Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54B8B734A11D11F188C83A09CF1D38B0.roa
File:                     54B8B734A11D11F188C83A09CF1D38B0.roa (raw, json)
Hash identifier:          CHJSQaWRbntTZsXi73VppQEVoArrQrRGi9L6StH7Y2I=
Subject key identifier:   AA:CD:1E:09:B2:AA:D5:D2:B0:1A:27:9E:56:0A:3E:7D:BE:FB:31:F9
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01D0EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54B8B734A11D11F188C83A09CF1D38B0.roa
Signing time:             Wed 26 Aug 2026 07:11:18 +0000
ROA not before:           Wed 26 Aug 2026 07:11:13 +0000
ROA not after:            Thu 10 Sep 2026 07:11:13 +0000
asID:                     139646
IP address blocks:        156.240.0.0/19 maxlen: 24
                          156.240.32.0/20 maxlen: 24
                          156.240.48.0/21 maxlen: 24
                          156.242.10.0/23 maxlen: 24
                          156.242.12.0/22 maxlen: 24
                          156.246.0.0/20 maxlen: 24
                          156.246.16.0/23 maxlen: 24
                          156.249.28.0/22 maxlen: 24
                          156.255.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119023 (0x1d0ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 26 07:11:13 2026 GMT
            Not After : Sep 10 07:11:13 2026 GMT
        Subject: CN=6a8e9195-79ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:69:c2:b0:2f:4e:51:eb:36:d1:39:b7:e1:5a:
                    79:d3:0b:6d:13:db:4d:e1:e0:0c:b3:89:17:ae:09:
                    0d:ab:4d:49:78:91:cd:80:54:78:85:94:20:26:97:
                    e8:e5:f8:a7:a4:41:d9:a1:79:6d:06:de:ac:3f:1c:
                    e0:da:ee:8e:60:5b:4d:bc:81:ef:35:95:36:cd:62:
                    f8:a3:52:9e:db:01:5c:d5:00:7a:c5:6e:e9:00:d6:
                    73:2a:55:80:10:60:88:e2:db:65:40:bf:5f:40:72:
                    58:5b:c5:00:ff:b4:9b:fd:5b:26:f0:95:94:08:a9:
                    cb:5f:0c:15:48:31:ab:93:e2:71:c9:99:d9:16:27:
                    b3:a3:a6:bb:25:91:ea:be:93:17:ae:8a:c5:81:f8:
                    4b:96:43:6a:18:22:a3:22:2e:7f:0a:47:bb:09:c4:
                    a4:bc:c7:85:89:2b:3c:f7:64:db:ee:be:88:d4:d7:
                    a6:28:9b:f1:fe:c3:78:3e:3d:06:84:56:5e:19:85:
                    f5:d1:d2:fb:d8:e6:e5:7d:75:01:f5:3a:cb:b3:93:
                    3c:db:07:1d:bc:57:da:93:b7:8b:df:a8:74:74:28:
                    ca:7d:b4:6e:e4:5b:c8:65:fb:b9:5b:d3:44:2e:65:
                    50:34:49:66:ff:5f:09:3e:c7:9b:8a:12:47:5b:4f:
                    05:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CD:1E:09:B2:AA:D5:D2:B0:1A:27:9E:56:0A:3E:7D:BE:FB:31:F9
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54B8B734A11D11F188C83A09CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.240.0.0-156.240.55.255
                  156.242.10.0-156.242.15.255
                  156.246.0.0-156.246.17.255
                  156.249.28.0/22
                  156.255.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:25:c9:97:d0:26:31:ec:d4:7c:bd:b9:ab:6d:7e:e7:3f:9c:
         95:29:4f:65:3c:6a:3b:85:7e:66:57:70:0c:53:05:aa:d7:a9:
         2e:14:a9:eb:2b:e9:80:12:9f:9a:26:a5:6b:4c:68:94:63:cb:
         98:7b:9b:78:cc:97:9d:bf:3d:6d:89:ec:1f:d6:d1:68:5b:30:
         d0:de:1e:a6:c2:9c:5e:72:66:46:7e:4f:49:30:da:4f:7e:d0:
         23:86:c1:3c:64:54:2c:d7:f6:e5:20:3a:7e:aa:06:37:17:ab:
         5c:f2:70:43:81:b5:84:f7:81:96:7a:57:07:eb:f1:d7:ac:1a:
         81:fe:5c:e2:5f:07:67:e9:60:91:b1:32:ba:34:47:02:b8:66:
         0c:53:24:c0:7a:a2:78:57:e5:81:de:c8:a3:9e:05:6a:06:f6:
         a6:d0:4d:fb:99:32:73:b8:c7:f1:a4:c1:c5:37:c6:e3:29:ef:
         88:7f:d8:5e:c8:8d:6b:06:3d:22:24:0d:92:c1:be:c8:57:08:
         f3:b8:ca:4b:f3:22:eb:03:00:57:67:3d:21:15:6f:a7:9e:05:
         c0:92:40:c2:3a:26:67:c8:b2:eb:38:bb:75:36:53:ae:4b:08:
         c5:08:e6:1a:fe:ea:83:7b:7a:bf:8d:90:24:ea:b4:02:d9:51:
         16:c0:64:18
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIDAdDvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODI2MDcxMTEzWhcNMjYwOTEwMDcxMTEzWjAYMRYw
FAYDVQQDEw02YThlOTE5NS03OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAymnCsC9OUes20Tm34Vp50wttE9tN4eAMs4kXrgkNq01JeJHNgFR4hZQg
Jpfo5finpEHZoXltBt6sPxzg2u6OYFtNvIHvNZU2zWL4o1Ke2wFc1QB6xW7pANZz
KlWAEGCI4ttlQL9fQHJYW8UA/7Sb/Vsm8JWUCKnLXwwVSDGrk+JxyZnZFiezo6a7
JZHqvpMXrorFgfhLlkNqGCKjIi5/Cke7CcSkvMeFiSs892Tb7r6I1NemKJvx/sN4
Pj0GhFZeGYX10dL72OblfXUB9TrLs5M82wcdvFfak7eL36h0dCjKfbRu5FvIZfu5
W9NELmVQNElm/18JPsebihJHW08F5QIDAQABo4IC0DCCAswwHQYDVR0OBBYEFKrN
HgmyqtXSsBonnlYKPn2++zH5MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81NEI4QjczNEExMUQxMUYxODhDODNBMDlDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
ME0GCCsGAQUFBwEHAQH/BD4wPDA6BAIAATA0MAsDAwSc8AMEA5zwMDAMAwQBnPIK
AwQEnPIAMAsDAwGc9gMEAZz2EAMEApz5HAMEAJz/ADANBgkqhkiG9w0BAQsFAAOC
AQEACyXJl9AmMezUfL25q21+5z+clSlPZTxqO4V+ZldwDFMFqtepLhSp6yvpgBKf
miala0xolGPLmHubeMyXnb89bYnsH9bRaFsw0N4epsKcXnJmRn5PSTDaT37QI4bB
PGRULNf25SA6fqoGNxerXPJwQ4G1hPeBlnpXB+vx16wagf5c4l8HZ+lgkbEyujRH
ArhmDFMkwHqieFflgd7Io54Fagb2ptBN+5kyc7jH8aTBxTfG4ynviH/YXsiNawY9
IiQNksG+yFcI87jKS/Mi6wMAV2c9IRVvp54FwJJAwjomZ8iy6zi7dTZTrksIxQjm
Gv7qg3t6v42QJOq0AtlRFsBkGA==
-----END CERTIFICATE-----