP07qW28OIWKx3Fwe1df46pXCrPm/Rp29MTLfyj/PG
d0+jW6JEaa04bOYeK4GjUlreux/qvubZBagErrLZkKDupixnzrsEY2dtd59/9hvp
ixD0uGLzg5JphVjgOsv5RwnwHCau7HnnN2V/18rgzflOmdMsatdvM1Er0S219E4G
yOTgY4prEVDxBmpL7nHh5TK0d6dIY2ZTlUjoxqcK/LFKUIG8rid+7EA3eaZFRFi1
b1zF9GHgLqEcAiGjO5rTKd5gXbG64ocSmJeLg0fdMFmVBGvOnhv13rW3Z0iXz0qR
D6bjNIQcKNcGv/r8PXDGzOdmPPuxXwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJgw
q6I71FOkwLwb7J4Gyh2EuSjqMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNEJGQUI3NkJDMEYxMUYxOTBFRkIwRTVDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnOsxMA0GCSqGSIb3DQEBCwUA
A4IBAQB21m0aXuo0KRlZOVHyZnPz5uoi07o+f9Q+USN7e4yTXiI8Av0uiNja6gBQ
z5x23vPIoEHsPzZfEY+xcyfN05pjD+pHnsx4lfcsrmFP7d8uX3h4iBYBuW6WDSwm
T+7gpUe/TkaI+GLO6gBwopWMAFbPM9qP004AS+xMd6hij40PZgIxF/waf9wZLBlx
rNaeWAL2D29XVOXVlF31ZDG3dOg8DRYSWYH8KU/o2Ck/1MznwOKUlMWEXg16DQvT
nj6Tz20U+R7/dWxJVAmNaS9V5TNUoSTSF69MRdY8OeAcBVJj5+SONi5A5AZ0ex9X
fYJcsLWMIhh+InfXOwQg9h3ZBURp
-----END CERTIFICATE-----