Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44BC8C4E9C7B11F184E82DB0CE1D38B0.roa
File:                     44BC8C4E9C7B11F184E82DB0CE1D38B0.roa (raw, json)
Hash identifier:          Qda6iqBX07RUjeHsPtGsVXZ8KDMm6/oZbcCsF7TVzEc=
Subject key identifier:   EC:DA:CA:26:A2:4F:18:BD:6A:F6:93:C9:0E:8E:B7:B2:C8:5D:37:0E
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CEB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44BC8C4E9C7B11F184E82DB0CE1D38B0.roa
Signing time:             Thu 20 Aug 2026 09:41:08 +0000
ROA not before:           Thu 20 Aug 2026 09:41:03 +0000
ROA not after:            Thu 24 Sep 2026 09:41:03 +0000
asID:                     18013
IP address blocks:        156.239.24.0/21 maxlen: 24
                          156.239.32.0/20 maxlen: 24
                          156.239.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118452 (0x1ceb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 20 09:41:03 2026 GMT
            Not After : Sep 24 09:41:03 2026 GMT
        Subject: CN=6a86cbb4-acfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8f:84:b9:b6:2f:23:0d:e7:a0:84:8f:5a:cb:
                    9f:96:1a:c6:0b:9f:6d:c7:7e:1d:7b:32:1d:37:8a:
                    47:c7:ad:bd:9e:90:fc:c6:04:bf:16:39:9e:16:e2:
                    30:14:0f:33:e8:54:4a:6b:c7:11:0e:20:0d:8a:dc:
                    be:47:c7:3b:fd:c5:e6:a4:d7:c1:5a:e9:04:34:ce:
                    6a:13:0f:b2:c8:d3:69:07:ed:6c:34:5f:7d:ba:42:
                    b6:94:d7:c8:69:f7:c6:00:1f:4b:7f:68:4d:84:7c:
                    4e:3e:23:62:4e:ca:ca:01:65:a0:b6:4c:32:23:55:
                    c9:53:b8:27:98:d3:9f:63:11:51:09:0b:70:bb:3a:
                    06:95:cc:5e:21:79:7e:a4:ae:a1:5b:de:1a:84:e2:
                    44:f7:5f:18:3f:0e:04:dd:e4:bb:80:1a:23:25:d1:
                    4b:8c:d8:84:53:2f:34:5c:92:d0:db:95:c3:f6:dc:
                    86:42:d7:17:92:c9:80:1b:51:79:b5:d0:98:04:df:
                    f6:c5:db:27:ab:bf:35:89:1c:90:1c:f6:96:62:53:
                    74:3c:85:35:c9:16:de:70:c4:2b:07:2c:87:04:99:
                    57:61:ae:85:8b:9e:94:a1:99:6f:77:aa:d7:aa:29:
                    1e:19:3c:d7:ad:ef:ec:e2:e7:8e:4f:27:3d:30:47:
                    08:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DA:CA:26:A2:4F:18:BD:6A:F6:93:C9:0E:8E:B7:B2:C8:5D:37:0E
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44BC8C4E9C7B11F184E82DB0CE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.239.24.0-156.239.51.255

    Signature Algorithm: sha256WithRSAEncryption
         99:7a:a4:90:0a:e7:98:c7:99:95:ed:20:3f:ae:96:e3:0a:f4:
         a5:04:0e:6e:56:14:77:b6:df:e3:b8:02:3e:1e:87:d6:6e:c0:
         74:4d:6a:c3:4a:15:1b:11:eb:aa:00:55:f7:f5:88:1e:5f:d2:
         8e:3a:6f:46:06:54:b3:3a:c8:0b:54:51:6d:40:45:f7:42:76:
         4d:ad:9f:af:c3:a3:b9:2c:bb:b4:20:40:8f:0a:1c:29:4a:29:
         79:6e:58:72:3c:a6:49:5d:23:0d:a2:ba:63:c2:33:3f:1b:e1:
         a3:33:f8:31:15:f7:55:e6:64:14:a6:44:f7:ce:10:b2:1b:59:
         0f:3f:0f:c1:1c:6c:3b:da:3f:b2:58:19:69:77:d0:0b:52:57:
         0a:aa:f8:7b:c1:e2:ae:b1:ad:34:ed:04:0c:5b:16:e4:9b:ce:
         23:17:8b:2a:ef:db:cb:e3:4f:b6:13:03:11:6f:4a:bd:31:a5:
         4b:ad:51:8c:4e:aa:e3:ae:d9:5d:5d:6a:40:bc:0e:5d:d9:0a:
         43:01:41:b1:31:5c:db:75:fc:42:88:af:de:2a:5f:45:20:d7:
         36:65:7f:d2:2c:3d:ec:f2:2f:73:e9:01:1c:ec:3e:58:0d:cf:
         b1:8e:7c:87:21:6f:8b:93:b1:58:44:a8:70:3b:0a:9f:3c:9c:
         d0:68:cf:61
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAc60MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODIwMDk0MTAzWhcNMjYwOTI0MDk0MTAzWjAYMRYw
FAYDVQQDEw02YTg2Y2JiNC1hY2ZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAw4+EubYvIw3noISPWsuflhrGC59tx34dezIdN4pHx629npD8xgS/Fjme
FuIwFA8z6FRKa8cRDiANity+R8c7/cXmpNfBWukENM5qEw+yyNNpB+1sNF99ukK2
lNfIaffGAB9Lf2hNhHxOPiNiTsrKAWWgtkwyI1XJU7gnmNOfYxFRCQtwuzoGlcxe
IXl+pK6hW94ahOJE918YPw4E3eS7gBojJdFLjNiEUy80XJLQ25XD9tyGQtcXksmA
G1F5tdCYBN/2xdsnq781iRyQHPaWYlN0PIU1yRbecMQrByyHBJlXYa6Fi56UoZlv
d6rXqikeGTzXre/s4ueOTyc9MEcItwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOza
yiaiTxi9avaTyQ6Ot7LIXTcOMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80NEJDOEM0RTlDN0IxMUYxODRFODJEQjBDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAOc7xgDBAKc7zAwDQYJKoZI
hvcNAQELBQADggEBAJl6pJAK55jHmZXtID+uluMK9KUEDm5WFHe23+O4Aj4eh9Zu
wHRNasNKFRsR66oAVff1iB5f0o46b0YGVLM6yAtUUW1ARfdCdk2tn6/Do7ksu7Qg
QI8KHClKKXluWHI8pkldIw2iumPCMz8b4aMz+DEV91XmZBSmRPfOELIbWQ8/D8Ec
bDvaP7JYGWl30AtSVwqq+HvB4q6xrTTtBAxbFuSbziMXiyrv28vjT7YTAxFvSr0x
pUutUYxOquOu2V1dakC8Dl3ZCkMBQbExXNt1/EKIr94qX0Ug1zZlf9IsPezyL3Pp
ARzsPlgNz7GOfIchb4uTsVhEqHA7Cp88nNBoz2E=
-----END CERTIFICATE-----