Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CCB066CC3E011F1A01A0801CF1D38B0.roa
File:                     5CCB066CC3E011F1A01A0801CF1D38B0.roa (raw, json)
Hash identifier:          3YQ6Dx7AMewkfHxrc2Jegx0Z96Xjc08AD5n9F0wpy24=
Subject key identifier:   29:14:FD:81:98:47:E8:70:15:64:31:AA:EE:7A:F2:EB:07:82:B4:FA
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01DC3D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CCB066CC3E011F1A01A0801CF1D38B0.roa
Signing time:             Fri 09 Oct 2026 12:53:03 +0000
ROA not before:           Fri 09 Oct 2026 12:52:58 +0000
ROA not after:            Wed 11 Nov 2026 12:52:58 +0000
asID:                     218919
IP address blocks:        156.252.204.0/24 maxlen: 24
                          156.252.205.0/24 maxlen: 24
                          156.252.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121917 (0x1dc3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Oct  9 12:52:58 2026 GMT
            Not After : Nov 11 12:52:58 2026 GMT
        Subject: CN=6ac8e3ae-994c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9c:bc:7e:46:ca:76:bb:ff:9d:d0:8d:30:38:
                    7b:84:3d:7c:49:ed:2e:7e:24:d4:b6:0d:21:00:cf:
                    3d:1e:2a:38:fa:35:73:89:84:f7:74:0d:01:78:1b:
                    5f:4a:30:f6:26:b8:57:b3:a2:d2:f7:49:67:5c:45:
                    47:a9:7a:84:7b:c3:b2:af:0b:22:0a:b3:87:a1:6b:
                    f7:e2:0b:30:7a:07:25:38:70:81:ff:2d:19:f1:6d:
                    2f:ca:72:71:0b:ed:df:75:ac:ea:b6:87:5e:21:6d:
                    8b:fb:a2:24:77:a4:62:b6:02:5d:f9:c5:ca:1c:6f:
                    6e:59:2f:56:1a:12:3b:b4:49:32:6b:d9:50:dc:38:
                    87:3d:1f:13:46:82:41:ce:71:e2:4f:fa:34:fb:7e:
                    13:10:95:ec:f9:e7:61:c4:29:95:4d:3d:71:36:3e:
                    3c:39:3e:85:d3:b0:61:46:8c:70:57:92:35:f0:41:
                    45:6c:08:68:04:62:c5:e7:de:98:aa:78:49:b8:a2:
                    07:73:e4:64:58:fd:43:88:59:98:c5:8f:98:c1:63:
                    61:7e:85:97:87:a8:88:d3:48:e3:64:7e:af:cc:ec:
                    12:7f:41:52:f0:f9:7b:23:a7:4d:64:6d:d7:01:8c:
                    c0:fe:42:77:44:ae:76:a3:27:63:f2:9d:26:cf:09:
                    8c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:14:FD:81:98:47:E8:70:15:64:31:AA:EE:7A:F2:EB:07:82:B4:FA
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CCB066CC3E011F1A01A0801CF1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.252.204.0-156.252.206.255

    Signature Algorithm: sha256WithRSAEncryption
         17:d5:5a:75:10:3d:35:4f:f4:1f:7b:ca:8e:40:60:bd:d5:02:
         fe:7e:d3:96:fa:bc:d8:60:13:e2:d6:e3:95:67:30:eb:ed:9b:
         08:05:15:11:59:47:97:22:ff:bb:20:0a:a0:40:55:86:12:db:
         04:d0:e8:07:53:50:a6:67:72:5d:2a:ab:90:40:d3:60:cf:cb:
         c8:c2:6d:dc:3e:bc:02:98:73:b7:51:94:b1:a0:87:6c:05:13:
         00:34:d1:fe:aa:bb:30:3b:0e:24:91:71:48:fc:c0:3b:bc:cc:
         ad:0f:bf:82:02:41:95:4f:f4:4a:32:12:86:91:58:c1:ce:68:
         9b:54:3d:e7:d2:2d:7b:28:ec:07:f8:a1:74:30:da:97:ba:17:
         ba:3f:59:a6:46:be:b2:77:bb:bc:47:fa:5b:74:d2:03:7d:e0:
         d3:5b:f7:3f:24:b4:fa:39:6e:0f:f1:28:9a:e0:19:64:eb:a6:
         94:96:49:47:3e:02:3d:4d:2c:73:c6:12:5a:af:60:dd:af:61:
         61:18:38:c1:7e:9b:88:0b:b7:10:68:b4:17:29:74:42:1f:5c:
         dd:74:f1:38:0e:fa:db:df:0d:da:a5:54:77:bd:a3:fd:c8:8f:
         37:c5:93:d5:2f:1c:a6:8f:72:91:85:06:78:7f:3a:97:70:ba:
         b8:4d:00:e8
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAdw9MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYxMDA5MTI1MjU4WhcNMjYxMTExMTI1MjU4WjAYMRYw
FAYDVQQDEw02YWM4ZTNhZS05OTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5py8fkbKdrv/ndCNMDh7hD18Se0ufiTUtg0hAM89Hio4+jVziYT3dA0B
eBtfSjD2JrhXs6LS90lnXEVHqXqEe8OyrwsiCrOHoWv34gswegclOHCB/y0Z8W0v
ynJxC+3fdazqtodeIW2L+6Ikd6RitgJd+cXKHG9uWS9WGhI7tEkya9lQ3DiHPR8T
RoJBznHiT/o0+34TEJXs+edhxCmVTT1xNj48OT6F07BhRoxwV5I18EFFbAhoBGLF
596YqnhJuKIHc+RkWP1DiFmYxY+YwWNhfoWXh6iI00jjZH6vzOwSf0FS8Pl7I6dN
ZG3XAYzA/kJ3RK52oydj8p0mzwmMGwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCkU
/YGYR+hwFWQxqu568usHgrT6MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81Q0NCMDY2Q0MzRTAxMUYxQTAxQTA4MDFDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKc/MwDBACc/M4wDQYJKoZI
hvcNAQELBQADggEBABfVWnUQPTVP9B97yo5AYL3VAv5+05b6vNhgE+LW45VnMOvt
mwgFFRFZR5ci/7sgCqBAVYYS2wTQ6AdTUKZncl0qq5BA02DPy8jCbdw+vAKYc7dR
lLGgh2wFEwA00f6quzA7DiSRcUj8wDu8zK0Pv4ICQZVP9EoyEoaRWMHOaJtUPefS
LXso7Af4oXQw2pe6F7o/WaZGvrJ3u7xH+lt00gN94NNb9z8ktPo5bg/xKJrgGWTr
ppSWSUc+Aj1NLHPGElqvYN2vYWEYOMF+m4gLtxBotBcpdEIfXN108TgO+tvfDdql
VHe9o/3IjzfFk9UvHKaPcpGFBnh/OpdwurhNAOg=
-----END CERTIFICATE-----