Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25D6BCAEA13111F1A4B29CFFCE1D38B0.roa
File:                     25D6BCAEA13111F1A4B29CFFCE1D38B0.roa (raw, json)
Hash identifier:          hev8L+nYNRV1SjR6y3mY+YHBK69wmfbncCw7NmyhKUg=
Subject key identifier:   7C:1B:79:DE:91:62:B8:AD:5B:21:79:16:53:84:0E:A3:78:90:9A:2C
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D11D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25D6BCAEA13111F1A4B29CFFCE1D38B0.roa
Signing time:             Wed 26 Aug 2026 09:33:09 +0000
ROA not before:           Wed 26 Aug 2026 09:33:05 +0000
ROA not after:            Sat 25 Aug 2029 09:33:05 +0000
asID:                     17561
IP address blocks:        156.235.218.0/24 maxlen: 24
                          156.235.219.0/24 maxlen: 24
                          156.235.220.0/24 maxlen: 24
                          156.235.221.0/24 maxlen: 24
                          156.235.222.0/24 maxlen: 24
                          156.235.223.0/24 maxlen: 24
                          156.235.224.0/24 maxlen: 24
                          156.235.225.0/24 maxlen: 24
                          156.235.226.0/24 maxlen: 24
                          156.235.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119069 (0x1d11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 09:33:05 2026 GMT
            Not After : Aug 25 09:33:05 2029 GMT
        Subject: CN=6a8eb2d5-f0be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1c:37:a5:ca:59:87:1e:43:07:95:b3:47:48:
                    f2:1d:dd:94:ad:65:0e:c8:21:41:46:dc:d6:29:3d:
                    59:d9:c1:75:02:5c:53:95:56:f9:dc:8b:04:0d:91:
                    5e:cd:27:19:44:f1:2a:27:84:86:9f:b9:f0:8b:17:
                    57:73:de:8e:5b:15:0c:42:1d:6e:05:e7:bb:bc:1f:
                    da:e3:e9:77:11:72:fa:a5:07:95:98:a1:a7:a7:71:
                    80:42:1c:21:89:e5:7c:66:70:54:5a:84:fb:01:2d:
                    9a:ff:31:7b:63:f6:79:7a:56:89:c1:4f:47:36:2e:
                    17:39:4e:cb:0c:92:ed:e8:4f:14:db:ca:03:2a:85:
                    99:bc:a1:e5:6b:6f:96:b8:b7:8c:19:6e:ab:9c:0e:
                    17:b9:2b:26:51:b8:17:e2:8a:9c:54:a0:83:6f:28:
                    d9:fc:60:fa:17:ed:be:86:72:55:91:90:04:23:7c:
                    92:a4:73:f0:56:e5:d3:50:cb:cc:61:23:e2:07:98:
                    10:e8:30:92:ee:5c:46:cf:0e:cc:c3:92:0e:03:15:
                    35:21:6f:52:c0:9a:2b:34:9b:e9:ab:bc:79:9b:96:
                    eb:fb:59:26:9e:6b:f7:8b:1f:58:d8:a0:7a:f7:2d:
                    2b:e7:0e:3f:00:c7:21:02:23:f9:c4:20:0d:f8:db:
                    36:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1B:79:DE:91:62:B8:AD:5B:21:79:16:53:84:0E:A3:78:90:9A:2C
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/25D6BCAEA13111F1A4B29CFFCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.235.218.0-156.235.227.255

    Signature Algorithm: sha256WithRSAEncryption
         b0:45:d3:55:c9:31:32:b1:85:9a:31:f7:34:54:54:d8:2a:f0:
         06:41:9e:61:31:8c:af:c2:ca:24:ba:25:51:35:b2:a9:ab:3f:
         97:5c:33:16:a0:cd:65:df:9b:81:43:43:08:f7:00:63:10:68:
         91:27:7b:2e:30:8f:8e:79:b3:31:1b:89:e2:79:e1:69:0e:6c:
         29:e5:c8:08:7e:07:29:24:79:d0:44:ed:69:e9:b8:dc:1f:68:
         19:f6:ec:c9:c7:d4:cb:f9:68:86:8e:73:17:23:e4:2c:09:a7:
         7d:bf:27:ae:e7:74:8f:1b:67:52:4b:46:9c:3f:17:dc:44:b3:
         f3:e9:c8:b7:ee:ff:1a:61:78:d6:89:13:4b:9d:6e:5f:12:00:
         56:a6:b2:c2:5b:4e:fd:26:03:6e:b6:13:d3:9c:04:df:e0:90:
         ac:87:80:af:b7:ce:e9:4b:a0:2a:a7:73:b0:12:f4:62:b5:5e:
         05:87:03:38:3e:7e:92:cd:18:db:3f:7d:80:e8:0c:b0:99:da:
         45:1b:c0:6a:3d:0b:a9:a6:73:da:53:60:e3:ba:1a:dc:90:57:
         cd:cc:1a:55:e5:5e:d8:3f:96:dd:da:c4:58:fe:36:db:c5:64:
         dd:46:8f:25:dc:6e:e0:43:36:01:69:e8:9a:a0:9c:a1:80:48:
         90:46:e3:5b
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAdEdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI2MDkzMzA1WhcNMjkwODI1MDkzMzA1WjAYMRYw
FAYDVQQDEw02YThlYjJkNS1mMGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuRw3pcpZhx5DB5WzR0jyHd2UrWUOyCFBRtzWKT1Z2cF1AlxTlVb53IsE
DZFezScZRPEqJ4SGn7nwixdXc96OWxUMQh1uBee7vB/a4+l3EXL6pQeVmKGnp3GA
QhwhieV8ZnBUWoT7AS2a/zF7Y/Z5elaJwU9HNi4XOU7LDJLt6E8U28oDKoWZvKHl
a2+WuLeMGW6rnA4XuSsmUbgX4oqcVKCDbyjZ/GD6F+2+hnJVkZAEI3ySpHPwVuXT
UMvMYSPiB5gQ6DCS7lxGzw7Mw5IOAxU1IW9SwJorNJvpq7x5m5br+1kmnmv3ix9Y
2KB69y0r5w4/AMchAiP5xCAN+Ns2gwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFHwb
ed6RYritWyF5FlOEDqN4kJosMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNUQ2QkNBRUExMzExMUYxQTRCMjlDRkZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGc69oDBAKc6+AwDQYJKoZI
hvcNAQELBQADggEBALBF01XJMTKxhZox9zRUVNgq8AZBnmExjK/CyiS6JVE1sqmr
P5dcMxagzWXfm4FDQwj3AGMQaJEney4wj455szEbieJ54WkObCnlyAh+BykkedBE
7WnpuNwfaBn27MnH1Mv5aIaOcxcj5CwJp32/J67ndI8bZ1JLRpw/F9xEs/PpyLfu
/xpheNaJE0udbl8SAFamssJbTv0mA262E9OcBN/gkKyHgK+3zulLoCqnc7AS9GK1
XgWHAzg+fpLNGNs/fYDoDLCZ2kUbwGo9C6mmc9pTYOO6GtyQV83MGlXlXtg/lt3a
xFj+NtvFZN1GjyXcbuBDNgFp6JqgnKGASJBG41s=
-----END CERTIFICATE-----