Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14FA3BE2922A11F18745B6A8CE1D38B0.roa
File:                     14FA3BE2922A11F18745B6A8CE1D38B0.roa (raw, json)
Hash identifier:          v6ltC2WnBNlZNL7tDCyWrXpJxtx0HXhiA6umKEyxvW0=
Subject key identifier:   58:6E:C9:ED:49:D3:E3:AD:EF:D5:33:C6:89:8B:A4:B2:2B:8E:DA:6B
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CA0C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14FA3BE2922A11F18745B6A8CE1D38B0.roa
Signing time:             Fri 07 Aug 2026 06:34:47 +0000
ROA not before:           Fri 07 Aug 2026 06:34:43 +0000
ROA not after:            Mon 06 Aug 2029 06:34:43 +0000
asID:                     17561
IP address blocks:        156.247.17.0/24 maxlen: 24
                          156.247.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117260 (0x1ca0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug  7 06:34:43 2026 GMT
            Not After : Aug  6 06:34:43 2029 GMT
        Subject: CN=6a757c87-cffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:6f:8c:2d:91:2a:73:e9:2a:86:63:d2:90:
                    31:8b:ba:f7:19:af:17:8a:ee:1a:f6:ac:fe:c7:4c:
                    61:b2:d7:41:3c:f3:d4:5a:f6:8f:4a:58:2c:58:16:
                    9e:e8:77:bc:5f:e6:b2:fc:16:41:3d:e3:9a:95:4f:
                    bc:01:96:2b:d1:f6:6b:78:f2:a8:c5:4c:d3:43:7a:
                    ef:97:82:f4:0d:99:e1:0b:20:ac:a6:cf:6a:88:2e:
                    dc:55:ee:db:a3:05:e5:e1:7a:30:ab:ef:36:0b:9a:
                    97:d1:ed:0f:a5:5b:d8:b8:4d:e0:b4:02:34:fe:b4:
                    41:b4:b3:76:73:be:92:98:01:02:2a:9c:a1:35:52:
                    09:82:54:05:86:14:bc:65:cb:a4:40:e6:ad:7d:48:
                    35:ba:4d:7e:6f:ae:4b:f4:7b:01:48:74:0c:1a:47:
                    21:bd:fb:0c:9a:21:ac:8a:18:81:91:b5:7c:2b:30:
                    15:a8:d4:34:a7:23:d6:4d:81:9f:0a:b5:f7:76:a6:
                    bd:50:da:79:86:e2:f1:94:1e:55:62:52:46:84:38:
                    1d:7c:d8:95:e4:b2:69:bb:1a:97:ce:a2:9a:d0:77:
                    57:d6:a4:69:6a:dd:bf:05:09:51:dc:0f:3d:56:c3:
                    e2:c2:b4:5e:30:31:85:11:c9:88:1e:2c:27:bc:95:
                    5b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:6E:C9:ED:49:D3:E3:AD:EF:D5:33:C6:89:8B:A4:B2:2B:8E:DA:6B
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14FA3BE2922A11F18745B6A8CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.247.17.0-156.247.18.255

    Signature Algorithm: sha256WithRSAEncryption
         9c:1a:2e:88:48:06:d0:4f:b7:80:82:af:2b:2d:28:08:ca:09:
         ab:98:be:9c:32:14:14:a4:62:2d:17:64:37:c5:1a:40:3d:6f:
         86:1f:36:56:c4:1d:dd:e1:40:58:9c:25:2a:58:94:d7:f4:dd:
         06:4f:5f:08:4c:95:fd:45:fa:3f:be:5b:43:81:b3:52:86:98:
         93:28:f0:66:69:ec:81:b4:22:fe:17:4c:6b:d9:4f:2a:95:0a:
         80:94:09:db:85:d9:3e:80:ae:5f:b5:67:6b:e1:77:6d:07:cb:
         ad:f2:e3:23:bf:bc:b0:2c:1b:44:07:b9:72:f5:f9:53:ff:07:
         5d:61:ec:5c:0d:ea:f9:ea:25:d7:b9:83:7e:0b:59:e0:30:2d:
         fa:0b:39:9c:54:88:28:a2:83:97:d3:dd:5f:20:e9:49:23:48:
         5b:86:77:f1:71:24:f5:fe:23:60:8a:28:6d:58:b3:cc:44:81:
         b4:6b:14:67:a0:33:38:3b:de:02:da:4e:3f:bd:41:67:06:8d:
         8f:c6:10:c0:e4:a0:dc:44:94:b9:f6:f1:77:e8:6a:fa:84:1f:
         4e:3b:23:14:a1:09:8c:2b:68:6e:35:13:52:a2:a9:e3:08:c4:
         47:80:31:52:ed:ac:28:3f:d9:ce:5b:f3:7f:fc:82:81:04:f7:
         41:a3:28:2d
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAcoMMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODA3MDYzNDQzWhcNMjkwODA2MDYzNDQzWjAYMRYw
FAYDVQQDEw02YTc1N2M4Ny1jZmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAusNvjC2RKnPpKoZj0pAxi7r3Ga8Xiu4a9qz+x0xhstdBPPPUWvaPSlgs
WBae6He8X+ay/BZBPeOalU+8AZYr0fZrePKoxUzTQ3rvl4L0DZnhCyCsps9qiC7c
Ve7bowXl4Xowq+82C5qX0e0PpVvYuE3gtAI0/rRBtLN2c76SmAECKpyhNVIJglQF
hhS8ZcukQOatfUg1uk1+b65L9HsBSHQMGkchvfsMmiGsihiBkbV8KzAVqNQ0pyPW
TYGfCrX3dqa9UNp5huLxlB5VYlJGhDgdfNiV5LJpuxqXzqKa0HdX1qRpat2/BQlR
3A89VsPiwrReMDGFEcmIHiwnvJVbtQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFFhu
ye1J0+Ot79UzxomLpLIrjtprMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xNEZBM0JFMjkyMkExMUYxODc0NUI2QThDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACc9xEDBACc9xIwDQYJKoZI
hvcNAQELBQADggEBAJwaLohIBtBPt4CCrystKAjKCauYvpwyFBSkYi0XZDfFGkA9
b4YfNlbEHd3hQFicJSpYlNf03QZPXwhMlf1F+j++W0OBs1KGmJMo8GZp7IG0Iv4X
TGvZTyqVCoCUCduF2T6Arl+1Z2vhd20Hy63y4yO/vLAsG0QHuXL1+VP/B11h7FwN
6vnqJde5g34LWeAwLfoLOZxUiCiig5fT3V8g6UkjSFuGd/FxJPX+I2CKKG1Ys8xE
gbRrFGegMzg73gLaTj+9QWcGjY/GEMDkoNxElLn28XfoavqEH047IxShCYwraG41
E1KiqeMIxEeAMVLtrCg/2c5b83/8goEE90GjKC0=
-----END CERTIFICATE-----