Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26EA1018C54011F1B9C9DA00CF1D38B0.roa
File:                     26EA1018C54011F1B9C9DA00CF1D38B0.roa (raw, json)
Hash identifier:          WDSJ0QSX+yGXxlzi+zy8vKLUGmkz6KHw6bcdx1PIO3I=
Subject key identifier:   AB:9D:20:7E:50:9C:2E:01:3E:FA:EC:4D:66:1E:39:11:78:92:CA:DC
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DCAB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26EA1018C54011F1B9C9DA00CF1D38B0.roa
Signing time:             Sun 11 Oct 2026 06:51:15 +0000
ROA not before:           Sun 11 Oct 2026 06:51:10 +0000
ROA not after:            Thu 19 Nov 2026 06:51:10 +0000
asID:                     152726
IP address blocks:        156.236.4.0/24 maxlen: 24
                          156.236.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122027 (0x1dcab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct 11 06:51:10 2026 GMT
            Not After : Nov 19 06:51:10 2026 GMT
        Subject: CN=6acb31e3-5c9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:df:2d:aa:5d:27:a3:2d:32:52:c9:50:17:a1:
                    32:71:9e:f5:df:82:97:3a:e6:4f:da:d0:c8:9b:d5:
                    67:f9:bd:a9:7a:90:49:29:aa:dc:5b:05:ec:27:7e:
                    29:cd:b7:b7:cc:c7:4d:89:3f:72:0f:16:8c:c4:5b:
                    48:33:88:7d:93:22:50:0b:f2:b4:3a:8f:2c:f8:34:
                    d2:d8:a1:44:33:15:9e:87:6c:4e:29:b1:df:d9:af:
                    65:e2:43:ca:81:63:bc:d9:36:69:34:0f:cb:d8:16:
                    37:e9:d7:40:6f:41:36:c2:0b:06:b7:cf:94:de:76:
                    0a:6e:4d:6d:61:c1:83:e2:fd:d5:b3:73:41:ce:08:
                    db:02:e8:1b:4a:19:d0:49:d3:b2:ca:3b:b2:bc:9d:
                    83:99:6a:9f:c3:19:39:6d:cc:b7:a6:36:0f:4f:4f:
                    30:ae:84:30:86:58:ac:91:6e:c2:86:38:65:64:56:
                    0d:a0:b3:63:a8:ae:e5:9b:71:7c:cc:26:ba:18:73:
                    28:55:e8:e4:2f:23:6f:ee:8c:34:f0:ee:c9:41:84:
                    4c:54:3d:40:45:f1:7d:b9:47:29:f0:42:49:f0:c1:
                    8b:fe:01:90:9e:38:f2:05:ef:ba:80:d2:7c:06:07:
                    70:76:66:fb:71:37:d1:92:4a:e1:5f:c0:5c:0b:35:
                    79:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9D:20:7E:50:9C:2E:01:3E:FA:EC:4D:66:1E:39:11:78:92:CA:DC
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26EA1018C54011F1B9C9DA00CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:ba:88:c4:52:e8:d7:33:cc:0b:52:f9:2b:55:ba:b6:ae:a4:
         2b:e5:ac:82:8e:5f:7f:c0:88:55:1e:01:5a:16:55:3e:9c:2f:
         63:77:e7:1e:8a:98:a8:17:fd:5e:72:7f:f3:8c:ac:1f:fb:d2:
         1d:14:0d:03:98:50:ed:36:9b:4b:39:4c:56:c5:ba:b3:5c:81:
         fe:42:45:dc:09:d9:6b:5a:0c:a4:7f:6f:80:54:00:a4:65:e4:
         91:61:53:8a:14:5a:a2:15:f0:6f:86:59:0c:62:6e:5e:78:c0:
         8f:d9:80:1f:78:3d:9d:c4:76:87:19:28:62:37:c2:6b:54:1b:
         00:9a:6e:d5:7d:0f:08:23:dc:6d:0b:36:4e:d3:f3:e2:38:20:
         21:95:0f:08:8d:73:dd:c4:07:8a:d2:5d:e4:06:0a:cd:19:f9:
         dc:e1:ca:f2:d1:21:6c:30:da:c8:cb:8b:dc:70:79:df:0d:70:
         ec:0f:9c:ab:a0:d9:b9:da:4f:83:0f:49:57:0f:aa:61:ae:c1:
         c4:eb:1f:57:c4:ad:73:e5:6b:ec:02:9f:d7:30:ef:66:f3:96:
         25:00:6a:ac:e7:b6:34:17:55:1b:b4:1f:13:9f:3f:9c:9f:91:
         33:3e:1b:30:23:1a:4b:66:34:11:33:35:61:bb:4c:e5:af:b7:
         db:67:93:74
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdyrMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDExMDY1MTEwWhcNMjYxMTE5MDY1MTEwWjAYMRYw
FAYDVQQDEw02YWNiMzFlMy01YzliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA398tql0noy0yUslQF6EycZ7134KXOuZP2tDIm9Vn+b2pepBJKarcWwXs
J34pzbe3zMdNiT9yDxaMxFtIM4h9kyJQC/K0Oo8s+DTS2KFEMxWeh2xOKbHf2a9l
4kPKgWO82TZpNA/L2BY36ddAb0E2wgsGt8+U3nYKbk1tYcGD4v3Vs3NBzgjbAugb
ShnQSdOyyjuyvJ2DmWqfwxk5bcy3pjYPT08wroQwhliskW7ChjhlZFYNoLNjqK7l
m3F8zCa6GHMoVejkLyNv7ow08O7JQYRMVD1ARfF9uUcp8EJJ8MGL/gGQnjjyBe+6
gNJ8Bgdwdmb7cTfRkkrhX8BcCzV5rwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKud
IH5QnC4BPvrsTWYeORF4ksrcMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNkVBMTAxOEM1NDAxMUYxQjlDOURBMDBDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnOwEMA0GCSqGSIb3DQEBCwUA
A4IBAQBquojEUujXM8wLUvkrVbq2rqQr5ayCjl9/wIhVHgFaFlU+nC9jd+ceipio
F/1ecn/zjKwf+9IdFA0DmFDtNptLOUxWxbqzXIH+QkXcCdlrWgykf2+AVACkZeSR
YVOKFFqiFfBvhlkMYm5eeMCP2YAfeD2dxHaHGShiN8JrVBsAmm7VfQ8II9xtCzZO
0/PiOCAhlQ8IjXPdxAeK0l3kBgrNGfnc4cry0SFsMNrIy4vccHnfDXDsD5yroNm5
2k+DD0lXD6phrsHE6x9XxK1z5WvsAp/XMO9m85YlAGqs57Y0F1UbtB8Tnz+cn5Ez
PhswIxpLZjQRMzVhu0zlr7fbZ5N0
-----END CERTIFICATE-----