Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E40D5E49F8D11F18F3D430CCF1D38B0.roa
File:                     4E40D5E49F8D11F18F3D430CCF1D38B0.roa (raw, json)
Hash identifier:          B34uf0+waxodA898rQ2X4bdUBCEqff59qvzLxK4+iP4=
Subject key identifier:   CB:A0:A9:10:E8:A5:FF:A0:8E:BD:45:9B:45:22:0A:53:BA:F5:28:0D
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D050
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E40D5E49F8D11F18F3D430CCF1D38B0.roa
Signing time:             Mon 24 Aug 2026 07:27:48 +0000
ROA not before:           Mon 24 Aug 2026 07:27:44 +0000
ROA not after:            Wed 16 Sep 2026 07:27:44 +0000
asID:                     154321
IP address blocks:        156.226.176.0/22 maxlen: 24
                          156.226.176.0/24 maxlen: 24
                          156.226.177.0/24 maxlen: 24
                          156.226.178.0/24 maxlen: 24
                          156.226.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118864 (0x1d050)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 24 07:27:44 2026 GMT
            Not After : Sep 16 07:27:44 2026 GMT
        Subject: CN=6a8bf274-a56b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:f2:0d:69:90:bc:09:fe:27:76:b8:1c:2e:
                    51:a2:c8:52:35:d7:e0:e2:a6:14:fc:a9:8d:fa:95:
                    c4:04:d9:fb:33:92:f5:f7:dc:a6:43:a4:55:d5:f8:
                    81:93:1c:f3:cf:52:97:ed:2f:53:e8:96:3f:e6:65:
                    fe:40:80:19:19:2e:60:14:a8:23:10:f0:9d:20:04:
                    69:f0:bd:aa:32:d5:0d:4a:3a:59:46:64:ed:ee:fd:
                    d4:09:8c:25:9c:89:48:d1:a0:87:01:73:7b:65:ea:
                    15:04:fa:88:4d:6b:65:db:d4:4e:31:29:5f:ab:f1:
                    87:ba:e2:ac:4f:93:73:27:f3:4e:1f:df:ac:67:6f:
                    7e:81:73:a9:77:4c:88:73:c3:11:c9:6e:13:98:a5:
                    c1:91:5b:b3:0f:4f:8e:0c:32:8a:0d:47:24:e7:61:
                    e7:67:1e:2e:de:28:d6:76:7e:9e:d2:5e:06:7d:d3:
                    5b:6b:26:88:4e:fc:48:df:77:60:73:87:8c:4c:5f:
                    b8:e6:e1:77:16:e9:51:25:32:af:f6:a5:c8:b5:a9:
                    33:72:0e:77:a7:d1:15:0a:a1:72:1e:5b:97:04:12:
                    4b:be:1e:a5:49:94:bc:83:85:67:32:3a:cf:f4:42:
                    f2:68:a0:a6:cf:fc:fa:af:c3:8e:a4:b4:34:2f:a7:
                    5a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A0:A9:10:E8:A5:FF:A0:8E:BD:45:9B:45:22:0A:53:BA:F5:28:0D
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E40D5E49F8D11F18F3D430CCF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.226.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:a4:0a:3c:7d:82:83:1a:1c:ca:60:64:78:82:b3:17:8d:aa:
         a4:bd:f5:7f:f6:57:84:14:05:e1:01:35:da:2c:6b:21:96:90:
         33:f5:81:e6:69:d6:e6:6c:34:98:6d:c5:2b:77:c1:f7:d4:7a:
         27:02:02:bc:45:f6:1a:cd:5d:b7:ec:d5:40:b9:91:33:bb:2a:
         3e:83:07:7b:d1:a5:df:1d:b7:b9:4c:8b:77:5e:6e:bf:3c:c9:
         b9:13:1f:ff:ba:7d:7e:22:72:4a:35:10:2b:bb:a0:5c:f4:1f:
         59:db:07:af:29:63:83:63:8a:e4:11:07:08:48:b2:64:ad:a0:
         4f:ce:3a:9c:83:66:ce:c5:db:f9:d1:84:db:a4:2f:a7:5e:3b:
         e3:00:b8:55:96:51:2e:65:e3:77:88:55:d5:30:98:45:2c:5d:
         23:f2:2d:81:d9:7b:b3:b6:4d:2b:1a:88:48:4b:23:5a:fa:c8:
         5b:e7:69:c6:a3:40:5a:fc:88:f8:77:ac:4d:7c:48:6c:d2:b7:
         fc:8c:55:89:c8:32:66:74:7c:dd:92:5f:56:6f:35:39:3c:ec:
         0a:dc:07:79:e3:94:e9:39:9b:d8:bd:2a:13:07:75:27:57:e8:
         ea:61:6a:85:ba:0b:4c:91:a2:2a:f2:76:b7:ef:c9:da:ca:8f:
         d7:33:99:b6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAdBQMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI0MDcyNzQ0WhcNMjYwOTE2MDcyNzQ0WjAYMRYw
FAYDVQQDEw02YThiZjI3NC1hNTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEArJHyDWmQvAn+J3a4HC5RoshSNdfg4qYU/KmN+pXEBNn7M5L199ymQ6RV
1fiBkxzzz1KX7S9T6JY/5mX+QIAZGS5gFKgjEPCdIARp8L2qMtUNSjpZRmTt7v3U
CYwlnIlI0aCHAXN7ZeoVBPqITWtl29ROMSlfq/GHuuKsT5NzJ/NOH9+sZ29+gXOp
d0yIc8MRyW4TmKXBkVuzD0+ODDKKDUck52HnZx4u3ijWdn6e0l4GfdNbayaITvxI
33dgc4eMTF+45uF3FulRJTKv9qXItakzcg53p9EVCqFyHluXBBJLvh6lSZS8g4Vn
MjrP9ELyaKCmz/z6r8OOpLQ0L6daCwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMug
qRDopf+gjr1Fm0UiClO69SgNMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC80RTQwRDVFNDlGOEQxMUYxOEYzRDQzMENDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnOKwMA0GCSqGSIb3DQEBCwUA
A4IBAQB2pAo8fYKDGhzKYGR4grMXjaqkvfV/9leEFAXhATXaLGshlpAz9YHmadbm
bDSYbcUrd8H31HonAgK8RfYazV237NVAuZEzuyo+gwd70aXfHbe5TIt3Xm6/PMm5
Ex//un1+InJKNRAru6Bc9B9Z2wevKWODY4rkEQcISLJkraBPzjqcg2bOxdv50YTb
pC+nXjvjALhVllEuZeN3iFXVMJhFLF0j8i2B2Xuztk0rGohISyNa+shb52nGo0Ba
/Ij4d6xNfEhs0rf8jFWJyDJmdHzdkl9WbzU5POwK3Ad545TpOZvYvSoTB3UnV+jq
YWqFugtMkaIq8na378nayo/XM5m2
-----END CERTIFICATE-----