Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A0F0B6C9FA311F1A5686E0DCF1D38B0.roa
File:                     2A0F0B6C9FA311F1A5686E0DCF1D38B0.roa (raw, json)
Hash identifier:          q/HydcLDyu/aLeY5Mtvsy4PDRP1GHNCisVGJmSPLs/g=
Subject key identifier:   43:F3:E4:A7:07:52:FE:A3:AB:7A:5A:09:48:F8:E0:70:BB:08:6A:A3
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D087
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A0F0B6C9FA311F1A5686E0DCF1D38B0.roa
Signing time:             Mon 24 Aug 2026 10:04:16 +0000
ROA not before:           Mon 24 Aug 2026 10:04:12 +0000
ROA not after:            Fri 02 Oct 2026 10:04:12 +0000
asID:                     44559
IP address blocks:        156.233.194.0/24 maxlen: 24
                          156.233.195.0/24 maxlen: 24
                          156.233.204.0/24 maxlen: 24
                          156.239.17.0/24 maxlen: 24
                          156.239.19.0/24 maxlen: 24
                          156.239.20.0/24 maxlen: 24
                          156.239.21.0/24 maxlen: 24
                          156.239.22.0/24 maxlen: 24
                          156.239.133.0/24 maxlen: 24
                          156.239.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118919 (0x1d087)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 10:04:12 2026 GMT
            Not After : Oct  2 10:04:12 2026 GMT
        Subject: CN=6a8c1720-e5e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:eb:5e:b7:41:aa:6e:13:11:a0:25:7d:b3:01:
                    1d:36:3a:8b:57:a8:62:c7:bc:80:42:31:8b:06:f5:
                    9b:ce:4e:e0:01:b9:a6:74:83:76:57:c0:10:f8:97:
                    89:dd:d6:ee:b4:21:e2:64:8f:ef:16:6b:79:86:06:
                    c7:46:2d:15:e0:b6:3d:fa:76:6d:fe:fd:b6:5d:90:
                    a3:55:69:b4:6d:9d:86:2d:b1:6b:b4:aa:33:c3:c2:
                    5e:5c:5a:08:2b:15:01:e0:e1:47:73:93:ff:ed:57:
                    49:9c:e9:85:7c:43:b6:c4:c2:f1:37:3b:4b:92:8d:
                    8c:f1:a6:5b:2e:2a:45:ed:41:60:b2:9e:27:7d:ef:
                    3d:8e:e4:04:f7:c2:b4:38:46:8a:28:46:5d:9e:4c:
                    74:72:97:8a:c0:50:72:c5:ce:29:b7:a3:79:7b:cc:
                    21:93:3b:6b:30:15:2e:49:08:d7:1e:ce:c7:4d:1d:
                    e4:4b:20:ff:b1:f6:1d:cb:13:f6:0c:75:7d:c5:40:
                    2e:7f:a8:fb:7a:35:2b:02:d7:08:6c:c6:bb:47:66:
                    16:9d:de:e3:5d:ea:24:ad:14:5b:20:24:dc:bb:e8:
                    ef:80:93:2d:2c:48:2d:6e:99:b2:d4:13:ab:7e:b3:
                    25:88:35:cc:f6:db:30:98:f8:d4:bc:18:81:6b:09:
                    c3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F3:E4:A7:07:52:FE:A3:AB:7A:5A:09:48:F8:E0:70:BB:08:6A:A3
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A0F0B6C9FA311F1A5686E0DCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.233.194.0/23
                  156.233.204.0/24
                  156.239.17.0/24
                  156.239.19.0-156.239.22.255
                  156.239.133.0/24
                  156.239.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:f2:d6:45:00:15:89:a9:2f:e9:2b:6f:a2:50:8b:8b:74:c1:
         ad:d4:e4:7f:9c:0b:0f:c3:f1:de:d1:0f:1c:2a:23:19:67:2e:
         f3:d5:ff:3f:89:c0:04:16:46:9f:06:14:ad:21:7d:11:d1:8c:
         a9:dd:07:5c:2a:87:48:0f:79:58:56:05:58:2f:c8:90:7f:33:
         fd:c4:39:03:2b:e4:1f:49:8e:1d:e3:f1:60:78:65:5d:80:b9:
         ec:d3:e6:e6:6e:d7:bf:5f:c7:a1:fb:d6:b4:53:f3:77:94:9f:
         fb:46:d7:f3:78:b0:93:b1:9c:ed:3b:e5:4a:f9:ba:93:c0:40:
         88:55:0c:f3:30:86:30:b3:f4:9e:7c:45:bd:ae:09:27:0a:e0:
         c1:12:d1:ff:48:cf:13:dc:dd:2f:a0:7e:aa:78:da:e6:e2:74:
         eb:6e:a9:2e:23:1d:55:2c:f2:d9:44:c2:8d:9a:ad:ac:c4:30:
         5f:7e:0b:b9:84:79:25:fe:ab:98:e1:4b:14:58:0a:d8:9d:4f:
         0a:fc:e3:3a:98:8f:de:45:66:00:e8:52:28:e8:3d:bb:25:49:
         02:bb:35:8b:80:3f:cd:b9:00:a5:e6:3e:2b:6f:b7:23:73:67:
         48:bd:17:dc:fe:b5:34:35:96:24:44:8b:b1:3d:7f:ef:b6:9f:
         bc:14:45:3b
-----BEGIN CERTIFICATE-----
MIIFpzCCBI+gAwIBAgIDAdCHMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI0MTAwNDEyWhcNMjYxMDAyMTAwNDEyWjAYMRYw
FAYDVQQDEw02YThjMTcyMC1lNWUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8+tet0GqbhMRoCV9swEdNjqLV6hix7yAQjGLBvWbzk7gAbmmdIN2V8AQ
+JeJ3dbutCHiZI/vFmt5hgbHRi0V4LY9+nZt/v22XZCjVWm0bZ2GLbFrtKozw8Je
XFoIKxUB4OFHc5P/7VdJnOmFfEO2xMLxNztLko2M8aZbLipF7UFgsp4nfe89juQE
98K0OEaKKEZdnkx0cpeKwFByxc4pt6N5e8whkztrMBUuSQjXHs7HTR3kSyD/sfYd
yxP2DHV9xUAuf6j7ejUrAtcIbMa7R2YWnd7jXeokrRRbICTcu+jvgJMtLEgtbpmy
1BOrfrMliDXM9tswmPjUvBiBawnDmwIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFEPz
5KcHUv6jq3paCUj44HC7CGqjMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yQTBGMEI2QzlGQTMxMUYxQTU2ODZFMERDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQBnOnCAwQAnOnMAwQAnO8RMAwD
BACc7xMDBACc7xYDBACc74UDBACc74cwDQYJKoZIhvcNAQELBQADggEBABfy1kUA
FYmpL+krb6JQi4t0wa3U5H+cCw/D8d7RDxwqIxlnLvPV/z+JwAQWRp8GFK0hfRHR
jKndB1wqh0gPeVhWBVgvyJB/M/3EOQMr5B9Jjh3j8WB4ZV2AuezT5uZu179fx6H7
1rRT83eUn/tG1/N4sJOxnO075Ur5upPAQIhVDPMwhjCz9J58Rb2uCScK4MES0f9I
zxPc3S+gfqp42ubidOtuqS4jHVUs8tlEwo2arazEMF9+C7mEeSX+q5jhSxRYCtid
Twr84zqYj95FZgDoUijoPbslSQK7NYuAP825AKXmPitvtyNzZ0i9F9z+tTQ1liRE
i7E9f++2n7wURTs=
-----END CERTIFICATE-----