Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/328CF4CEC22211F1B64F5712CF1D38B0.roa
File:                     328CF4CEC22211F1B64F5712CF1D38B0.roa (raw, json)
Hash identifier:          LNEJ6Ygi6sHvDub5LpkdguS/qiHcbmoqTMFPQX2G5aw=
Subject key identifier:   0F:B5:1B:53:78:68:15:D4:DA:3E:B6:CE:51:65:91:FD:AA:FA:3F:80
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DBBD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/328CF4CEC22211F1B64F5712CF1D38B0.roa
Signing time:             Wed 07 Oct 2026 07:39:16 +0000
ROA not before:           Wed 07 Oct 2026 07:39:11 +0000
ROA not after:            Sat 14 Nov 2026 07:39:11 +0000
asID:                     401650
IP address blocks:        156.236.77.0/24 maxlen: 24
                          156.236.85.0/24 maxlen: 24
                          156.236.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121789 (0x1dbbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  7 07:39:11 2026 GMT
            Not After : Nov 14 07:39:11 2026 GMT
        Subject: CN=6ac5f724-0a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3a:9d:66:3b:d5:74:29:11:4e:ee:8b:9e:1a:
                    83:75:f5:0c:24:7d:0d:7d:3a:00:9b:b5:e6:9c:6f:
                    0b:8d:f0:5c:5c:ce:8c:9b:6d:b2:40:d8:a3:90:de:
                    77:c1:be:0b:85:87:05:0f:0f:96:fd:58:a1:16:79:
                    f2:20:c5:99:6e:ee:5e:64:c3:0c:10:5a:1a:1c:9c:
                    6c:15:24:78:4f:e3:94:44:9c:6c:28:f8:5d:d6:83:
                    22:6f:dc:48:2c:12:76:59:3e:35:ab:44:9a:73:5a:
                    66:7a:ac:73:7f:70:ef:49:4d:24:12:25:08:db:f0:
                    f0:4d:b9:a1:7b:69:2f:83:7a:fe:0e:e1:7e:f8:c9:
                    82:80:9a:90:4e:39:4d:be:d6:f9:a8:1a:f6:6e:2a:
                    fd:47:82:35:de:73:05:12:5f:c6:74:90:e1:5b:8f:
                    39:27:13:25:fc:83:f0:ae:9a:fc:63:09:6d:c1:c7:
                    e3:50:4c:57:37:98:95:63:c9:85:4f:2a:94:ba:bd:
                    28:71:1b:7f:6c:c4:a9:8d:36:21:ac:7e:41:74:bc:
                    d1:da:62:2f:87:1d:da:48:3d:f1:4e:16:6e:aa:f8:
                    16:07:bd:a7:d1:d1:ec:15:62:8c:e6:51:86:e0:45:
                    37:2d:1b:3c:c1:39:a3:7e:f7:5f:63:8d:0f:99:70:
                    06:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:B5:1B:53:78:68:15:D4:DA:3E:B6:CE:51:65:91:FD:AA:FA:3F:80
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/328CF4CEC22211F1B64F5712CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.77.0/24
                  156.236.85.0/24
                  156.236.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:2c:f1:aa:7e:6a:49:64:d7:aa:32:9b:12:27:50:bf:b0:5b:
         91:b2:41:50:37:e0:1b:02:4d:54:0a:06:62:ca:98:cd:06:ff:
         9e:e8:1e:03:56:90:ab:bf:a4:d1:e5:c6:8b:81:3d:e8:5c:ac:
         03:8d:3e:da:b5:5c:c2:24:20:2a:47:5f:85:78:e5:eb:81:37:
         51:39:6f:de:30:f3:11:64:1e:0f:1c:ad:4b:f7:6a:ec:d1:62:
         93:12:ac:3c:9f:f4:51:19:f4:d3:66:10:da:af:1c:f6:04:d7:
         1b:c7:e5:3b:31:af:a5:d8:54:37:64:5e:38:ca:12:53:e9:6c:
         03:55:fc:c6:3a:5c:db:7e:ce:16:34:94:3d:81:77:7a:ec:82:
         d3:30:e9:e4:ea:ab:6c:39:0b:23:26:af:6f:df:60:f5:1f:26:
         9a:9b:f2:c1:04:e1:0d:20:21:3e:b8:d1:47:f0:1c:0d:14:91:
         28:25:2e:06:d7:57:34:3f:96:f8:fe:da:8a:f0:20:2f:94:05:
         18:a6:e4:c8:51:f2:2c:b8:00:9b:cd:e9:41:3e:e6:9f:dc:5e:
         5f:06:a3:4e:ed:ac:f8:37:3d:7b:a6:21:fe:84:9e:ce:1c:54:
         bf:03:45:bc:32:2a:d3:e6:4c:0f:0a:65:4e:bb:46:68:75:2b:
         19:0b:cd:22
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAdu9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDA3MDczOTExWhcNMjYxMTE0MDczOTExWjAYMRYw
FAYDVQQDEw02YWM1ZjcyNC0wYTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAozqdZjvVdCkRTu6LnhqDdfUMJH0NfToAm7XmnG8LjfBcXM6Mm22yQNij
kN53wb4LhYcFDw+W/VihFnnyIMWZbu5eZMMMEFoaHJxsFSR4T+OURJxsKPhd1oMi
b9xILBJ2WT41q0Sac1pmeqxzf3DvSU0kEiUI2/DwTbmhe2kvg3r+DuF++MmCgJqQ
TjlNvtb5qBr2bir9R4I13nMFEl/GdJDhW485JxMl/IPwrpr8YwltwcfjUExXN5iV
Y8mFTyqUur0ocRt/bMSpjTYhrH5BdLzR2mIvhx3aSD3xThZuqvgWB72n0dHsFWKM
5lGG4EU3LRs8wTmjfvdfY40PmXAGXQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFA+1
G1N4aBXU2j62zlFlkf2q+j+AMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zMjhDRjRDRUMyMjIxMUYxQjY0RjU3MTJDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAnOxNAwQAnOxVAwQAnOxoMA0G
CSqGSIb3DQEBCwUAA4IBAQApLPGqfmpJZNeqMpsSJ1C/sFuRskFQN+AbAk1UCgZi
ypjNBv+e6B4DVpCrv6TR5caLgT3oXKwDjT7atVzCJCAqR1+FeOXrgTdROW/eMPMR
ZB4PHK1L92rs0WKTEqw8n/RRGfTTZhDarxz2BNcbx+U7Ma+l2FQ3ZF44yhJT6WwD
VfzGOlzbfs4WNJQ9gXd67ILTMOnk6qtsOQsjJq9v32D1Hyaam/LBBOENICE+uNFH
8BwNFJEoJS4G11c0P5b4/tqK8CAvlAUYpuTIUfIsuACbzelBPuaf3F5fBqNO7az4
Nz17piH+hJ7OHFS/A0W8MirT5kwPCmVOu0ZodSsZC80i
-----END CERTIFICATE-----