Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44AB7FE4B9A411F18EBF93A4CE1D38B0.roa
File:                     44AB7FE4B9A411F18EBF93A4CE1D38B0.roa (raw, json)
Hash identifier:          XTTG4Sc7TdwyzVuaSvE5/yO6VZRJVjRqBE4tC53+gvY=
Subject key identifier:   D1:65:48:A4:72:1E:ED:DF:EF:4C:7E:FB:40:60:8A:71:F4:B1:B8:1E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D912
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44AB7FE4B9A411F18EBF93A4CE1D38B0.roa
Signing time:             Sat 26 Sep 2026 12:17:41 +0000
ROA not before:           Sat 26 Sep 2026 12:17:37 +0000
ROA not after:            Sun 25 Oct 2026 12:17:37 +0000
asID:                     271355
IP address blocks:        156.236.195.0/24 maxlen: 24
                          156.236.201.0/24 maxlen: 24
                          156.236.202.0/24 maxlen: 24
                          156.236.203.0/24 maxlen: 24
                          156.236.204.0/24 maxlen: 24
                          156.236.205.0/24 maxlen: 24
                          156.236.206.0/24 maxlen: 24
                          156.236.207.0/24 maxlen: 24
                          156.236.208.0/24 maxlen: 24
                          156.236.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121106 (0x1d912)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Sep 26 12:17:37 2026 GMT
            Not After : Oct 25 12:17:37 2026 GMT
        Subject: CN=6ab7b7e5-7a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a1:67:08:64:9e:a9:3a:1f:e6:bb:7f:45:a0:
                    3f:df:92:f4:9e:a1:f6:1c:a5:ae:3b:83:e1:06:70:
                    26:93:c8:3e:90:77:cf:29:9a:ca:ad:b2:40:98:58:
                    56:6f:93:cd:c9:82:4b:80:9b:24:f5:d8:38:cb:d9:
                    9f:8b:32:72:52:5e:ee:b9:8a:7f:b4:d0:4c:6b:8a:
                    45:f7:18:38:29:c4:15:52:46:a0:f3:87:4b:42:12:
                    f5:0c:8f:d4:f0:99:d7:b0:52:f7:d8:c1:f9:fa:e4:
                    fb:fc:f8:5b:cd:60:66:d5:ed:53:f0:99:6a:c9:37:
                    75:90:a1:5a:19:15:1b:ce:51:ea:e5:a3:1f:d4:8d:
                    fe:22:89:ca:c6:d9:2e:6f:da:bd:04:c5:33:8c:5e:
                    96:5a:44:d6:24:f2:ee:f4:90:f4:54:00:83:b5:38:
                    96:f5:fa:75:c9:aa:c1:83:e6:b3:78:3d:93:4e:18:
                    bc:06:e1:52:46:61:17:7b:3b:4d:85:12:0f:41:01:
                    dd:67:e9:53:46:da:28:2b:ed:47:96:76:c6:da:70:
                    ed:1a:3d:9c:eb:27:a0:5a:b2:ef:aa:28:5a:80:f8:
                    1f:01:63:52:90:ca:c0:39:1a:f9:cc:f5:c6:3e:c9:
                    26:43:26:16:51:c5:2e:ae:98:13:c4:9f:15:cd:52:
                    0d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:65:48:A4:72:1E:ED:DF:EF:4C:7E:FB:40:60:8A:71:F4:B1:B8:1E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44AB7FE4B9A411F18EBF93A4CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.236.195.0/24
                  156.236.201.0-156.236.209.255

    Signature Algorithm: sha256WithRSAEncryption
         53:08:f4:d5:54:9d:46:32:09:54:21:22:ba:a7:a4:75:63:90:
         8e:f2:69:3d:0c:3e:a3:f8:72:b8:1f:14:13:c6:9b:3c:dd:96:
         a2:ba:2f:65:ce:45:e6:6f:2a:63:5f:3a:21:34:1c:c2:83:9f:
         8e:d2:2c:9d:b6:32:07:cf:6f:9d:90:f4:70:b0:56:07:10:c1:
         5b:b4:be:2a:62:90:ce:e5:87:34:c8:f4:e5:ec:51:61:75:bc:
         b7:f6:ad:f4:96:5d:7f:8f:dd:f5:94:3d:13:03:e7:8d:2b:39:
         b5:03:8c:4f:05:ad:c2:22:65:ae:bd:da:ed:f9:55:61:5e:76:
         0d:e5:6b:ba:99:3d:4f:4e:b5:9e:f2:c3:46:6d:b4:0d:3b:fc:
         f7:12:ee:04:12:b9:61:39:17:0f:95:89:7b:d4:ba:86:6c:22:
         68:73:43:83:88:ab:41:59:e6:ba:f3:80:0c:3d:75:cd:3e:48:
         ba:b1:a0:98:97:c8:b3:70:ef:7a:a4:a4:05:20:5c:02:69:df:
         5c:8e:13:b9:3e:c3:86:c0:d1:72:8c:ef:fd:7f:c6:45:83:a5:
         61:2e:d8:86:b2:5d:e6:10:17:61:f4:0c:13:bd:ad:40:75:2f:
         b7:e3:97:d1:b3:76:ff:52:16:56:35:c8:15:53:cf:54:06:1c:
         9c:57:a0:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----